$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa File: 2a3871dd-5224-3aba-89af-880506c8bbf0.roa (raw, json) Hash identifier: wjhxR/bV0eODhqPP+EBei0RDrkrZiffuDpkIY5TJ5gM= Subject key identifier: 68:56:11:4C:29:04:71:F7:5E:04:F3:6A:0F:29:06:D5:C7:1D:C0:FB Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584AA42B800BB7CF9DA4A6848A80 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 6169 IP address blocks: 209.50.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:80:0b:b7:cf:9d:a4:a6:84:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=04cb0d66-92ac-41b9-9074-1cb374dd1d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:c7:2c:fa:19:a4:c2:3b:87:89:d0:90:7f: ce:16:84:e5:6e:b5:da:ea:e3:1b:45:72:93:b6:6f: ee:d6:b3:ca:31:16:c1:9c:54:e7:66:95:c6:fb:96: 91:12:e5:9c:c4:6f:94:19:5c:ea:79:76:9c:35:48: ce:10:b6:2c:b7:90:9c:0d:c9:d5:cf:59:e0:13:92: 86:8a:c6:22:77:58:be:4d:20:40:02:77:4e:22:62: 04:9f:5f:75:a8:69:ec:01:16:86:ed:28:2b:7e:81: ad:8a:fd:e8:29:5c:c5:17:31:da:d9:28:36:5e:0b: d4:86:a8:fb:32:14:3b:ba:83:e8:f5:31:b9:05:8d: 9b:25:b7:6d:f5:f8:6d:2d:f3:93:23:e4:f1:99:72: 57:35:1b:27:18:64:f1:bf:b6:5c:3a:cb:a0:82:8e: 1f:8b:c9:3c:d2:3a:41:9f:d2:af:09:4e:cb:2a:c8: b3:ff:d9:80:f5:f6:f0:e2:23:4e:04:fc:de:4b:36: 7d:61:15:11:d7:7f:7f:eb:ae:72:c6:fe:19:af:3a: 25:32:ca:68:71:44:df:5d:e4:27:73:72:e1:35:d5: 8e:a0:15:32:1c:14:d4:ca:eb:21:ec:f8:c8:71:e3: fc:a5:79:53:43:70:fc:9f:92:57:fa:34:bf:eb:69: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:11:4C:29:04:71:F7:5E:04:F3:6A:0F:29:06:D5:C7:1D:C0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e0:f7:32:e2:58:aa:b1:6d:0b:89:df:0e:1e:4d:2c:bb:84: 10:0c:2f:99:f8:26:b0:57:38:a0:58:c9:45:06:f6:e7:c2:4d: ba:70:3e:67:c2:d3:cb:21:03:6f:68:28:75:c8:2e:26:8b:f4: 8e:d5:10:b5:32:36:b4:8f:7b:81:6e:a6:89:6e:3c:38:ca:6f: e7:72:e8:c1:3f:ce:d1:69:61:fd:d6:b9:d7:50:14:19:4d:34: b3:7e:47:44:4b:25:85:2d:06:1f:04:13:87:31:1a:d7:2e:24: 7c:13:9c:bc:9d:e4:c2:e7:a0:78:34:1d:79:5a:d6:54:70:3b: 81:fe:85:cf:52:14:fb:01:a0:ef:92:03:9a:23:87:25:72:51: 36:c9:95:b4:64:6b:7c:47:cc:fc:8f:6c:e1:0d:6e:f4:5d:01: 9a:4f:39:70:e6:b6:de:39:10:6a:a4:01:2c:f6:ba:08:79:61: 52:ee:09:ca:14:79:6a:91:d0:26:10:04:24:a1:f5:38:9d:85: 0b:5f:98:d6:ad:54:e7:40:c2:87:9e:07:87:ef:69:bc:ea:fb: 90:78:64:16:c6:85:a9:f6:94:63:52:7f:88:fc:18:db:be:da: 44:1b:37:7e:42:b8:0a:44:7f:b3:31:bb:36:23:18:a3:e5:9d: ef:61:9b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4ALt8+dpKaEioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MDRjYjBkNjYtOTJhYy00MWI5LTkwNzQtMWNiMzc0ZGQxZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplrHLPoZpMI7h4nQkH/OFoTlbrXa6uMbRXKT tm/u1rPKMRbBnFTnZpXG+5aREuWcxG+UGVzqeXacNUjOELYst5CcDcnVz1ngE5KG isYid1i+TSBAAndOImIEn191qGnsARaG7SgrfoGtiv3oKVzFFzHa2Sg2XgvUhqj7 MhQ7uoPo9TG5BY2bJbdt9fhtLfOTI+TxmXJXNRsnGGTxv7ZcOsuggo4fi8k80jpB n9KvCU7LKsiz/9mA9fbw4iNOBPzeSzZ9YRUR139/665yxv4ZrzolMspocUTfXeQn c3LhNdWOoBUyHBTUyush7PjIceP8pXlTQ3D8n5JX+jS/62nYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhWEUwpBHH3XgTzag8pBtXHHcD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMmEzODcxZGQtNTIyNC0z YWJhLTg5YWYtODgwNTA2YzhiYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXg9zLiWKqxbQuJ3w4eTSy7hBAML5n4JrBXOKBYyUUG9ufCTbpwPmfC 08shA29oKHXILiaL9I7VELUyNrSPe4FupoluPDjKb+dy6ME/ztFpYf3WuddQFBlN NLN+R0RLJYUtBh8EE4cxGtcuJHwTnLyd5MLnoHg0HXla1lRwO4H+hc9SFPsBoO+S A5ojhyVyUTbJlbRka3xHzPyPbOENbvRdAZpPOXDmtt45EGqkASz2ugh5YVLuCcoU eWqR0CYQBCSh9TidhQtfmNatVOdAwoeeB4fvabzq+5B4ZBbGhan2lGNSf4j8GNu+ 2kQbN35CuApEf7MxuzYjGKPlne9hm5w= -----END CERTIFICATE-----Generated at Thu Jul 31 01:58:14 2025 by rpki-client