$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa File: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (raw, json) Hash identifier: s5exoqlvt/FzG9PrrKWVlZEsiDpdufRadhTvWqsPYdw= Subject key identifier: F5:AA:55:69:3F:49:CB:67:15:85:35:C0:12:34:AE:E6:6D:95:69:6F Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F432858494B63FC389F827FC0AA551540 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fc:38:9f:82:7f:c0:aa:55:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=42785c48-96ec-46b5-94e9-18750d08c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:32:db:d8:5c:f9:91:57:a3:ad:8e:d6:1a: 5e:a5:b9:b0:8b:ba:d2:19:09:9c:7f:95:c2:3f:b0: 37:e2:7e:1b:8b:af:6e:8c:18:29:3e:4d:b1:03:d4: 81:31:c8:da:5d:20:a1:b2:0c:fb:94:cc:e3:78:06: 61:e4:2b:1d:43:2c:8a:d9:87:cc:29:63:f2:8a:84: 18:05:f9:48:fa:7e:76:b7:bd:cc:9a:29:c0:c2:10: cb:4d:7e:88:f3:ac:67:0b:31:63:db:63:9f:dc:b7: 5e:dd:c7:97:df:7b:3e:09:a0:e5:70:10:31:77:79: 3a:e8:19:fb:18:e7:49:4c:20:9e:5e:cc:9c:55:f3: 2b:62:ca:81:b8:ba:fd:10:e2:e7:b5:41:51:77:df: d3:fc:ac:9c:86:cc:c4:2b:5f:a7:24:c4:69:88:14: 88:6d:49:27:30:72:b1:4d:ff:02:25:c3:fa:a5:fd: 15:95:82:1c:03:52:82:40:61:2d:69:c1:ad:ab:9c: 73:79:61:68:b6:c7:61:76:41:e5:c8:4f:80:05:ee: 07:53:f6:56:74:14:b9:a5:a0:4f:77:4d:28:29:44: ac:99:66:f7:fb:81:51:1e:e2:1a:0a:00:bc:6c:7e: f5:f3:a1:60:90:bb:88:1f:0a:ba:ef:f4:b2:9f:03: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AA:55:69:3F:49:CB:67:15:85:35:C0:12:34:AE:E6:6D:95:69:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b7:6b:6c:48:89:39:d7:18:86:bc:c4:61:26:e2:94:8e:d2: cd:90:02:e0:69:eb:e8:d0:70:e0:e6:ca:b4:41:34:57:b4:73: 07:97:06:e2:a6:1a:94:2b:d7:b8:28:43:4a:26:e2:aa:9a:d4: 82:2c:7f:36:63:6d:fb:80:79:b4:92:41:d4:c0:b3:c9:fe:59: 69:7d:fa:7a:44:70:a0:74:84:b6:e3:cb:d2:5e:84:e2:2b:03: 0f:1b:ce:5f:ea:5b:a8:b8:c7:3c:e3:3a:b4:18:d3:60:08:f2: 4c:17:e4:98:78:0a:fd:0a:d9:8d:55:40:2a:b7:2c:f8:4f:a3: 4b:50:7d:1a:3c:2e:b6:49:94:41:d2:68:56:4f:92:c5:3d:54: a3:af:24:fb:95:56:18:33:fc:81:08:e1:1a:f0:40:94:df:d6: 33:8b:1b:b5:f9:ee:72:d9:51:d4:d6:37:9c:68:4e:88:75:21: 77:ed:4d:b6:d1:35:56:3b:2d:92:16:98:c0:47:f3:03:89:95: 7f:19:56:d9:16:43:f8:6e:e4:e8:e4:ae:14:f7:e2:1c:ba:ae: 7d:c1:51:dd:37:90:7b:18:56:4c:1c:d5:39:bd:d5:ca:6e:58: 52:04:74:5f:cc:ae:15:21:0d:27:1d:35:35:eb:64:cd:c0:08: fc:52:50:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/w4n4J/wKpVFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDI3ODVjNDgtOTZlYy00NmI1LTk0ZTktMTg3NTBkMDhjNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyEy29hc+ZFXo62O1hpepbmwi7rSGQmcf5XC P7A34n4bi69ujBgpPk2xA9SBMcjaXSChsgz7lMzjeAZh5CsdQyyK2YfMKWPyioQY BflI+n52t73MminAwhDLTX6I86xnCzFj22Of3Lde3ceX33s+CaDlcBAxd3k66Bn7 GOdJTCCeXsycVfMrYsqBuLr9EOLntUFRd9/T/KychszEK1+nJMRpiBSIbUknMHKx Tf8CJcP6pf0VlYIcA1KCQGEtacGtq5xzeWFotsdhdkHlyE+ABe4HU/ZWdBS5paBP d00oKUSsmWb3+4FRHuIaCgC8bH7186FgkLuIHwq67/SynwMyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWqVWk/SctnFYU1wBI0ruZtlWlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvZjg4MWVhZmMtNWViYi0z ZTk2LWI0NTktMWVlZTBmNTNjYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB23a2xIiTnXGIa8xGEm4pSO0s2QAuBp6+jQcODmyrRBNFe0cweXBuKm GpQr17goQ0om4qqa1IIsfzZjbfuAebSSQdTAs8n+WWl9+npEcKB0hLbjy9JehOIr Aw8bzl/qW6i4xzzjOrQY02AI8kwX5Jh4Cv0K2Y1VQCq3LPhPo0tQfRo8LrZJlEHS aFZPksU9VKOvJPuVVhgz/IEI4RrwQJTf1jOLG7X57nLZUdTWN5xoToh1IXftTbbR NVY7LZIWmMBH8wOJlX8ZVtkWQ/hu5OjkrhT34hy6rn3BUd03kHsYVkwc1Tm91cpu WFIEdF/MrhUhDScdNTXrZM3ACPxSUEo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:34 2025 by rpki-client