$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4bfae90d-b56b-350a-bf4d-b05a19ae1c36.roa File: 4bfae90d-b56b-350a-bf4d-b05a19ae1c36.roa (raw, json) Hash identifier: 6rVgT/ofa77otLiqcVDpCXFDfy2lPqsmVAYWarqqxbk= Subject key identifier: C1:30:10:15:F4:39:A0:43:C8:B0:E5:C0:AE:BF:48:2A:67:2F:8E:08 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858487FB5D3A652DFEE0489420300 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4bfae90d-b56b-350a-bf4d-b05a19ae1c36.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 989 IP address blocks: 209.0.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d3:a6:52:df:ee:04:89:42:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=1dd5cd6c-e1fb-435d-b394-b597533eeeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:a3:7b:79:36:f6:e9:f1:5a:2e:d8:cb:63: 75:d4:a5:0d:53:f2:8f:f1:4c:61:d5:69:f5:9b:fa: 7a:4f:46:61:4f:30:e5:b5:2e:28:4e:44:c8:72:75: a3:5f:4d:24:84:26:09:3c:8c:10:bc:ae:c7:b2:e5: 44:be:d1:8d:35:6b:ad:b5:db:28:9e:3d:a3:c1:4a: e6:f6:a1:c7:38:d0:f7:d8:ea:12:57:de:e8:4f:2b: bc:b5:3c:7d:fc:1b:c2:59:00:b3:7d:cb:c0:73:a3: 01:7a:b2:19:d4:36:de:24:53:07:c1:a6:9d:ff:0e: f8:4e:38:bf:55:87:77:53:c5:44:79:f0:30:3f:7a: 22:5f:7f:f8:9e:94:bb:1f:55:eb:12:32:2c:cd:a1: 5f:df:4e:3d:75:ec:15:50:3f:e4:27:ff:2c:9c:04: 74:4a:c5:28:bc:f6:e9:b5:30:d6:f0:b9:9e:9f:fe: a8:72:44:79:9d:a6:b1:bb:fc:e4:4d:2d:68:7c:a9: 29:b6:13:aa:33:b6:0f:52:7f:1f:08:4d:b2:31:fa: 3d:f5:c7:85:f2:70:a3:c2:65:06:63:93:93:50:9d: eb:50:e5:56:a5:15:6a:bd:9a:2d:90:4b:fd:5f:e4: 20:83:53:d3:bb:09:41:1b:af:0c:7c:53:21:44:db: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:10:15:F4:39:A0:43:C8:B0:E5:C0:AE:BF:48:2A:67:2F:8E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4bfae90d-b56b-350a-bf4d-b05a19ae1c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.0.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4d:af:46:ed:6a:16:4f:46:b4:6e:e3:96:dd:6b:1d:7d:4d: 7e:35:b2:e7:52:3a:07:7a:23:55:56:3d:1c:c6:62:9c:de:f3: 6a:75:a1:2a:5b:4c:21:ba:54:b4:0b:27:6f:d2:31:19:e9:cf: ec:b2:83:f5:ad:92:ee:59:73:49:c0:1c:2c:c6:f4:bd:09:33: 2c:7b:85:cf:1b:f2:b3:1b:77:ba:e4:61:99:c0:1f:b5:96:53: 3d:fa:23:d6:70:2f:0f:8e:63:69:80:55:40:e4:7a:e4:5b:b3: a1:fe:8b:cb:5f:f0:bb:78:a5:df:cb:50:52:c5:32:64:33:fa: c4:12:0b:94:8c:1c:38:f8:94:a6:27:f3:44:ae:87:89:95:41: cd:58:9e:f7:eb:f2:bc:35:1e:62:ae:a5:e3:d6:c0:35:4b:be: 16:1c:ee:82:0a:04:35:6a:59:60:97:12:c8:61:25:fa:c4:05: a7:ac:5a:3a:76:5c:c3:45:ad:cf:6a:ab:54:ca:16:65:9d:c2: 08:a4:17:a2:5a:d7:a7:b0:cf:67:25:75:36:1c:12:52:1e:d9: 4b:78:3d:b2:56:95:e5:2b:4a:c4:ed:5a:79:0f:7c:92:fa:fc: 5d:99:58:fa:56:33:3b:2d:97:a5:be:0a:66:80:cd:a2:5c:81: 8c:f2:12:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdOmUt/uBIlCAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk MWRkNWNkNmMtZTFmYi00MzVkLWIzOTQtYjU5NzUzM2VlZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjuje3k29unxWi7Yy2N11KUNU/KP8Uxh1Wn1 m/p6T0ZhTzDltS4oTkTIcnWjX00khCYJPIwQvK7HsuVEvtGNNWuttdsonj2jwUrm 9qHHOND32OoSV97oTyu8tTx9/BvCWQCzfcvAc6MBerIZ1DbeJFMHwaad/w74Tji/ VYd3U8VEefAwP3oiX3/4npS7H1XrEjIszaFf3049dewVUD/kJ/8snAR0SsUovPbp tTDW8Lmen/6ockR5naaxu/zkTS1ofKkpthOqM7YPUn8fCE2yMfo99ceF8nCjwmUG Y5OTUJ3rUOVWpRVqvZotkEv9X+Qgg1PTuwlBG68MfFMhRNvdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEwEBX0OaBDyLDlwK6/SCpnL44IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGJmYWU5MGQtYjU2Yi0z NTBhLWJmNGQtYjA1YTE5YWUxYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QAyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhNr0btahZPRrRu45bdax19TX41sudSOgd6I1VWPRzGYpze82p1oSpb TCG6VLQLJ2/SMRnpz+yyg/Wtku5Zc0nAHCzG9L0JMyx7hc8b8rMbd7rkYZnAH7WW Uz36I9ZwLw+OY2mAVUDkeuRbs6H+i8tf8Lt4pd/LUFLFMmQz+sQSC5SMHDj4lKYn 80Suh4mVQc1Ynvfr8rw1HmKupePWwDVLvhYc7oIKBDVqWWCXEshhJfrEBaesWjp2 XMNFrc9qq1TKFmWdwgikF6Ja16ewz2cldTYcElIe2Ut4PbJWleUrSsTtWnkPfJL6 /F2ZWPpWMzstl6W+CmaAzaJcgYzyElc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:59 2025 by rpki-client