$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json) Hash identifier: eZwmQQBFHeX2+4Bx8K2tRcw40tDMyJgQxaXaGwe1JYA= Subject key identifier: D3:FE:8A:98:08:5D:9F:0D:B3:1F:0C:5C:2E:C7:5E:A6:B8:70:86:0F Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584968B425A0DEF6D493944F8780 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 11739 IP address blocks: 209.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:25:a0:de:f6:d4:93:94:4f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=4e80e1e7-183f-4c8a-ba50-46dcb7d92acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:62:ff:67:65:0d:9a:94:93:69:51:7e:a1: e6:91:e0:04:02:55:fb:13:ac:18:3c:c3:9b:b5:76: 8c:b7:f2:97:4a:5c:e1:4c:f3:2f:9b:da:86:5f:34: 71:c6:88:07:58:f3:c1:ff:76:1d:5f:9a:cf:dc:3f: 1c:52:21:54:98:eb:32:09:f4:23:9d:17:c4:21:69: c3:03:44:9d:fa:03:c6:35:6b:6c:2d:65:6d:e9:17: b0:9a:fe:eb:aa:da:05:4b:d1:c5:1f:63:a9:91:1a: c4:76:70:59:4a:48:93:c6:57:02:26:b5:46:3d:f9: 6c:66:62:b4:46:f6:9b:a7:b6:1c:3b:21:af:f5:ae: e2:08:40:2d:a2:ba:e3:c1:45:b5:12:c5:50:9a:48: 16:43:c9:d0:71:f3:b9:21:b9:94:a2:1b:44:70:7a: d3:92:47:07:9f:34:6b:99:54:f5:39:0f:14:29:5a: 0d:02:d5:2c:c6:b8:9c:40:21:17:87:1b:44:0f:6c: 3e:13:b7:87:6c:56:d5:ab:a1:34:f0:8a:24:55:34: 2d:b0:b0:ab:36:df:8b:83:c3:13:df:6d:86:68:e1: 1b:e9:a3:d3:e2:66:99:e1:26:45:d0:05:71:db:d0: e8:77:19:a1:6a:87:f8:6a:f0:e1:04:02:08:5e:ab: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:8A:98:08:5D:9F:0D:B3:1F:0C:5C:2E:C7:5E:A6:B8:70:86:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1d:70:66:66:cb:91:bb:8c:a9:7c:f1:3b:fa:11:f4:5f:89: 2a:a6:26:4b:2c:b8:4e:bf:fb:cd:be:d1:b2:d3:06:df:24:5e: 9d:d4:f8:d8:3f:d4:ae:6e:7c:aa:ea:7c:fc:ce:33:21:bb:b9: 79:c5:e3:fe:db:71:61:14:6e:75:24:20:f6:35:d7:ce:c5:35: ac:36:e7:17:56:d3:40:e3:8b:dc:ad:75:f1:6d:91:dd:1e:eb: ef:db:e3:14:06:d0:4e:1f:95:ac:4c:23:9f:4e:e3:a7:6c:df: 40:9a:ab:3f:86:c0:75:31:7c:c4:8a:b8:26:e9:22:5d:27:46: 0d:e5:83:49:69:45:08:14:db:67:c6:f6:b1:43:a3:19:b3:21: 86:31:d4:36:78:e2:f4:a9:0e:ce:29:7c:b0:a6:39:34:15:21: 6b:90:3e:5a:50:40:fc:6b:c3:8e:12:5a:8e:07:4d:d8:7f:37: d6:7e:0a:5a:3d:9f:04:b1:a9:8f:3f:bb:2c:ed:16:0a:f1:9e: 2b:49:fd:2a:5a:ea:cc:80:92:13:54:fd:2f:64:01:88:c3:29: c1:d1:4f:64:a0:69:6c:48:a3:f3:37:f7:e6:0e:f1:ad:43:69: 03:5e:c2:80:57:3b:59:db:e3:9d:c1:9e:29:13:d8:e6:8e:10: bf:08:76:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCWg3vbUk5RPh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NGU4MGUxZTctMTgzZi00YzhhLWJhNTAtNDZkY2I3ZDkyYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguti/2dlDZqUk2lRfqHmkeAEAlX7E6wYPMOb tXaMt/KXSlzhTPMvm9qGXzRxxogHWPPB/3YdX5rP3D8cUiFUmOsyCfQjnRfEIWnD A0Sd+gPGNWtsLWVt6Rewmv7rqtoFS9HFH2OpkRrEdnBZSkiTxlcCJrVGPflsZmK0 Rvabp7YcOyGv9a7iCEAtorrjwUW1EsVQmkgWQ8nQcfO5IbmUohtEcHrTkkcHnzRr mVT1OQ8UKVoNAtUsxricQCEXhxtED2w+E7eHbFbVq6E08IokVTQtsLCrNt+Lg8MT 322GaOEb6aPT4maZ4SZF0AVx29Dodxmhaof4avDhBAIIXqtQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP+ipgIXZ8Nsx8MXC7HXqa4cIYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNDllNWYyOTAtNjE4Zi0z NTUwLWIwNTktMGM2MjMyMjYzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQdcGZmy5G7jKl88Tv6EfRfiSqmJkssuE6/+82+0bLTBt8kXp3U+Ng/ 1K5ufKrqfPzOMyG7uXnF4/7bcWEUbnUkIPY1187FNaw25xdW00Dji9ytdfFtkd0e 6+/b4xQG0E4flaxMI59O46ds30Caqz+GwHUxfMSKuCbpIl0nRg3lg0lpRQgU22fG 9rFDoxmzIYYx1DZ44vSpDs4pfLCmOTQVIWuQPlpQQPxrw44SWo4HTdh/N9Z+Clo9 nwSxqY8/uyztFgrxnitJ/Spa6syAkhNU/S9kAYjDKcHRT2SgaWxIo/M39+YO8a1D aQNewoBXO1nb453BnikT2OaOEL8Idqg= -----END CERTIFICATE-----Generated at Sun Apr 6 01:10:05 2025 by rpki-client