$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa File: 49212b0f-98c1-33f7-b49b-5bbad34aa488.roa (raw, json) Hash identifier: Opa9uqcmlhZHuA92RMc7c35v1gMohp71N5j89ajmLDc= Subject key identifier: F8:8C:81:79:64:54:C5:2B:95:E6:A2:B1:51:A6:74:1F:CD:78:7C:24 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F432858486695B4BBC40DBE43017ACE80 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 14877 IP address blocks: 209.50.137.0/24 maxlen: 32 209.50.138.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b4:bb:c4:0d:be:43:01:7a:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=899c29ee-2af0-45a3-81b0-abffe6cf9477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:dc:11:62:ac:3d:13:7b:f2:03:a1:33:e0: a1:2a:d6:1d:fa:6a:59:72:f0:d3:67:10:8e:e0:33: 81:40:eb:7a:1b:11:d8:86:55:71:d0:e7:ef:07:c3: 0f:7e:8e:fb:41:b7:61:21:22:37:b0:73:40:d3:fe: 87:82:8f:32:95:6e:04:a8:42:ac:7a:81:91:b8:42: 17:c7:b2:98:a5:85:be:5b:28:16:a6:2e:4e:4d:cc: 72:1e:c1:21:65:1e:ef:68:04:fe:f6:be:4c:8c:8a: be:a2:f1:ac:bb:69:95:10:93:c4:dd:3b:c7:04:fc: 3d:0f:6d:db:41:e9:8b:19:0e:c5:f7:34:7e:3f:c1: a5:22:8b:b7:4a:9a:d1:c8:3d:bd:d5:53:f9:62:30: d2:34:9a:6d:39:36:36:33:cc:91:82:49:70:0e:e8: 0f:e7:56:96:7d:42:89:cf:60:3f:4c:5a:ca:2a:0d: 85:3c:1d:fc:5b:87:f1:89:14:e0:d7:b3:a7:9b:78: 92:af:5c:7c:65:4f:2d:22:2b:0d:2c:10:73:31:0b: 84:e5:50:58:03:38:5d:d5:80:df:60:d2:55:11:49: cc:50:c2:3f:f0:0b:fd:28:55:30:d1:42:be:20:7a: 8d:2f:9c:e8:4b:21:ce:08:ee:e6:85:50:40:eb:4d: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:81:79:64:54:C5:2B:95:E6:A2:B1:51:A6:74:1F:CD:78:7C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.137.0-209.50.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1e:32:f9:70:75:aa:88:75:dd:65:c7:f5:3f:70:57:a1:ef: 7d:4a:04:78:a8:a0:c0:2d:21:4c:05:fe:36:19:8f:96:77:43: b5:04:2d:4a:65:5f:d8:5e:c9:92:dd:e5:01:00:66:3c:71:32: e5:50:44:e1:83:c2:4c:91:99:90:d8:a0:df:91:e9:f5:95:5a: 3f:23:e6:9d:0c:05:ce:88:ca:69:db:82:72:fb:8e:56:f3:c1: 5c:34:56:bd:00:d3:b8:35:a9:c8:46:63:d6:35:b6:18:c8:77: ff:8b:90:0d:42:d7:a7:71:c9:fb:01:85:7a:c2:37:aa:56:47: 3f:dc:fc:4f:56:6b:6a:8e:df:5c:46:30:76:eb:18:98:82:f5: 75:27:2d:72:4d:62:4a:b7:84:9b:56:06:ae:57:40:6d:4f:25: 2b:71:d6:3f:f2:04:fd:2f:d1:b0:1e:c8:13:99:70:15:0b:dd: 0d:b2:92:90:22:2b:1c:78:4c:e5:a8:ae:b9:c4:58:f9:40:f9: 02:6e:81:09:98:53:b7:da:79:e4:21:eb:f9:9b:6d:3a:a4:dc: 18:78:99:42:41:9e:46:d0:d3:f6:79:26:f3:47:6a:54:5b:dc: 1f:50:98:c5:63:3d:6a:63:b6:c3:c6:55:b8:b3:d0:95:16:e1: 0e:89:9a:db -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhmlbS7xA2+QwF6zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk ODk5YzI5ZWUtMmFmMC00NWEzLTgxYjAtYWJmZmU2Y2Y5NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D3cEWKsPRN78gOhM+ChKtYd+mpZcvDTZxCO 4DOBQOt6GxHYhlVx0OfvB8MPfo77QbdhISI3sHNA0/6Hgo8ylW4EqEKseoGRuEIX x7KYpYW+WygWpi5OTcxyHsEhZR7vaAT+9r5MjIq+ovGsu2mVEJPE3TvHBPw9D23b QemLGQ7F9zR+P8GlIou3SprRyD291VP5YjDSNJptOTY2M8yRgklwDugP51aWfUKJ z2A/TFrKKg2FPB38W4fxiRTg17Onm3iSr1x8ZU8tIisNLBBzMQuE5VBYAzhd1YDf YNJVEUnMUMI/8Av9KFUw0UK+IHqNL5zoSyHOCO7mhVBA601LQQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPiMgXlkVMUrleaisVGmdB/NeHwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNDkyMTJiMGYtOThjMS0z M2Y3LWI0OWItNWJiYWQzNGFhNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADRMokD BADRMoowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAch4y+XB1qoh13WXH9T9wV6HvfUoEeKigwC0hTAX+NhmP lndDtQQtSmVf2F7Jkt3lAQBmPHEy5VBE4YPCTJGZkNig35Hp9ZVaPyPmnQwFzojK aduCcvuOVvPBXDRWvQDTuDWpyEZj1jW2GMh3/4uQDULXp3HJ+wGFesI3qlZHP9z8 T1Zrao7fXEYwdusYmIL1dSctck1iSreEm1YGrldAbU8lK3HWP/IE/S/RsB7IE5lw FQvdDbKSkCIrHHhM5aiuucRY+UD5Am6BCZhTt9p55CHr+ZttOqTcGHiZQkGeRtDT 9nkm80dqVFvcH1CYxWM9amO2w8ZVuLPQlRbhDoma2w== -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:05 2025 by rpki-client