$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa File: 4ac90a12-2853-3a43-862e-34906192ded5.roa (raw, json) Hash identifier: Va3EGtZVZY8VFJxnHZd6y2pjwVDPdzzoRghyIpxRAJg= Subject key identifier: 02:EA:75:98:86:F9:9D:CB:6F:77:E2:68:DB:5A:34:3C:38:29:A2:44 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285849194177DC0481DB5EE071E580 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 399437 IP address blocks: 209.50.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:77:dc:04:81:db:5e:e0:71:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=21c8e9e8-b1c3-4902-afe9-a0c94da4c8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:3b:be:64:0b:79:81:53:1f:ee:d9:ae:f7: f5:f8:b6:2a:ad:45:00:e3:83:e0:b1:3d:ef:6c:6b: 5e:f0:0b:32:2c:58:25:69:77:2c:be:8e:c4:95:ba: e3:8a:73:03:6e:f6:70:7a:f9:05:58:6f:e3:1b:a5: a4:8b:0a:a4:3e:96:f0:9e:d2:78:14:2b:95:2b:85: dd:58:df:cc:47:82:f1:bf:ce:af:e5:fe:f4:55:b1: 7e:91:d3:57:e5:c7:89:de:f7:34:14:f7:a1:ea:c2: b7:48:24:41:7e:cf:d4:bd:63:5b:96:3b:6e:12:fd: 4b:fb:cf:fa:e3:53:d9:d0:28:86:1b:7c:0a:5c:30: 50:7f:db:1e:86:a5:70:c7:39:22:ca:ce:b2:7a:a8: 88:ae:aa:c3:ff:30:f1:dd:6a:b4:12:48:51:6e:1f: dc:d6:bf:d1:03:6c:67:8d:cc:32:26:e1:b7:b9:15: 2d:93:af:52:ae:30:54:42:41:c3:19:3e:a8:af:5e: 91:4d:03:03:b3:1e:e0:f2:25:b9:a9:7d:a5:d9:1f: c1:e5:a9:a8:d8:e3:35:fe:6d:4a:54:c3:c7:08:c9: 73:1c:56:ac:72:fb:da:0d:85:c5:f4:d3:ae:ff:ce: 59:0f:65:e2:12:a6:e5:b1:df:48:8d:2b:49:3e:ff: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:75:98:86:F9:9D:CB:6F:77:E2:68:DB:5A:34:3C:38:29:A2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:66:85:f1:0c:31:5c:48:53:2b:b4:67:e7:8d:92:7b:89:91: 70:bc:62:1c:6d:83:59:53:ed:bf:7e:20:34:f8:59:f2:bb:b9: 64:5b:24:94:29:32:27:da:52:cf:1c:2d:e9:66:3c:f6:c2:a2: 0e:48:ad:95:f4:15:b7:33:58:ad:66:fd:03:1f:0a:21:5c:b9: 15:39:f6:8f:89:a4:f2:b3:a5:96:4e:eb:2d:da:f8:5f:16:8c: d2:11:20:21:70:1a:90:63:b1:c1:e3:25:c6:03:78:cf:42:b8: 29:08:0e:f2:91:23:e7:16:db:27:24:ac:2d:e0:50:82:a3:90: 0d:20:e2:57:99:ff:83:40:2a:76:28:d9:17:99:51:6c:ac:be: db:93:7a:18:69:27:4e:32:95:6d:be:78:78:db:c8:ea:cb:60: b0:37:99:f7:e3:70:aa:0a:f1:09:72:b8:c2:7a:63:06:1a:c1: 02:9f:9c:4b:46:ab:fe:02:56:f3:e0:bd:19:60:76:67:e4:47: 11:1a:06:89:6b:32:4b:9c:74:d0:63:d0:48:c6:ed:f9:fa:df: 40:d1:73:0b:e0:fe:8d:33:50:e6:4f:bb:cb:1f:08:0d:d7:64: 50:47:83:76:39:b3:fd:32:35:a6:40:fa:e3:85:fb:22:23:9e: 54:64:b8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXfcBIHbXuBx5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MjFjOGU5ZTgtYjFjMy00OTAyLWFmZTktYTBjOTRkYTRjOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oA7vmQLeYFTH+7Zrvf1+LYqrUUA44PgsT3v bGte8AsyLFglaXcsvo7ElbrjinMDbvZwevkFWG/jG6WkiwqkPpbwntJ4FCuVK4Xd WN/MR4Lxv86v5f70VbF+kdNX5ceJ3vc0FPeh6sK3SCRBfs/UvWNbljtuEv1L+8/6 41PZ0CiGG3wKXDBQf9sehqVwxzkiys6yeqiIrqrD/zDx3Wq0EkhRbh/c1r/RA2xn jcwyJuG3uRUtk69SrjBUQkHDGT6or16RTQMDsx7g8iW5qX2l2R/B5amo2OM1/m1K VMPHCMlzHFascvvaDYXF9NOu/85ZD2XiEqblsd9IjStJPv/qowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALqdZiG+Z3Lb3fiaNtaNDw4KaJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNGFjOTBhMTItMjg1My0z YTQzLTg2MmUtMzQ5MDYxOTJkZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlmhfEMMVxIUyu0Z+eNknuJkXC8Yhxtg1lT7b9+IDT4WfK7uWRbJJQp MifaUs8cLelmPPbCog5IrZX0FbczWK1m/QMfCiFcuRU59o+JpPKzpZZO6y3a+F8W jNIRICFwGpBjscHjJcYDeM9CuCkIDvKRI+cW2yckrC3gUIKjkA0g4leZ/4NAKnYo 2ReZUWysvtuTehhpJ04ylW2+eHjbyOrLYLA3mffjcKoK8QlyuMJ6YwYawQKfnEtG q/4CVvPgvRlgdmfkRxEaBolrMkucdNBj0EjG7fn630DRcwvg/o0zUOZPu8sfCA3X ZFBHg3Y5s/0yNaZA+uOF+yIjnlRkuF0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:09 2025 by rpki-client