$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa File: 4ac90a12-2853-3a43-862e-34906192ded5.roa (raw, json) Hash identifier: 7p+DLHbvRWQupncJD99KrKudsqcf3H1K282VBFi/3YA= Subject key identifier: 01:6B:78:53:0D:A4:67:41:37:38:3F:D1:39:5B:14:BE:41:2B:4A:E4 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285849F87A7BD19D1FA2E9A4A1D7A0 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 399437 IP address blocks: 209.50.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7b:d1:9d:1f:a2:e9:a4:a1:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=0aa1bce9-db47-467c-b7f5-50e6fa69aa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:45:15:94:bb:7b:9c:af:5e:4d:73:04:05: 2d:e9:c6:50:ae:a6:7b:1c:36:11:eb:4b:9f:d4:11: a4:92:6f:6e:e9:97:ef:90:89:b7:6e:f0:c6:67:97: e8:18:d5:b1:5b:cc:f8:95:15:78:bd:69:0e:87:06: b9:3f:5b:b2:54:f0:10:8e:34:03:64:e1:a0:38:27: c9:2f:b1:c3:d3:25:e4:20:8b:68:a1:a8:fe:5a:b2: 45:79:80:8b:b4:f8:ed:04:b3:ce:c5:29:5c:d1:62: 1d:93:7b:8f:f7:21:b3:19:1e:00:99:31:7e:7e:a8: 77:50:0f:58:c8:a3:83:d4:71:ac:f4:4a:0a:84:29: 0a:97:d5:3d:b1:66:e2:8b:79:e4:11:86:38:bd:5f: 3c:bc:52:84:83:1b:e6:df:84:39:ed:bc:64:d3:ad: b1:6b:01:9f:f8:a8:35:73:08:b1:c9:cc:0a:d9:22: 93:dd:8c:32:c0:69:12:5f:34:36:94:49:94:7c:6f: a2:84:86:db:9d:ed:5c:c1:df:b8:c8:57:6b:ad:bd: 2a:91:64:96:17:74:6a:42:85:fc:07:03:e9:cd:b3: 54:de:60:82:80:b1:28:c4:9a:4c:15:ea:66:2a:93: ac:65:ad:5b:f7:8f:14:31:5e:c1:62:bc:12:d3:13: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:78:53:0D:A4:67:41:37:38:3F:D1:39:5B:14:BE:41:2B:4A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/4ac90a12-2853-3a43-862e-34906192ded5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e8:61:49:7b:7b:26:77:f9:67:c9:ea:f1:94:e6:a3:e8:f4: b6:18:71:bc:73:a2:50:d3:80:3b:78:32:70:27:90:89:ce:f0: d0:ef:fd:cd:8b:f9:93:6d:63:20:fa:f7:c8:07:64:98:97:70: 1f:7d:d0:c9:99:4d:e2:1b:8e:c6:25:ac:fd:d7:c2:a1:db:af: 15:37:cd:9c:c2:c8:f5:38:00:7a:5a:81:e3:1a:c5:fa:0c:45: 90:05:c1:ff:36:8f:f4:23:1a:4d:36:cc:12:d1:67:e2:df:88: 92:6e:3f:3a:3a:13:07:1e:70:76:db:a4:8d:f1:a2:29:9c:ac: d5:f3:fe:35:18:77:da:1d:a8:0a:a5:8a:00:72:db:37:01:60: d7:e8:15:3a:85:1e:74:bb:dd:84:05:c4:b8:82:6e:2d:df:05: 46:6e:57:60:c5:11:cd:46:ee:87:45:14:ff:6d:2d:f9:90:ec: c3:3e:73:c6:c3:8b:e0:c2:4c:ec:f0:07:5e:d8:07:5c:54:4a: 76:fe:ed:56:84:53:f4:18:40:32:67:e5:cb:46:cf:10:21:cf: 77:35:07:35:0c:0f:08:5f:76:d4:92:bc:ef:ce:2b:b6:f0:09: 69:35:f1:45:e1:ec:cc:34:d8:da:c3:56:cd:f6:7a:7b:a5:70: 86:ec:2e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4envRnR+i6aSh16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MGFhMWJjZTktZGI0Ny00NjdjLWI3ZjUtNTBlNmZhNjlhYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt21FFZS7e5yvXk1zBAUt6cZQrqZ7HDYR60uf 1BGkkm9u6ZfvkIm3bvDGZ5foGNWxW8z4lRV4vWkOhwa5P1uyVPAQjjQDZOGgOCfJ L7HD0yXkIItooaj+WrJFeYCLtPjtBLPOxSlc0WIdk3uP9yGzGR4AmTF+fqh3UA9Y yKOD1HGs9EoKhCkKl9U9sWbii3nkEYY4vV88vFKEgxvm34Q57bxk062xawGf+Kg1 cwixycwK2SKT3YwywGkSXzQ2lEmUfG+ihIbbne1cwd+4yFdrrb0qkWSWF3RqQoX8 BwPpzbNU3mCCgLEoxJpMFepmKpOsZa1b948UMV7BYrwS0xOVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFreFMNpGdBNzg/0TlbFL5BK0rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNGFjOTBhMTItMjg1My0z YTQzLTg2MmUtMzQ5MDYxOTJkZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjoYUl7eyZ3+WfJ6vGU5qPo9LYYcbxzolDTgDt4MnAnkInO8NDv/c2L +ZNtYyD698gHZJiXcB990MmZTeIbjsYlrP3XwqHbrxU3zZzCyPU4AHpageMaxfoM RZAFwf82j/QjGk02zBLRZ+LfiJJuPzo6EwcecHbbpI3xoimcrNXz/jUYd9odqAql igBy2zcBYNfoFTqFHnS73YQFxLiCbi3fBUZuV2DFEc1G7odFFP9tLfmQ7MM+c8bD i+DCTOzwB17YB1xUSnb+7VaEU/QYQDJn5ctGzxAhz3c1BzUMDwhfdtSSvO/OK7bw CWk18UXh7Mw02NrDVs32enulcIbsLlI= -----END CERTIFICATE-----Generated at Mon Jun 9 14:28:17 2025 by rpki-client