$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa File: 9fef41c7-f411-3a77-bd55-cc8cb170df78.roa (raw, json) Hash identifier: LzasumZrYKCb2UCZOhomVX3IlGiGKs9SzkNYegbke5c= Subject key identifier: 00:72:66:7E:91:74:51:CA:1F:68:40:4D:5D:8A:BE:DC:27:44:AC:58 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285848E59BC7FCF7FF7E3AF15F9580 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 6169 IP address blocks: 209.50.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:fc:f7:ff:7e:3a:f1:5f:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=2dee1b96-5df3-4528-9b88-e0307d92db7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:9b:3d:45:2d:a1:b7:e1:df:b7:b3:39:aa: 44:07:14:6d:1d:b8:19:bc:68:1f:9e:40:6f:ce:4b: 9d:3d:fd:17:e3:69:28:37:6e:e9:5e:08:5c:63:7c: c1:e1:e2:5e:3d:12:c6:61:50:9c:fc:28:07:da:2c: 91:15:c1:15:89:bf:4a:37:ae:fd:7e:bc:0f:94:80: c4:0d:d8:c9:60:47:5c:0e:05:be:6c:5b:14:33:f3: 91:aa:ee:97:53:0e:0e:0e:b6:42:b5:20:01:e9:cc: e2:d9:a5:0b:d6:fc:50:1b:75:e6:78:c4:46:e6:f4: 3e:6c:23:81:15:0d:32:44:95:a3:92:11:35:e1:41: e4:6d:9b:99:9c:ce:92:18:a9:d5:5d:bf:bd:a7:28: 05:b2:9e:11:e6:90:53:52:cf:b0:19:cf:3e:a9:46: 36:7e:89:b2:4e:6e:1f:a5:3d:65:72:12:26:5d:81: 0d:aa:3f:4e:c3:dd:2d:23:fe:cb:bb:12:f4:d3:6d: e5:30:e5:80:0d:c7:6b:d5:6a:03:a8:32:51:1f:cd: e9:f7:cc:82:a3:c3:cf:20:d7:3b:fd:4e:9f:3f:92: 62:59:e1:90:5a:18:ce:d6:c4:6b:e5:34:a6:08:d1: d1:c6:a6:cd:68:85:9f:9a:ae:e5:9a:a1:92:09:84: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:72:66:7E:91:74:51:CA:1F:68:40:4D:5D:8A:BE:DC:27:44:AC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6b:9a:c5:ff:ce:77:1b:e5:59:f6:91:38:e8:28:e7:f4:38: 5f:60:49:11:73:09:32:1b:44:78:a9:22:47:d9:c2:b4:cb:2a: 01:76:6a:f1:0f:c6:ad:04:d5:dd:76:ab:1e:52:e9:fb:54:d0: ef:cc:4d:bd:4c:3b:85:4e:96:84:59:ae:66:8f:e9:ef:22:0e: b3:bf:1b:a5:d2:c6:65:82:7e:95:a4:82:20:84:fd:75:32:a4: 57:fc:e0:32:6f:6c:fb:10:b8:c5:5e:a4:0a:ba:3d:70:d8:dc: 8b:02:53:a6:35:f5:43:fd:88:b6:cf:fc:6d:3d:54:47:f0:cd: fc:bf:49:41:cf:4b:ef:d3:06:0d:6a:a0:49:19:84:03:28:9d: 30:69:c3:49:4e:a8:99:c3:18:74:63:5f:45:26:12:ef:14:5d: cf:37:39:41:a3:4a:bb:a6:0d:47:34:35:c7:b0:2e:e3:ac:b7: f0:6f:1f:57:5e:02:61:14:e5:c7:cd:db:14:d3:73:b6:54:41: b7:a1:7a:9d:96:e4:22:c6:c1:04:4b:b5:5f:0d:00:3a:18:b6: e4:0b:35:43:81:2a:1b:5d:37:bd:53:73:9d:63:4f:69:a4:df: 2f:47:88:01:c2:73:53:37:45:22:9e:5e:36:9c:de:c8:97:73: 96:b4:06:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8f89/9+OvFflYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MmRlZTFiOTYtNWRmMy00NTI4LTliODgtZTAzMDdkOTJkYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WGbPUUtobfh37ezOapEBxRtHbgZvGgfnkBv zkudPf0X42koN27pXghcY3zB4eJePRLGYVCc/CgH2iyRFcEVib9KN679frwPlIDE DdjJYEdcDgW+bFsUM/ORqu6XUw4ODrZCtSAB6czi2aUL1vxQG3XmeMRG5vQ+bCOB FQ0yRJWjkhE14UHkbZuZnM6SGKnVXb+9pygFsp4R5pBTUs+wGc8+qUY2fomyTm4f pT1lchImXYENqj9Ow90tI/7LuxL0023lMOWADcdr1WoDqDJRH83p98yCo8PPINc7 /U6fP5JiWeGQWhjO1sRr5TSmCNHRxqbNaIWfmq7lmqGSCYSXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAByZn6RdFHKH2hATV2KvtwnRKxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvOWZlZjQxYzctZjQxMS0z YTc3LWJkNTUtY2M4Y2IxNzBkZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKprmsX/zncb5Vn2kTjoKOf0OF9gSRFzCTIbRHipIkfZwrTLKgF2avEP xq0E1d12qx5S6ftU0O/MTb1MO4VOloRZrmaP6e8iDrO/G6XSxmWCfpWkgiCE/XUy pFf84DJvbPsQuMVepAq6PXDY3IsCU6Y19UP9iLbP/G09VEfwzfy/SUHPS+/TBg1q oEkZhAMonTBpw0lOqJnDGHRjX0UmEu8UXc83OUGjSrumDUc0NcewLuOst/BvH1de AmEU5cfN2xTTc7ZUQbehep2W5CLGwQRLtV8NADoYtuQLNUOBKhtdN71Tc51jT2mk 3y9HiAHCc1M3RSKeXjac3siXc5a0Bi8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:02 2025 by rpki-client