$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa File: b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa (raw, json) Hash identifier: aE3Co8Z0N47Y4Low1otJUmJZRXaY19akZzaffdqpW/8= Subject key identifier: 12:E0:AA:D1:14:AE:18:91:A2:B4:C4:02:5C:08:D0:C2:A3:16:71:37 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285848828089DBAA840685DCCAAC00 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 15239 IP address blocks: 209.50.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:89:db:aa:84:06:85:dc:ca:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=7ea4e564-b21d-4cef-9fb5-7b43f446a14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:78:3e:18:d9:61:6a:04:e0:4d:b3:f2:84: 3f:41:74:36:45:30:aa:77:78:18:7e:4d:17:da:c5: 9b:76:9a:e0:99:16:3b:02:5e:f4:ff:94:77:ba:07: 55:ec:1b:51:35:15:62:3f:34:27:8c:44:36:30:86: 2c:54:d0:a8:8d:0c:9b:4b:57:20:81:22:ce:37:77: 90:c8:f2:a3:79:ea:62:2d:17:7d:e3:68:b0:dd:4b: d3:0c:f1:e5:6b:9a:93:29:bc:04:f9:fc:3d:ae:51: c4:48:47:18:e8:80:9f:27:81:8f:73:64:b5:17:80: 9b:c4:0a:41:8f:74:ed:a1:4e:06:89:82:cf:f5:ee: a4:de:1e:44:86:c4:26:b4:b3:da:ff:05:e0:78:6b: fc:7d:57:27:3f:b2:42:8b:fb:d0:51:14:ef:a3:c4: 27:cd:19:fa:a8:88:30:07:6a:c8:b0:14:3e:95:5f: 9c:32:be:6a:2d:13:b6:9c:0d:cc:b2:0c:de:8d:8c: f4:e2:3a:69:ac:c2:5b:83:a0:1a:7a:4d:8b:c3:75: 74:c1:43:a1:ae:b9:79:b9:b1:61:3a:71:cb:4f:9b: 30:25:bd:d9:4e:96:6f:f9:61:1c:9f:b3:99:46:ed: 4f:21:ae:50:85:bd:0c:e9:46:4c:3e:2c:eb:6b:48: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:AA:D1:14:AE:18:91:A2:B4:C4:02:5C:08:D0:C2:A3:16:71:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e4:4e:d4:69:63:01:7a:19:08:21:4e:9c:46:b0:56:f4:b4: bc:1d:45:4f:62:93:7a:14:30:80:4a:ce:85:6d:35:b4:e8:0b: af:96:cb:ff:eb:f1:f6:13:1d:cb:47:2e:81:f1:24:55:fe:66: 93:23:05:98:4b:42:0a:56:d8:59:73:85:ca:d0:06:0e:10:02: 82:f5:4d:51:bd:48:d8:21:fd:e5:1e:eb:a9:b2:a6:aa:5e:6c: 6c:21:d6:b9:c5:bf:2e:7f:8f:fa:12:bc:9f:b2:77:78:42:22: a4:7f:49:83:fe:64:c9:7d:3e:53:14:27:1f:20:70:e1:fe:2c: 0b:7f:46:62:b7:2f:c3:54:9b:54:da:c9:22:10:58:86:b0:8f: 71:2a:05:fa:14:eb:1f:b0:6e:92:c6:ba:db:06:84:23:7e:ca: c3:53:42:45:63:6d:51:d4:f1:5e:1a:25:50:54:90:18:19:af: 22:ca:17:29:6e:cb:1f:ed:4b:f7:98:95:9d:07:09:b1:f0:1e: 49:14:2d:aa:77:d4:f8:f0:2c:aa:2b:6b:91:95:ac:ef:3a:83: f0:86:de:9a:89:4c:63:df:73:d0:f6:bf:69:5e:85:bf:03:92: 56:f2:1a:ae:d1:a4:11:df:7b:9e:cf:2a:f6:74:5a:39:e4:27: 87:cc:a7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgInbqoQGhdzKrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2VhNGU1NjQtYjIxZC00Y2VmLTlmYjUtN2I0M2Y0NDZhMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3J4PhjZYWoE4E2z8oQ/QXQ2RTCqd3gYfk0X 2sWbdprgmRY7Al70/5R3ugdV7BtRNRViPzQnjEQ2MIYsVNCojQybS1cggSLON3eQ yPKjeepiLRd942iw3UvTDPHla5qTKbwE+fw9rlHESEcY6ICfJ4GPc2S1F4CbxApB j3TtoU4GiYLP9e6k3h5EhsQmtLPa/wXgeGv8fVcnP7JCi/vQURTvo8QnzRn6qIgw B2rIsBQ+lV+cMr5qLRO2nA3MsgzejYz04jpprMJbg6Aaek2Lw3V0wUOhrrl5ubFh OnHLT5swJb3ZTpZv+WEcn7OZRu1PIa5Qhb0M6UZMPizra0gLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLgqtEUrhiRorTEAlwI0MKjFnE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYjBlYjMxODAtNWYyNi0z ZGM2LWFjM2YtYjlmNWQ1ZmUwZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/kTtRpYwF6GQghTpxGsFb0tLwdRU9ik3oUMIBKzoVtNbToC6+Wy//r 8fYTHctHLoHxJFX+ZpMjBZhLQgpW2FlzhcrQBg4QAoL1TVG9SNgh/eUe66mypqpe bGwh1rnFvy5/j/oSvJ+yd3hCIqR/SYP+ZMl9PlMUJx8gcOH+LAt/RmK3L8NUm1Ta ySIQWIawj3EqBfoU6x+wbpLGutsGhCN+ysNTQkVjbVHU8V4aJVBUkBgZryLKFylu yx/tS/eYlZ0HCbHwHkkULap31PjwLKora5GVrO86g/CG3pqJTGPfc9D2v2lehb8D klbyGq7RpBHfe57PKvZ0WjnkJ4fMpxw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:02 2025 by rpki-client