$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa File: f710b903-fe73-3bbb-921e-813757ddcca1.roa (raw, json) Hash identifier: 0OAJcvNXUJpbknQ37Wo3tDq+g4tEsJBl5fPc1XtV8Qg= Subject key identifier: A0:21:E8:42:C2:72:56:84:FA:B9:1B:56:DE:73:D2:05:8C:DD:A9:33 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584950F959DDA7EC9ED389961000 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 399437 IP address blocks: 209.50.145.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:59:dd:a7:ec:9e:d3:89:96:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=518156d9-19e0-45b2-8271-203e9fc60b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:22:6c:0e:4a:39:af:d3:74:97:76:d4:73:4b: 5e:13:6c:f5:39:b8:13:18:14:f7:1f:c4:b9:71:bc: ab:6e:ba:96:26:f6:a8:47:ff:18:9f:3d:85:40:0e: 5d:da:36:b1:21:1b:cb:1a:49:3d:5b:55:b1:18:b5: fa:7c:de:6d:59:9d:f7:77:2c:2b:2a:b4:fb:e6:32: a0:f8:38:96:fa:62:56:51:bd:f2:95:7a:3c:f2:de: 4f:9c:e1:97:1a:23:f8:61:e1:ca:68:d9:17:13:49: 16:c8:4b:b6:9f:27:be:40:ff:94:73:03:12:ad:ee: 3e:e9:d0:db:c0:f9:91:29:83:77:ed:41:c6:d4:c6: ad:81:08:88:ca:15:d2:51:c2:69:96:f0:80:02:fb: 6d:e5:b8:15:09:ec:3d:fa:b8:1a:e1:87:1d:ff:76: ec:35:e3:38:5b:07:3e:b6:fd:5a:9b:64:c8:81:1b: 17:cb:bc:f1:87:04:19:5a:54:40:86:f4:6d:ee:20: fc:1e:a0:c2:ff:ab:24:f3:5d:4d:71:38:bb:8e:b0: 93:a6:9b:3e:88:42:45:20:53:6c:44:93:8d:1c:1e: bf:ec:fb:1d:78:03:33:95:57:ab:1c:d3:6b:37:0d: 78:c1:1c:a2:ce:66:d3:37:60:04:43:e4:f4:32:2b: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:E8:42:C2:72:56:84:FA:B9:1B:56:DE:73:D2:05:8C:DD:A9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d3:0c:19:80:1d:97:a8:5b:e2:2c:b5:f5:5c:2f:b3:5f:c7: 61:a7:59:62:72:50:f6:88:f2:44:1a:b6:4b:ca:2b:fe:84:d7: 88:47:ab:ac:d7:62:7b:10:cc:d2:e8:74:ea:d6:e8:50:59:3a: 5a:a2:e5:25:64:d0:2c:8c:32:82:f7:56:ec:26:97:0f:8b:9c: 20:ca:0c:2a:e3:23:4a:e6:56:d0:9b:c4:c5:0a:3a:1b:df:47: 87:3c:43:1e:00:dd:ad:20:32:5b:21:39:85:b5:da:0b:17:0b: a7:4c:db:e5:59:7c:78:16:87:ca:50:3d:e0:99:4b:2d:42:3e: c2:fc:81:f3:c0:28:d6:55:86:aa:87:e5:b3:c0:55:64:27:9c: 4b:a3:30:de:e3:20:a8:6f:ec:7f:63:da:37:67:cb:63:49:14: 6c:97:5f:13:16:cc:a0:6e:2a:e8:69:ca:72:14:df:e1:9a:76: ed:e3:53:65:9b:3b:d0:33:dc:30:64:4c:50:96:47:07:35:c1: 09:aa:e2:88:5e:14:7c:a1:34:9a:76:0c:3f:b3:f5:fa:f3:0b: 5e:a2:7d:6e:88:fd:52:54:cc:8f:f4:dc:8b:f9:b6:73:be:2e: 3d:3c:00:da:2b:f0:b5:a3:47:f1:e5:e7:6f:a8:f9:b2:91:1f: e7:31:4b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+Vndp+ye04mWEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk NTE4MTU2ZDktMTllMC00NWIyLTgyNzEtMjAzZTlmYzYwYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iJsDko5r9N0l3bUc0teE2z1ObgTGBT3H8S5 cbyrbrqWJvaoR/8Ynz2FQA5d2jaxIRvLGkk9W1WxGLX6fN5tWZ33dywrKrT75jKg +DiW+mJWUb3ylXo88t5PnOGXGiP4YeHKaNkXE0kWyEu2nye+QP+UcwMSre4+6dDb wPmRKYN37UHG1MatgQiIyhXSUcJplvCAAvtt5bgVCew9+rga4Ycd/3bsNeM4Wwc+ tv1am2TIgRsXy7zxhwQZWlRAhvRt7iD8HqDC/6sk811NcTi7jrCTpps+iEJFIFNs RJONHB6/7PsdeAMzlVerHNNrNw14wRyizmbTN2AEQ+T0MisR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAh6ELCclaE+rkbVt5z0gWM3akzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvZjcxMGI5MDMtZmU3My0z YmJiLTkyMWUtODEzNzU3ZGRjY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErTDBmAHZeoW+IstfVcL7Nfx2GnWWJyUPaI8kQatkvKK/6E14hHq6zX YnsQzNLodOrW6FBZOlqi5SVk0CyMMoL3Vuwmlw+LnCDKDCrjI0rmVtCbxMUKOhvf R4c8Qx4A3a0gMlshOYW12gsXC6dM2+VZfHgWh8pQPeCZSy1CPsL8gfPAKNZVhqqH 5bPAVWQnnEujMN7jIKhv7H9j2jdny2NJFGyXXxMWzKBuKuhpynIU3+Gadu3jU2Wb O9Az3DBkTFCWRwc1wQmq4oheFHyhNJp2DD+z9frzC16ifW6I/VJUzI/03Iv5tnO+ Lj08ANor8LWjR/Hl52+o+bKRH+cxS8o= -----END CERTIFICATE-----Generated at Sat Apr 12 02:10:42 2025 by rpki-client