$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa File: ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa (raw, json) Hash identifier: aZsrrhjUn2mPD8hurmNf9NJzwiH+8IIGn1Z7kZYt0HM= Subject key identifier: A3:4A:8E:A2:59:7A:2D:04:18:E5:49:1B:07:F6:42:99:90:57:01:21 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584961B98DA92C3C16C08083B740 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396020 IP address blocks: 209.50.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8d:a9:2c:3c:16:c0:80:83:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=1f38a6e2-5b41-407c-9973-0fdddf7af77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:92:ce:d6:8b:f0:d5:b7:31:7b:b2:48:3e: 4b:64:06:ba:fb:14:41:18:27:ac:1e:89:9c:ff:5e: 08:ef:37:c1:38:7c:93:73:e6:00:5b:20:5c:85:6e: e8:ed:28:f8:b5:e7:e9:da:31:19:e2:42:0c:fc:af: 75:5b:8c:c8:82:53:b7:13:b6:48:52:03:d2:a9:0a: b6:c9:a7:75:9b:08:5c:12:29:23:4b:e1:1f:6a:f6: a2:ac:fa:7c:7c:68:53:d9:66:5e:82:dc:37:6a:1e: a1:17:b2:23:88:41:88:b1:a2:9f:7b:2b:3c:17:ec: 92:96:db:ec:3f:d1:03:87:70:b5:f0:bd:3d:6c:f4: bf:35:fc:6f:d4:78:ab:2d:94:9c:49:9f:d0:30:9f: f7:a2:97:d0:89:7f:d6:c6:fa:6f:25:f7:75:c9:d1: b8:c8:8c:45:7f:a9:f4:82:44:48:c8:4e:d4:34:8a: 88:21:26:d0:d9:a0:a9:dc:fc:94:80:ed:07:21:47: 84:01:38:81:98:b9:65:af:c2:33:0c:af:cb:a3:e8: c6:e4:9f:0e:76:cf:a7:98:df:c2:a4:4c:8b:27:9f: 7a:90:03:42:0d:10:ca:01:e5:11:a8:07:de:7a:b1: be:d0:09:a6:c1:20:91:84:68:b7:bd:31:dc:29:49: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:8E:A2:59:7A:2D:04:18:E5:49:1B:07:F6:42:99:90:57:01:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e0:11:72:8e:f5:39:6d:49:73:29:1b:8b:99:1b:9c:79:9f: 23:e2:4c:5e:42:ce:36:f9:c9:a5:83:59:7d:bb:45:53:7d:09: ab:c7:b6:fe:02:30:a0:42:86:6b:f0:0f:30:44:83:45:9d:5d: 0e:38:09:ce:fc:80:a5:f2:89:41:d8:64:7b:85:77:74:89:91: 42:83:7f:72:66:32:8d:7e:49:9e:5f:72:96:da:09:5b:61:48: 09:68:b0:f4:90:5b:93:76:57:93:35:e6:b3:99:fd:15:af:7c: 59:ec:b7:6d:8f:86:2e:27:5d:00:d0:34:28:57:a5:04:0e:d3: 04:fb:2c:f1:14:88:9a:54:a3:b7:5a:05:f5:d4:2d:e7:0e:3b: e9:79:cd:e6:0f:4e:a3:9c:3b:c3:9b:a6:80:48:a0:dd:b4:36: 60:d3:40:a2:a5:c6:3b:89:d2:bc:89:d0:22:4d:74:a2:a9:47: 12:cd:32:b1:aa:ec:6e:0a:72:75:b1:b0:e0:54:e4:de:7a:cf: 2f:f5:98:fd:f2:0a:d0:f8:65:cd:ab:18:80:30:ac:04:f4:3b: 4f:35:61:15:f1:51:15:25:a3:00:6b:58:ac:57:8e:45:4f:34: a0:0e:7c:a3:b5:24:d4:e0:25:d5:ba:bb:3c:be:ec:dd:54:78: ef:a6:61:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuY2pLDwWwICDt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MWYzOGE2ZTItNWI0MS00MDdjLTk5NzMtMGZkZGRmN2FmNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+CSztaL8NW3MXuySD5LZAa6+xRBGCesHomc /14I7zfBOHyTc+YAWyBchW7o7Sj4tefp2jEZ4kIM/K91W4zIglO3E7ZIUgPSqQq2 yad1mwhcEikjS+EfavairPp8fGhT2WZegtw3ah6hF7IjiEGIsaKfeys8F+ySltvs P9EDh3C18L09bPS/Nfxv1HirLZScSZ/QMJ/3opfQiX/WxvpvJfd1ydG4yIxFf6n0 gkRIyE7UNIqIISbQ2aCp3PyUgO0HIUeEATiBmLllr8IzDK/Lo+jG5J8Ods+nmN/C pEyLJ596kANCDRDKAeURqAfeerG+0AmmwSCRhGi3vTHcKUm1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNKjqJZei0EGOVJGwf2QpmQVwEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvZmZjYzQxZGEtYzRhYi0z MDJjLWIzZWUtYWExZWIyNTQxYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfgEXKO9TltSXMpG4uZG5x5nyPiTF5Czjb5yaWDWX27RVN9CavHtv4C MKBChmvwDzBEg0WdXQ44Cc78gKXyiUHYZHuFd3SJkUKDf3JmMo1+SZ5fcpbaCVth SAlosPSQW5N2V5M15rOZ/RWvfFnst22Phi4nXQDQNChXpQQO0wT7LPEUiJpUo7da BfXULecOO+l5zeYPTqOcO8ObpoBIoN20NmDTQKKlxjuJ0ryJ0CJNdKKpRxLNMrGq 7G4KcnWxsOBU5N56zy/1mP3yCtD4Zc2rGIAwrAT0O081YRXxURUlowBrWKxXjkVP NKAOfKO1JNTgJdW6uzy+7N1UeO+mYdI= -----END CERTIFICATE-----Generated at Sat Apr 12 01:41:19 2025 by rpki-client