$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa File: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json) Hash identifier: e8wEG9R+aReuFj42c2CnIsc+YG+TpFmrxk776uL8CLY= Subject key identifier: 52:13:D8:29:D4:7A:CB:FC:5C:F8:4E:A2:08:B0:36:AD:D4:D2:F1:DA Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F432858494B63FC581708A57588BE7380 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fc:58:17:08:a5:75:88:be:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1733cb1d-69e5-4483-83a4-18b567d6fb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:dc:b2:66:a2:58:77:e8:81:a2:ed:95:1a: ae:11:24:9a:91:bd:8c:72:1a:dd:7b:5f:0d:fd:f9: 1a:7e:c2:b8:65:91:0e:98:f9:15:e4:ab:6a:a3:d2: 4a:7e:e5:19:ca:8f:1a:63:05:f1:83:b0:42:cd:c4: 11:30:70:21:71:da:a5:de:64:d3:fe:0d:80:3e:0c: 2d:6d:18:c6:37:5f:71:1d:9b:f2:04:21:4e:4f:df: c5:a2:fd:08:92:fd:69:86:0c:5c:89:08:8d:5b:4b: f9:5d:c6:b4:64:16:eb:8a:c3:e8:44:c7:06:ff:d3: bd:88:cd:14:38:21:4e:1c:f3:be:74:32:31:f1:fc: 3a:7f:12:f3:6a:7d:5b:14:b2:3e:bf:53:cc:38:ba: 90:0b:68:10:98:06:3b:30:ef:0a:a2:47:31:64:71: b9:6f:b8:cc:8f:3a:39:e0:c4:ed:69:32:45:9f:37: db:bf:d1:b5:21:88:a0:75:12:49:0f:86:3d:24:5d: 5a:e4:1a:79:8a:a8:59:84:7d:8a:c8:a7:1e:eb:b7: 34:08:70:de:0f:2f:08:56:84:1b:71:20:6b:2c:ec: c4:28:c2:df:f1:2b:63:18:14:14:33:da:33:24:0d: 22:fe:e2:b8:04:b1:08:b6:b4:af:e9:b1:9f:79:91: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:D8:29:D4:7A:CB:FC:5C:F8:4E:A2:08:B0:36:AD:D4:D2:F1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ce:2c:18:25:3b:f6:2a:80:e7:c4:f6:0c:94:d0:74:3b:d7: 77:86:94:c8:6b:54:58:42:8c:13:0c:25:59:88:38:c6:9c:df: 3b:d4:b0:ed:68:79:4c:2b:b1:0a:3a:9b:e4:cf:0e:1d:ba:78: 14:13:2f:bc:14:37:a0:ce:9b:55:aa:75:47:58:63:a4:c8:ce: da:67:38:1d:01:5b:7d:62:48:7c:1f:89:a5:2b:58:93:3f:2a: c9:52:5c:c3:4a:b5:ce:9c:6b:8e:b6:68:d7:5d:da:43:7b:34: 3b:11:c0:9c:c7:d9:be:07:6c:89:f8:32:98:fd:2f:fe:88:31: b4:23:19:46:4d:4b:15:2e:aa:c2:b7:f8:c5:6b:59:77:10:f1: c7:06:42:fd:68:e6:21:d6:34:12:d1:fe:4b:bf:9e:d0:c0:02: 33:47:ff:48:1d:4e:4e:c5:a3:ad:16:f0:3b:f1:71:96:5d:14: f0:d4:66:5e:66:02:02:bf:4b:00:fa:82:b5:35:36:60:ea:36: 36:d3:90:b3:3c:e2:b0:8a:e9:36:08:5f:2e:e7:90:e4:fc:66: 71:4e:76:5b:93:79:8d:5b:70:fb:a2:83:87:e7:a9:01:c5:a2: 87:01:8d:83:6e:00:5e:c8:d1:6a:8e:70:34:cb:2b:ed:bb:72: e6:9c:53:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/xYFwildYi+c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTczM2NiMWQtNjllNS00NDgzLTgzYTQtMThiNTY3ZDZmYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf/csmaiWHfogaLtlRquESSakb2Mchrde18N /fkafsK4ZZEOmPkV5Ktqo9JKfuUZyo8aYwXxg7BCzcQRMHAhcdql3mTT/g2APgwt bRjGN19xHZvyBCFOT9/Fov0Ikv1phgxciQiNW0v5Xca0ZBbrisPoRMcG/9O9iM0U OCFOHPO+dDIx8fw6fxLzan1bFLI+v1PMOLqQC2gQmAY7MO8KokcxZHG5b7jMjzo5 4MTtaTJFnzfbv9G1IYigdRJJD4Y9JF1a5Bp5iqhZhH2KyKce67c0CHDeDy8IVoQb cSBrLOzEKMLf8StjGBQUM9ozJA0i/uK4BLEItrSv6bGfeZEqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIT2CnUesv8XPhOogiwNq3U0vHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvMjMyNDI2MTktNzA3NS0z ZmY3LWJjNjAtYmRlOWViNTNiMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDOLBglO/YqgOfE9gyU0HQ713eGlMhrVFhCjBMMJVmIOMac3zvUsO1o eUwrsQo6m+TPDh26eBQTL7wUN6DOm1WqdUdYY6TIztpnOB0BW31iSHwfiaUrWJM/ KslSXMNKtc6ca462aNdd2kN7NDsRwJzH2b4HbIn4Mpj9L/6IMbQjGUZNSxUuqsK3 +MVrWXcQ8ccGQv1o5iHWNBLR/ku/ntDAAjNH/0gdTk7Fo60W8DvxcZZdFPDUZl5m AgK/SwD6grU1NmDqNjbTkLM84rCK6TYIXy7nkOT8ZnFOdluTeY1bcPuig4fnqQHF oocBjYNuAF7I0WqOcDTLK+27cuacU7Y= -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:39 2025 by rpki-client