$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa File: 2a3871dd-5224-3aba-89af-880506c8bbf0.roa (raw, json) Hash identifier: K/Nnhpheo4+F+BXM2hLIKe5ECsqGKX22sPDmf04/wU8= Subject key identifier: A5:E0:10:11:D4:2B:C7:C9:89:1C:CB:94:4A:72:29:39:73:2B:38:36 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285849C4D4BD173599B37FE022EC80 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 6169 IP address blocks: 209.50.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bd:17:35:99:b3:7f:e0:22:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=366f721a-ca1f-4083-8ae7-e8a63d11a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:9c:f6:3a:6c:83:94:a7:7a:be:23:d2:43: ad:8f:a9:2e:f8:69:6d:12:a2:2c:61:1d:1c:47:01: bb:ba:2e:72:f9:04:f3:07:6a:60:17:72:d2:21:71: c4:86:21:a2:53:25:2b:39:33:d5:e1:c7:5a:d3:d8: 01:4b:0a:e2:ed:72:a5:8a:7c:40:de:2c:42:43:f6: 27:02:29:f7:3f:8e:a6:2a:f3:96:b2:d5:f1:b4:bd: 7e:05:88:d5:26:f1:64:f1:03:a1:30:18:c9:87:22: 81:de:96:37:bc:d2:5a:55:fd:d6:b3:c4:59:6b:08: b0:dc:35:50:a5:02:14:00:78:c5:3a:6f:2b:f4:11: c9:e3:f9:3e:f0:6b:fa:07:f1:ad:51:b7:9f:ab:17: 60:ce:3b:7c:a7:cc:4a:cc:00:a7:a5:a0:c0:a0:dc: 7c:53:04:d5:e4:26:e8:e8:c3:52:5c:53:13:b0:3c: f4:bd:d0:90:5f:d4:ac:74:86:4b:95:2b:01:0f:85: 6c:1b:3b:7e:69:f8:09:10:d7:5d:38:3e:28:ca:9f: 7c:ce:92:22:c6:5b:cd:c9:49:2a:33:34:20:f6:78: bf:48:42:50:bf:d0:ee:4f:ef:74:47:ea:7b:a5:67: 34:05:99:f0:d0:05:66:59:36:3b:51:21:6d:30:37: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:10:11:D4:2B:C7:C9:89:1C:CB:94:4A:72:29:39:73:2B:38:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:96:23:74:47:d1:8d:24:0a:ab:2d:0b:bb:14:26:f3:d3: 60:ea:fb:b7:98:f7:84:a3:82:45:ee:28:50:08:4f:94:1e:45: f6:2f:08:ce:a3:88:1b:86:ce:98:1b:2c:7c:69:04:31:91:a8: 93:6f:aa:8f:30:4f:03:32:cb:16:ec:d5:b6:c4:ae:fc:ea:f0: 1b:f4:c3:f6:81:0b:7b:f6:e4:51:a9:b6:8d:ce:53:24:3b:cd: b6:aa:31:e4:d6:e8:be:2f:e2:91:72:1d:cf:ad:d1:10:26:35: 2b:99:16:7b:76:bc:9e:60:57:c7:73:d5:da:aa:e0:19:7b:cf: 13:8b:b6:d8:40:85:0c:ce:b4:9b:52:51:ab:03:d9:ea:c5:59: ed:3c:0d:12:f5:cd:37:82:8e:f8:8c:bb:ca:69:2d:c8:29:82: fa:08:fc:0c:90:20:88:49:26:6b:0d:1b:9f:fc:b2:55:dc:31: 01:ea:fd:03:14:7e:ee:e6:d4:a4:e1:61:64:48:a7:a0:fb:bf: 38:4b:07:1e:0d:d0:50:bd:d0:8a:3e:af:3e:28:6c:dd:ff:1c: 21:27:c0:54:7c:fa:c1:fd:b1:23:22:1d:f0:8c:a2:38:66:47: 9c:86:29:83:1e:16:79:bd:83:ea:dc:9a:49:e5:c9:38:f0:38: 5f:70:0d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1L0XNZmzf+Ai7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MzY2ZjcyMWEtY2ExZi00MDgzLThhZTctZThhNjNkMTFhMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnec9jpsg5Sner4j0kOtj6ku+GltEqIsYR0c RwG7ui5y+QTzB2pgF3LSIXHEhiGiUyUrOTPV4cda09gBSwri7XKlinxA3ixCQ/Yn Ain3P46mKvOWstXxtL1+BYjVJvFk8QOhMBjJhyKB3pY3vNJaVf3Ws8RZawiw3DVQ pQIUAHjFOm8r9BHJ4/k+8Gv6B/GtUbefqxdgzjt8p8xKzACnpaDAoNx8UwTV5Cbo 6MNSXFMTsDz0vdCQX9SsdIZLlSsBD4VsGzt+afgJENddOD4oyp98zpIixlvNyUkq MzQg9ni/SEJQv9DuT+90R+p7pWc0BZnw0AVmWTY7USFtMDfpwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXgEBHUK8fJiRzLlEpyKTlzKzg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMmEzODcxZGQtNTIyNC0z YWJhLTg5YWYtODgwNTA2YzhiYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyVliN0R9GNJAqrLQu7FCbz02Dq+7eY94SjgkXuKFAIT5QeRfYvCM6j iBuGzpgbLHxpBDGRqJNvqo8wTwMyyxbs1bbErvzq8Bv0w/aBC3v25FGpto3OUyQ7 zbaqMeTW6L4v4pFyHc+t0RAmNSuZFnt2vJ5gV8dz1dqq4Bl7zxOLtthAhQzOtJtS UasD2erFWe08DRL1zTeCjviMu8ppLcgpgvoI/AyQIIhJJmsNG5/8slXcMQHq/QMU fu7m1KThYWRIp6D7vzhLBx4N0FC90Io+rz4obN3/HCEnwFR8+sH9sSMiHfCMojhm R5yGKYMeFnm9g+rcmknlyTjwOF9wDQY= -----END CERTIFICATE-----Generated at Wed May 7 08:29:58 2025 by rpki-client