$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa File: 49212b0f-98c1-33f7-b49b-5bbad34aa488.roa (raw, json) Hash identifier: QUhWzRoMDtyaSrPAZEe5hAoqnbOd/eKQX9NbgHBOrBo= Subject key identifier: BC:A5:B9:7C:DB:2A:75:4A:0F:19:50:AE:BC:06:AB:05:76:95:6C:59 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F432858494733DFDBA267448D6D3FFB98 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 14877 IP address blocks: 209.50.137.0/24 maxlen: 32 209.50.138.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:df:db:a2:67:44:8d:6d:3f:fb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=161ebff7-c35c-49a3-9859-7d625e78a13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:79:f0:1c:54:d5:d7:43:9e:92:f5:f7:a3: b3:3c:0a:d3:5e:e5:f7:22:bc:d9:70:cd:4c:e7:ca: 33:08:fd:03:30:f2:18:1a:23:1e:b5:08:0a:f1:26: c6:9f:69:ab:d9:a5:4e:16:f0:81:b1:6f:ef:cc:0e: b2:7b:25:3a:10:c6:57:3f:f4:1e:7f:34:1c:d0:34: a6:be:a1:15:50:b5:6a:e3:92:6e:51:3e:42:dd:37: 74:09:1a:4e:6c:76:9d:a6:07:43:d6:3a:89:6d:d4: 71:16:28:05:ee:5a:62:24:21:d4:9b:af:24:e7:72: f7:ce:06:4f:09:74:95:fb:33:1f:b4:b3:62:dc:09: 82:e0:ee:1d:8b:f6:88:4a:af:0d:ef:4f:40:40:ab: c4:b1:6e:44:1a:20:88:64:3e:f5:19:9e:dd:d5:2d: 43:72:8d:3b:9d:ba:97:39:a2:77:b2:5c:29:a8:b1: b5:9d:19:9f:4b:c0:92:e7:2e:8e:1a:1e:d6:3c:81: cb:70:79:05:a8:04:39:a7:6a:31:47:f6:89:99:a4: ba:90:ee:1b:3a:26:98:87:56:21:62:88:da:da:ba: f5:19:f4:a5:f1:56:46:e9:68:ea:b7:19:b9:2a:c0: ce:83:79:b1:fe:03:fa:f1:cf:14:b6:db:bd:02:c7: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:B9:7C:DB:2A:75:4A:0F:19:50:AE:BC:06:AB:05:76:95:6C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.137.0-209.50.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f3:d2:37:d7:79:bc:57:5d:c5:bd:d6:88:ba:38:d5:47:c8: 42:b9:86:09:08:aa:22:90:75:61:a3:a9:54:de:44:79:e1:10: 8b:0b:aa:68:07:4e:c7:e0:72:33:33:da:f8:57:98:1f:3e:eb: 52:49:83:26:a6:26:e8:8f:cf:c0:17:c9:65:a0:95:e4:6a:5d: 64:ee:1d:cd:61:6e:aa:6c:fd:5f:3e:76:39:f5:cf:f0:b1:f9: 72:bb:72:13:d4:2d:ef:8f:77:71:a7:4f:0e:31:70:20:cd:ce: b5:51:bc:d4:ed:f9:33:04:da:a3:da:4c:73:28:69:c1:39:57: cb:b3:59:d0:c7:63:3b:14:c6:84:bd:d1:d8:b8:d8:84:e1:ef: 6c:ef:60:63:a8:e9:74:e7:ad:b7:60:df:e2:b9:64:30:5d:5c: d0:13:f4:78:07:e6:9b:79:58:00:45:02:34:8e:cd:d6:fe:af: c9:68:d4:7f:88:b7:24:c4:2d:5d:8e:bb:e4:b1:b8:7b:d9:ee: 57:af:8f:84:67:d4:0d:22:ca:2b:e5:aa:24:5a:64:01:5b:62: 92:60:2e:8a:38:d9:75:54:de:e4:7b:ee:4b:b9:df:4a:d7:60: 78:a0:2e:af:74:45:7b:b2:ba:1d:1a:99:f4:74:ad:55:1b:0e: 6b:88:2b:f7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElHM9/bomdEjW0/+5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MTYxZWJmZjctYzM1Yy00OWEzLTk4NTktN2Q2MjVlNzhhMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXZ58BxU1ddDnpL196OzPArTXuX3IrzZcM1M 58ozCP0DMPIYGiMetQgK8SbGn2mr2aVOFvCBsW/vzA6yeyU6EMZXP/QefzQc0DSm vqEVULVq45JuUT5C3Td0CRpObHadpgdD1jqJbdRxFigF7lpiJCHUm68k53L3zgZP CXSV+zMftLNi3AmC4O4di/aISq8N709AQKvEsW5EGiCIZD71GZ7d1S1Dco07nbqX OaJ3slwpqLG1nRmfS8CS5y6OGh7WPIHLcHkFqAQ5p2oxR/aJmaS6kO4bOiaYh1Yh Yoja2rr1GfSl8VZG6Wjqtxm5KsDOg3mx/gP68c8Uttu9AscUmwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLyluXzbKnVKDxlQrrwGqwV2lWxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNDkyMTJiMGYtOThjMS0z M2Y3LWI0OWItNWJiYWQzNGFhNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADRMokD BADRMoowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlfPSN9d5vFddxb3WiLo41UfIQrmGCQiqIpB1YaOpVN5E eeEQiwuqaAdOx+ByMzPa+FeYHz7rUkmDJqYm6I/PwBfJZaCV5GpdZO4dzWFuqmz9 Xz52OfXP8LH5crtyE9Qt7493cadPDjFwIM3OtVG81O35MwTao9pMcyhpwTlXy7NZ 0MdjOxTGhL3R2LjYhOHvbO9gY6jpdOett2Df4rlkMF1c0BP0eAfmm3lYAEUCNI7N 1v6vyWjUf4i3JMQtXY675LG4e9nuV6+PhGfUDSLKK+WqJFpkAVtikmAuijjZdVTe 5HvuS7nfStdgeKAur3RFe7K6HRqZ9HStVRsOa4gr9w== -----END CERTIFICATE-----Generated at Thu May 8 04:21:38 2025 by rpki-client