$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa File: fa861745-00da-3d9c-9262-192bcb50cab0.roa (raw, json) Hash identifier: 9UbJL3r+ow8I2xGy7knWlAwp5czHytGlCYC1Nq5Qm3k= Subject key identifier: 50:3A:01:00:09:EA:28:37:54:5A:EF:A0:3E:4F:30:ED:14:51:12:F8 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9E185D4224B12C1384180 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 209.151.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e1:85:d4:22:4b:12:c1:38:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=34de5115-37c8-4de3-a5a8-8faf818d4de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:e5:c5:19:4b:31:9c:00:9d:71:e3:e8:12: 98:cc:83:18:f8:e9:d2:c1:28:56:9b:e1:65:6c:b2: 48:05:b3:46:56:69:71:b1:b9:57:fa:7b:dc:33:e9: 8b:69:91:ff:e0:cc:06:cb:4f:1a:98:9a:58:2f:c9: 42:87:ec:66:a5:d1:77:c8:a7:c9:9f:f7:06:82:ca: f2:b7:99:2e:2d:c8:ba:c2:95:01:e4:7a:84:0c:d9: 82:c1:f5:23:e8:30:8e:c8:53:71:97:12:3c:96:ed: 98:01:d7:44:56:80:ca:e0:49:f8:52:b4:b1:68:2e: e9:5b:1a:f1:44:f4:cc:07:62:63:78:3c:6b:8c:8c: 84:ee:4d:ef:5e:87:ba:f6:e7:0c:37:98:3f:71:98: 9d:e8:6e:c8:89:71:d2:3c:bd:26:30:6f:66:89:8e: a8:3e:73:92:04:3c:83:47:cb:dc:26:83:47:d7:f2: 29:f9:f5:2b:78:99:d1:e3:7e:05:3e:c1:2f:3f:12: 26:35:bd:8c:01:c6:22:3b:7a:e5:2e:69:f7:cb:15: a6:9a:95:6f:28:fe:e7:ce:be:05:5f:d3:2c:ee:7e: 92:d9:12:0f:25:5f:0f:c4:98:33:ac:12:c1:fb:f9: 4f:a0:10:9b:4a:00:0e:e1:06:7d:43:0e:94:ee:2f: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3A:01:00:09:EA:28:37:54:5A:EF:A0:3E:4F:30:ED:14:51:12:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 209.151.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b5:00:83:7c:51:64:16:1f:d3:d2:c8:f7:f9:d0:bb:77:5c: 1c:62:06:ce:04:06:55:2b:1c:45:3c:55:e1:bc:c2:98:5b:84: 23:e0:08:70:88:38:2d:8e:bb:60:c7:7a:45:de:f1:1e:ee:3e: 4f:73:e1:a9:e0:00:0b:75:ff:6a:72:c4:f8:2a:35:49:09:e9: cf:ed:12:19:29:ad:be:a2:2c:c7:bb:46:fe:08:cb:31:b8:78: ac:eb:b4:63:67:f2:42:91:70:c8:b0:be:85:47:b7:0b:35:a7: 12:65:cd:8f:41:9d:a2:90:e6:10:00:19:08:72:c7:c2:e7:1c: b5:56:7c:5c:d4:04:6d:ec:ed:6f:57:cd:51:35:48:e0:9c:d8: fc:eb:23:7c:c2:d5:54:33:3f:60:09:84:d8:db:e5:21:7a:ab: 29:67:3b:19:f4:02:c9:89:4e:e4:e8:f6:23:18:47:fd:aa:5e: 49:44:0e:1d:b3:24:0c:8c:93:57:8e:17:e6:b8:9d:62:3e:96: de:f5:4c:8e:09:e8:30:d7:37:19:3f:94:85:62:57:02:71:53: 95:1a:d2:14:ea:17:bb:81:fb:2a:73:fb:3f:0f:52:86:a0:8b: fc:01:cb:38:36:bc:9e:b3:99:4c:37:f2:eb:2f:e7:67:a5:7c: 26:84:4a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eGF1CJLEsE4QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MzRkZTUxMTUtMzdjOC00ZGUzLWE1YTgtOGZhZjgxOGQ0ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjblxRlLMZwAnXHj6BKYzIMY+OnSwShWm+Fl bLJIBbNGVmlxsblX+nvcM+mLaZH/4MwGy08amJpYL8lCh+xmpdF3yKfJn/cGgsry t5kuLci6wpUB5HqEDNmCwfUj6DCOyFNxlxI8lu2YAddEVoDK4En4UrSxaC7pWxrx RPTMB2JjeDxrjIyE7k3vXoe69ucMN5g/cZid6G7IiXHSPL0mMG9miY6oPnOSBDyD R8vcJoNH1/Ip+fUreJnR434FPsEvPxImNb2MAcYiO3rlLmn3yxWmmpVvKP7nzr4F X9Ms7n6S2RIPJV8PxJgzrBLB+/lPoBCbSgAO4QZ9Qw6U7i861wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA6AQAJ6ig3VFrvoD5PMO0UURL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZmE4NjE3NDUtMDBkYS0z ZDljLTkyNjItMTkyYmNiNTBjYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ZfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi1AIN8UWQWH9PSyPf50Lt3XBxiBs4EBlUrHEU8VeG8wphbhCPgCHCI OC2Ou2DHekXe8R7uPk9z4angAAt1/2pyxPgqNUkJ6c/tEhkprb6iLMe7Rv4IyzG4 eKzrtGNn8kKRcMiwvoVHtws1pxJlzY9BnaKQ5hAAGQhyx8LnHLVWfFzUBG3s7W9X zVE1SOCc2PzrI3zC1VQzP2AJhNjb5SF6qylnOxn0AsmJTuTo9iMYR/2qXklEDh2z JAyMk1eOF+a4nWI+lt71TI4J6DDXNxk/lIViVwJxU5Ua0hTqF7uB+ypz+z8PUoag i/wByzg2vJ6zmUw38usv52elfCaESlk= -----END CERTIFICATE-----Generated at Mon Apr 28 02:16:24 2025 by rpki-client