$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa File: e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa (raw, json) Hash identifier: ObGGrpPb/seoEcNvkVbUjDcQiW3s9ZdRpX+AOzjk5KU= Subject key identifier: D9:89:C1:32:1D:3F:D0:A7:3F:73:4E:91:A1:21:A0:89:65:A8:24:76 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584992949AD17C20B15C6A6A4600 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 399660 IP address blocks: 209.51.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9a:d1:7c:20:b1:5c:6a:6a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=bb6002ac-57a1-44fb-a8b1-f2dd62fd5185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:4a:26:95:43:d8:41:57:64:d9:58:6d:ca: ef:ee:9e:a2:92:9f:40:48:dc:db:74:5a:0b:ad:df: ac:fd:4f:a0:21:46:85:1c:cf:d9:e1:06:21:cb:e0: bb:33:83:75:4c:30:ca:b8:44:9d:65:e2:dc:c7:a9: 70:f4:61:97:da:e9:b0:3a:69:06:96:72:34:7f:87: a3:ba:9a:d0:ec:02:a8:17:93:cf:55:43:89:ac:01: 61:0c:68:b2:cd:7f:eb:f6:e6:1d:25:c7:39:a7:ce: fe:ad:f0:d2:96:0c:79:50:16:09:9c:d6:6d:8a:4c: 03:7e:f3:fb:b3:f1:eb:53:ca:b4:d7:0b:87:34:e9: ec:4c:66:37:11:5b:47:8b:1f:70:2b:26:e7:f6:aa: 57:b6:44:d1:0d:e3:fb:d7:ff:21:21:23:66:25:5a: af:63:54:4a:95:f2:84:d7:af:8e:67:ad:44:dc:62: 4d:4f:61:89:cb:01:89:38:29:d9:84:9c:ec:18:7c: ba:33:a2:00:ba:a7:37:98:57:13:fe:03:5d:9b:f4: 82:59:8b:50:76:d2:2b:48:7f:2f:82:87:9a:d8:97: d6:0e:3b:61:48:72:8d:05:7f:94:89:33:dc:1e:57: 79:3b:1a:6c:78:f0:0d:b1:8e:6a:01:72:18:85:4d: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:C1:32:1D:3F:D0:A7:3F:73:4E:91:A1:21:A0:89:65:A8:24:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 209.51.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fe:8f:00:ef:e3:11:71:a3:67:66:71:e8:67:6e:c0:27:d1: 47:98:e1:1b:b5:46:c4:25:6a:21:90:26:9c:f0:12:8c:45:3a: 24:97:9d:d8:6e:85:d4:18:2a:90:d9:54:8c:82:ea:15:e3:72: ac:a3:e6:c3:67:be:41:9c:37:43:61:e3:71:58:26:ab:83:fd: 7b:86:9e:14:2e:d8:f5:d3:11:fb:29:33:12:89:28:f3:24:fb: 8c:fd:60:2a:71:cc:1b:06:2c:a6:56:33:77:0c:26:9a:28:a8: 8c:63:29:bb:9d:b3:68:03:c5:2c:78:e9:8d:9f:37:0e:10:a3: a8:40:d4:e7:dd:c3:ef:67:77:78:11:6b:1d:81:a7:9b:20:11: 62:4b:67:10:90:ff:2c:10:f6:d2:79:3e:ca:89:76:2f:4d:63: c2:c1:2f:59:38:7c:6d:05:66:bf:28:83:ca:25:6d:fa:75:28: 05:3c:20:09:39:5a:94:2c:cf:80:8b:6f:79:38:1b:96:dc:58: 7a:2e:0d:16:f8:eb:76:01:52:20:84:c2:1a:32:42:3e:a0:e5: 20:e8:0c:f0:4a:b5:10:bd:e1:95:6a:90:ca:07:f6:18:ab:27: 3d:54:95:ae:c2:a2:a1:db:ab:13:98:5e:78:b5:7d:8f:56:d0: 17:15:06:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJrRfCCxXGpqRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YmI2MDAyYWMtNTdhMS00NGZiLWE4YjEtZjJkZDYyZmQ1MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpBKJpVD2EFXZNlYbcrv7p6ikp9ASNzbdFoL rd+s/U+gIUaFHM/Z4QYhy+C7M4N1TDDKuESdZeLcx6lw9GGX2umwOmkGlnI0f4ej uprQ7AKoF5PPVUOJrAFhDGiyzX/r9uYdJcc5p87+rfDSlgx5UBYJnNZtikwDfvP7 s/HrU8q01wuHNOnsTGY3EVtHix9wKybn9qpXtkTRDeP71/8hISNmJVqvY1RKlfKE 16+OZ61E3GJNT2GJywGJOCnZhJzsGHy6M6IAuqc3mFcT/gNdm/SCWYtQdtIrSH8v goea2JfWDjthSHKNBX+UiTPcHld5OxpsePANsY5qAXIYhU2PYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmJwTIdP9CnP3NOkaEhoIllqCR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZTVlMzk2YzItMzcxZC0z OGY4LWFkNTAtYThmZGJmODZiZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz+jwDv4xFxo2dmcehnbsAn0UeY4Ru1RsQlaiGQJpzwEoxFOiSXndhu hdQYKpDZVIyC6hXjcqyj5sNnvkGcN0Nh43FYJquD/XuGnhQu2PXTEfspMxKJKPMk +4z9YCpxzBsGLKZWM3cMJpooqIxjKbuds2gDxSx46Y2fNw4Qo6hA1Ofdw+9nd3gR ax2Bp5sgEWJLZxCQ/ywQ9tJ5PsqJdi9NY8LBL1k4fG0FZr8og8olbfp1KAU8IAk5 WpQsz4CLb3k4G5bcWHouDRb463YBUiCEwhoyQj6g5SDoDPBKtRC94ZVqkMoH9hir Jz1Ula7CoqHbqxOYXni1fY9W0BcVBks= -----END CERTIFICATE-----Generated at Wed Apr 30 01:29:57 2025 by rpki-client