$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa File: 3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa (raw, json) Hash identifier: 0WKpDo7xnwEbVeJpEgn5vsbBQzxWP+uja5oiSMYX21s= Subject key identifier: 31:FC:F5:89:00:91:04:06:86:AE:3A:CB:B8:24:A1:6A:93:4A:1B:7E Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584AC9DB9CFA8FA31A8D01869880 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 209.169.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9c:fa:8f:a3:1a:8d:01:86:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=c85d0a6a-c6ee-4370-8503-39dbd010afa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:85:bc:6d:0f:35:3f:f7:cd:ea:79:a4:54: 8b:fb:96:fa:90:04:18:27:27:72:c2:db:25:3e:8c: 86:5d:61:79:4f:7f:ec:63:ee:89:e3:25:4f:8d:69: a6:48:be:62:be:61:c3:f8:89:3c:0a:25:dc:42:f9: e8:d6:78:b9:de:d6:12:94:66:09:c7:20:4e:d0:a5: c9:3b:2b:80:79:4a:6b:50:9d:2d:ef:71:d0:95:2f: e7:60:07:79:dd:cd:0b:81:cf:02:7d:d1:5d:10:3d: ec:75:3c:24:55:88:7a:e1:e8:74:7e:aa:b3:b0:f7: 62:b8:55:8c:e9:ab:a3:83:02:76:35:f8:0f:25:2b: d0:be:e2:27:78:da:d0:95:c7:88:f1:8d:61:4a:f6: bd:b1:d5:f6:88:55:09:43:bc:38:9d:db:a6:82:7e: 9f:4b:99:de:31:66:0a:05:99:60:f9:55:9f:18:97: 1f:6e:24:55:5c:6c:f9:c0:ae:9c:78:32:50:cc:f0: 5e:5d:0d:3e:cd:33:79:c0:d8:84:8a:f7:bf:31:dc: e7:5b:88:e6:6b:28:9a:7e:87:aa:61:8e:95:52:71: 91:9a:1a:fc:18:0b:33:42:01:fe:97:00:d8:7d:45: 9d:d0:b4:ea:57:e7:c5:41:29:9f:8c:22:dd:90:c1: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:F5:89:00:91:04:06:86:AE:3A:CB:B8:24:A1:6A:93:4A:1B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3a1edbd2-41d2-36d1-8c15-21f676432ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5b:67:66:3e:82:c6:d8:55:c7:36:9e:26:3a:28:6f:b9:69: 73:53:da:ce:97:59:b8:d5:10:3e:9e:76:b0:5d:36:1b:c0:2e: 3a:14:48:98:ce:c7:fc:36:54:a1:69:e8:3a:39:f5:cd:37:3a: b7:a4:f4:cb:fa:d2:b6:ef:02:68:a5:0c:cd:cc:f2:b7:6a:cd: 5d:0a:24:ca:46:46:1b:49:f2:35:23:45:a3:0f:0e:79:34:02: fb:68:72:f7:47:b1:b4:d7:9c:83:71:c4:17:ea:d9:32:f0:89: 38:9e:78:62:56:9e:ce:eb:b1:83:a4:f1:51:ca:5c:46:6b:9e: 70:5b:b9:16:ba:7b:09:97:15:b3:fe:c1:ef:b6:78:40:d1:76: 0a:5c:96:c7:75:2e:b8:4c:7c:ee:82:21:ce:84:aa:d5:d3:d5: 11:d1:02:a8:04:82:c6:57:01:19:aa:c4:99:3c:74:22:8b:a8: 16:2c:b5:b0:e8:22:a9:e9:fb:36:6e:0c:1b:c6:29:4d:e6:77: 05:16:c5:4b:8b:75:32:82:4e:99:ab:50:0c:d9:ec:6e:d7:ed: 08:08:6b:ff:43:84:36:cd:be:e1:87:63:51:69:da:41:5d:f9: 8e:60:0d:ff:37:f3:77:27:44:68:ad:f4:47:74:3a:ec:ac:b9: 18:e4:03:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25z6j6MajQGGmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk Yzg1ZDBhNmEtYzZlZS00MzcwLTg1MDMtMzlkYmQwMTBhZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOmFvG0PNT/3zep5pFSL+5b6kAQYJydywtsl PoyGXWF5T3/sY+6J4yVPjWmmSL5ivmHD+Ik8CiXcQvno1ni53tYSlGYJxyBO0KXJ OyuAeUprUJ0t73HQlS/nYAd53c0Lgc8CfdFdED3sdTwkVYh64eh0fqqzsPdiuFWM 6aujgwJ2NfgPJSvQvuIneNrQlceI8Y1hSva9sdX2iFUJQ7w4ndumgn6fS5neMWYK BZlg+VWfGJcfbiRVXGz5wK6ceDJQzPBeXQ0+zTN5wNiEive/MdznW4jmayiafoeq YY6VUnGRmhr8GAszQgH+lwDYfUWd0LTqV+fFQSmfjCLdkMEN7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH89YkAkQQGhq46y7gkoWqTSht+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvM2ExZWRiZDItNDFkMi0z NmQxLThjMTUtMjFmNjc2NDMyZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ankMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENbZ2Y+gsbYVcc2niY6KG+5aXNT2s6XWbjVED6edrBdNhvALjoUSJjO x/w2VKFp6Do59c03Orek9Mv60rbvAmilDM3M8rdqzV0KJMpGRhtJ8jUjRaMPDnk0 AvtocvdHsbTXnINxxBfq2TLwiTieeGJWns7rsYOk8VHKXEZrnnBbuRa6ewmXFbP+ we+2eEDRdgpclsd1LrhMfO6CIc6EqtXT1RHRAqgEgsZXARmqxJk8dCKLqBYstbDo Iqnp+zZuDBvGKU3mdwUWxUuLdTKCTpmrUAzZ7G7X7QgIa/9DhDbNvuGHY1Fp2kFd +Y5gDf8383cnRGit9Ed0OuysuRjkA3A= -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:48 2025 by rpki-client