$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa File: 50839927-59e2-3289-ac48-074418a325c8.roa (raw, json) Hash identifier: O0PUsufAXL/KMssdSSYte7F/MB6pSThlrMO5w/xlomA= Subject key identifier: 18:B7:88:32:45:F9:E6:06:F8:CE:E5:08:6C:25:FD:4A:4C:47:A4:31 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285849C4D4B736D701C37AEA4D2A60 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 209.169.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b7:36:d7:01:c3:7a:ea:4d:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=13e0e883-23f4-4b39-83d5-344c74321a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:f4:86:a3:f4:64:54:ba:ed:65:de:91:2a: f6:08:fb:f6:bd:13:10:bb:47:e9:43:fe:39:12:18: 22:6a:3c:92:a6:57:26:fb:af:7b:35:ce:5c:07:b2: 94:1b:7a:6a:7e:8f:c7:7e:f8:b3:70:19:b8:f9:72: 20:d7:34:a8:06:68:69:ed:8e:40:0b:07:f2:2d:bb: e9:07:72:b2:9b:ae:56:b0:34:67:0c:2b:a3:74:7b: e3:44:d9:5f:c6:32:db:88:ea:35:fe:4b:d2:2d:01: 46:1a:95:09:7f:4b:bd:d0:89:16:6b:55:09:4f:66: 26:8c:f8:19:67:5c:e7:2f:ee:28:59:be:f3:5f:0f: 6b:4d:bd:2b:ef:2e:a1:d9:70:67:20:b3:2f:00:4d: 53:d3:b6:06:88:7b:03:be:a8:32:c0:09:2d:a3:0d: 3e:eb:a3:00:ed:32:4c:da:28:52:68:98:89:a6:45: ab:4b:03:b4:7a:ce:7d:0d:77:62:ee:ac:af:5e:29: b0:02:7f:e0:82:cd:25:2a:e2:7a:85:52:3d:17:77: df:af:57:16:74:2b:f6:b8:d9:ef:e0:85:d6:24:c0: 33:59:cf:c8:47:70:96:c8:0f:84:84:2c:dd:4d:0b: e3:39:7e:cf:6e:f6:41:1e:6e:e2:84:11:54:71:2f: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:88:32:45:F9:E6:06:F8:CE:E5:08:6C:25:FD:4A:4C:47:A4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cd:ac:27:7e:40:61:6d:39:3c:77:97:18:a8:a5:c8:aa:48: 1b:18:da:05:78:32:cf:2d:e9:c5:a5:eb:85:07:48:e7:85:05: fd:3a:60:be:8b:47:f6:09:18:e8:20:2d:d8:6d:27:df:56:a2: 50:fd:a7:55:2e:85:34:4e:6d:3c:ca:ed:65:1f:4e:f8:e9:9a: a1:5f:f4:14:15:d1:76:81:57:37:8b:64:31:d8:2d:a4:d2:ea: 5f:8f:42:b2:66:26:b7:72:da:81:13:57:ff:c9:63:98:c3:ff: db:aa:70:21:73:d9:b4:df:8f:19:b0:ff:7b:94:b0:25:dc:bd: d5:45:cc:fe:f6:31:3d:bd:e5:2d:ff:d8:77:1e:8d:7f:ce:9b: 56:b9:01:c5:d9:5f:e0:c1:05:b6:32:9b:de:36:95:84:9b:22: 12:05:76:0c:fd:ef:21:f5:92:41:9e:bc:03:ad:db:e4:75:8d: e2:ae:a4:b7:5a:c9:15:8a:e5:0c:97:29:fe:9e:d8:ac:87:e6: 04:26:39:e3:9a:b5:20:e3:e7:52:19:f4:6b:15:bb:e3:ad:5b: 10:71:bb:fe:04:3a:9d:b0:fe:df:19:1d:f8:e6:75:d5:69:69: f0:0c:3f:09:d7:a7:fd:67:92:13:52:d6:ae:f8:12:01:5f:9b: fc:b8:eb:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Lc21wHDeupNKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTNlMGU4ODMtMjNmNC00YjM5LTgzZDUtMzQ0Yzc0MzIxYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNT0hqP0ZFS67WXekSr2CPv2vRMQu0fpQ/45 EhgiajySplcm+697Nc5cB7KUG3pqfo/HfvizcBm4+XIg1zSoBmhp7Y5ACwfyLbvp B3Kym65WsDRnDCujdHvjRNlfxjLbiOo1/kvSLQFGGpUJf0u90IkWa1UJT2YmjPgZ Z1znL+4oWb7zXw9rTb0r7y6h2XBnILMvAE1T07YGiHsDvqgywAktow0+66MA7TJM 2ihSaJiJpkWrSwO0es59DXdi7qyvXimwAn/ggs0lKuJ6hVI9F3ffr1cWdCv2uNnv 4IXWJMAzWc/IR3CWyA+EhCzdTQvjOX7PbvZBHm7ihBFUcS9UiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi3iDJF+eYG+M7lCGwl/UpMR6QxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNTA4Mzk5MjctNTllMi0z Mjg5LWFjNDgtMDc0NDE4YTMyNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzNrCd+QGFtOTx3lxiopciqSBsY2gV4Ms8t6cWl64UHSOeFBf06YL6L R/YJGOggLdhtJ99WolD9p1UuhTRObTzK7WUfTvjpmqFf9BQV0XaBVzeLZDHYLaTS 6l+PQrJmJrdy2oETV//JY5jD/9uqcCFz2bTfjxmw/3uUsCXcvdVFzP72MT295S3/ 2HcejX/Om1a5AcXZX+DBBbYym942lYSbIhIFdgz97yH1kkGevAOt2+R1jeKupLda yRWK5QyXKf6e2KyH5gQmOeOatSDj51IZ9GsVu+OtWxBxu/4EOp2w/t8ZHfjmddVp afAMPwnXp/1nkhNS1q74EgFfm/y460U= -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:33 2025 by rpki-client