$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa File: a9452a88-6ebc-3d4c-8810-c191bce079bd.roa (raw, json) Hash identifier: qK13mbtyaPX7mmrpTFzxxpwIg/xQTPtDPbpXtrIeM34= Subject key identifier: C8:F0:F2:D6:DB:30:5A:9D:3E:EE:E7:33:67:E7:B5:41:34:26:4C:B5 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285849C4D4C1ABBCF49ABBAAB0C420 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 209.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c1:ab:bc:f4:9a:bb:aa:b0:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=3bedb692-6667-4da1-99f8-ad07fd743363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:e1:8d:20:02:78:ac:54:1a:4b:71:23:fd: ef:ce:53:8d:bf:d7:cc:ac:17:f9:dc:46:5f:8b:8a: 68:c7:d9:7a:aa:fe:c6:4b:f0:f1:99:f6:2b:88:dd: 9a:c7:a7:78:74:f6:63:35:1e:15:c9:14:86:50:f5: c1:76:07:3f:cb:78:de:6d:6d:d5:68:79:73:d5:1c: 26:7a:9c:ae:d4:94:ba:40:7a:82:74:33:1a:38:b3: 78:01:4c:c8:ad:20:d2:d5:24:e3:f9:49:0c:22:17: 96:cb:27:ae:97:3a:90:9a:a8:e7:55:f0:20:d7:03: bb:7e:5d:8a:57:b6:ad:14:ce:1c:38:30:da:a7:c2: 19:da:19:71:47:c7:21:b7:e1:25:82:42:52:89:e6: 5c:eb:31:32:97:63:0b:9d:16:be:b9:96:a7:4b:84: 16:dd:54:45:c7:ad:47:0d:66:2e:82:f8:b4:d3:d8: 58:fc:90:d7:4e:a7:85:6a:dc:3d:53:f3:26:3d:92: d9:ca:70:b6:c7:89:77:7e:bd:0b:47:1f:d8:5e:6e: bd:9c:a9:80:75:52:04:a4:eb:a0:4c:2d:ea:74:9e: c7:ce:62:02:ad:43:5c:79:5a:25:4f:5e:31:73:c9: 59:08:0e:11:c1:c4:66:de:29:3b:ad:f0:ab:d3:22: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F0:F2:D6:DB:30:5A:9D:3E:EE:E7:33:67:E7:B5:41:34:26:4C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c7:c1:8b:b5:01:01:ea:25:14:12:49:f6:98:50:92:48:3f: f1:32:f3:f0:f0:5d:53:c2:20:66:66:06:ad:a9:f7:81:a6:77: e0:37:1b:d4:68:b9:cc:48:c8:ca:92:7b:e0:8a:23:d4:08:d0: fd:08:41:b3:a1:e3:10:77:3b:f6:aa:27:6d:32:8b:de:55:79: 19:bb:43:05:4a:f3:e9:b7:31:de:df:84:af:43:06:3d:0e:e2: 8a:78:7b:df:fd:7b:f0:4d:d6:05:51:93:e5:e7:2e:12:a9:cc: be:29:eb:28:94:0d:63:35:d8:15:0b:82:c0:0a:d1:05:b2:b5: 93:7a:6b:f7:c6:c6:1e:21:c3:7c:48:e1:38:b0:46:32:dc:4f: ab:e2:a1:b7:bf:12:27:85:a4:ca:97:7b:db:c2:f4:6e:0f:f8: 1b:ac:9d:66:80:d2:38:a7:f5:e0:d5:a6:bb:46:62:00:b5:66: 0c:2e:df:e0:c3:05:fc:c4:b4:a6:ef:16:de:27:4e:bb:c0:46: 27:e1:77:50:a0:81:3d:68:be:57:83:77:be:5d:1f:2b:d2:c2: b9:f9:e6:f7:36:f0:86:3d:46:a7:60:e8:84:55:c3:f7:63:01: d8:0e:30:28:16:7e:b6:53:3a:ff:ee:61:a3:ce:b2:df:65:a6: 2d:86:2f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MGrvPSau6qwxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk M2JlZGI2OTItNjY2Ny00ZGExLTk5ZjgtYWQwN2ZkNzQzMzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutLhjSACeKxUGktxI/3vzlONv9fMrBf53EZf i4pox9l6qv7GS/DxmfYriN2ax6d4dPZjNR4VyRSGUPXBdgc/y3jebW3VaHlz1Rwm epyu1JS6QHqCdDMaOLN4AUzIrSDS1STj+UkMIheWyyeulzqQmqjnVfAg1wO7fl2K V7atFM4cODDap8IZ2hlxR8cht+ElgkJSieZc6zEyl2MLnRa+uZanS4QW3VRFx61H DWYugvi009hY/JDXTqeFatw9U/MmPZLZynC2x4l3fr0LRx/YXm69nKmAdVIEpOug TC3qdJ7HzmICrUNceVolT14xc8lZCA4RwcRm3ik7rfCr0yIaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjw8tbbMFqdPu7nM2fntUE0Jky1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTk0NTJhODgtNmViYy0z ZDRjLTg4MTAtYzE5MWJjZTA3OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADHwYu1AQHqJRQSSfaYUJJIP/Ey8/DwXVPCIGZmBq2p94Gmd+A3G9Ro ucxIyMqSe+CKI9QI0P0IQbOh4xB3O/aqJ20yi95VeRm7QwVK8+m3Md7fhK9DBj0O 4op4e9/9e/BN1gVRk+XnLhKpzL4p6yiUDWM12BULgsAK0QWytZN6a/fGxh4hw3xI 4TiwRjLcT6viobe/EieFpMqXe9vC9G4P+BusnWaA0jin9eDVprtGYgC1Zgwu3+DD BfzEtKbvFt4nTrvARifhd1CggT1ovleDd75dHyvSwrn55vc28IY9Rqdg6IRVw/dj AdgOMCgWfrZTOv/uYaPOst9lpi2GL/E= -----END CERTIFICATE-----Generated at Wed May 7 23:42:47 2025 by rpki-client