$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json) Hash identifier: E7OV2Z5NKDteBA79pucV3dYdkCSLzKjZNa4uCY+iM/o= Subject key identifier: 04:CA:CA:CF:1A:42:0F:A8:1C:61:DB:49:82:EB:C9:59:B2:00:30:97 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584A43DB0122F7C944E979F6D100 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 14369 IP address blocks: 209.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:01:22:f7:c9:44:e9:79:f6:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=d019f028-8639-4d4f-8adb-29e59bf219c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:92:50:3a:d3:24:ed:74:83:33:69:97:8a: b3:0f:38:24:73:a6:65:e1:0a:b7:68:30:b3:ac:fb: b9:3d:79:a1:3a:9d:f1:82:50:4b:f8:30:2f:67:a3: 77:b4:d9:db:e0:32:e2:0f:84:7e:28:fe:8c:a5:11: 3e:0f:69:32:f0:bf:57:c1:4c:b0:97:88:09:98:ab: c2:c0:ef:0f:71:bf:af:b1:eb:ca:0c:77:b9:c6:90: b8:6c:0d:97:97:d5:e5:6d:c3:bc:b5:de:96:06:d0: d6:d2:db:f8:b3:71:d3:2f:64:bd:4a:1d:d3:c5:7c: 63:7c:6e:87:55:ee:65:f8:4b:79:d0:90:6e:3d:d0: b7:58:bf:c2:41:d6:d7:6e:0e:d2:ae:f1:dc:dd:54: c6:4d:e6:ef:08:4b:f4:11:c0:c0:6d:9e:06:25:b9: ce:8b:60:0e:d2:67:c8:56:c8:51:3e:ee:bc:b6:4a: c7:a7:e1:12:68:e7:70:79:47:9f:89:34:78:e7:3f: 2d:87:08:63:43:c5:2b:99:2c:90:9c:e4:5b:8e:c2: 68:bc:12:e7:ee:c9:e4:71:23:24:4f:24:d6:5f:2f: fc:6a:47:0e:c4:d3:bb:fb:ec:54:b9:25:41:13:7e: 01:fd:44:ce:04:bc:41:e9:89:e9:29:6f:99:e9:28: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:CA:CF:1A:42:0F:A8:1C:61:DB:49:82:EB:C9:59:B2:00:30:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:65:c1:56:58:1c:62:31:a3:e5:0f:e1:fb:9c:25:da:5b:f6: 23:5d:f1:64:ea:55:61:7f:bb:b7:e9:16:76:7b:1e:c7:b9:7c: 64:2f:7e:1e:ba:ec:32:42:be:d3:1f:2b:7b:fd:ba:03:fc:e8: 7f:c0:61:88:6a:5c:c1:bc:98:58:73:91:ce:dd:0c:20:26:6c: 54:20:63:dc:02:68:6c:61:c4:cd:20:88:ee:ae:e1:ed:32:a4: 94:d4:81:e3:83:7b:97:f1:53:5a:94:54:ba:b6:74:93:51:de: dc:d7:70:a1:8d:7a:2f:84:ee:2c:f8:95:4b:3c:5f:38:35:e5: a3:b1:c6:6f:35:b7:01:b6:ef:79:dc:1a:49:73:96:51:6b:9e: 30:f0:1c:e5:40:e0:a7:b0:c3:40:44:60:f8:98:ab:ff:9e:44: cd:cf:b9:58:d3:64:29:c1:d9:52:a3:2c:82:1e:dc:d8:19:46: b1:cd:40:58:9e:c6:d1:99:f8:b8:e1:7a:01:e0:ca:6e:0f:52: b0:f1:f1:c2:2f:5f:07:16:24:2e:4e:9b:3e:20:59:17:a1:6f: 32:80:27:3c:e1:ee:41:33:56:83:76:e7:03:7a:cd:1e:2f:00: 5c:e2:75:25:f4:e1:ef:02:1b:a6:92:03:46:20:36:75:df:86: 3f:95:d1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wEi98lE6Xn20QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZDAxOWYwMjgtODYzOS00ZDRmLThhZGItMjllNTliZjIxOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AWSUDrTJO10gzNpl4qzDzgkc6Zl4Qq3aDCz rPu5PXmhOp3xglBL+DAvZ6N3tNnb4DLiD4R+KP6MpRE+D2ky8L9XwUywl4gJmKvC wO8Pcb+vsevKDHe5xpC4bA2Xl9XlbcO8td6WBtDW0tv4s3HTL2S9Sh3TxXxjfG6H Ve5l+Et50JBuPdC3WL/CQdbXbg7SrvHc3VTGTebvCEv0EcDAbZ4GJbnOi2AO0mfI VshRPu68tkrHp+ESaOdweUefiTR45z8thwhjQ8UrmSyQnORbjsJovBLn7snkcSMk TyTWXy/8akcOxNO7++xUuSVBE34B/UTOBLxB6YnpKW+Z6ShxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATKys8aQg+oHGHbSYLryVmyADCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYTUwMmI0MzItMTYzMi0z OTQwLTg3MmYtY2QyNGVlN2U5MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVlwVZYHGIxo+UP4fucJdpb9iNd8WTqVWF/u7fpFnZ7Hse5fGQvfh66 7DJCvtMfK3v9ugP86H/AYYhqXMG8mFhzkc7dDCAmbFQgY9wCaGxhxM0giO6u4e0y pJTUgeODe5fxU1qUVLq2dJNR3tzXcKGNei+E7iz4lUs8Xzg15aOxxm81twG273nc GklzllFrnjDwHOVA4Keww0BEYPiYq/+eRM3PuVjTZCnB2VKjLIIe3NgZRrHNQFie xtGZ+LjhegHgym4PUrDx8cIvXwcWJC5Omz4gWRehbzKAJzzh7kEzVoN25wN6zR4v AFzidSX04e8CG6aSA0YgNnXfhj+V0fA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:26:50 2025 by rpki-client