$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa File: 650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa (raw, json) Hash identifier: hzwg+TmzUbIzaSd3vGye2ga2de6ENe+b6Vjn+d8s7fg= Subject key identifier: DE:43:A9:03:CE:06:7C:E1:3A:43:6D:90:F4:14:D6:14:3D:7A:C6:64 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584909E6A1CF6B41B523C2AD8D80 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 209.169.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a1:cf:6b:41:b5:23:c2:ad:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=ef368b3b-8009-46e6-ad3e-2fafc5d904c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:7b:48:9e:54:4b:7b:d5:7b:c2:bc:4a:40: c1:05:3c:d4:dd:f9:33:a5:57:4a:7c:24:01:1f:50: 7b:03:45:26:d4:80:47:ee:d0:a0:4f:fd:7b:0e:12: 98:58:d7:ba:51:85:dd:ff:9c:f2:6b:eb:35:0b:28: 6f:48:80:e6:60:ef:bb:bc:2f:fd:2e:26:ba:a2:54: 17:85:91:2a:f2:4e:e9:f0:6b:f8:a9:b4:02:2f:b3: d9:bf:f3:11:60:ba:e1:d8:30:15:ac:36:92:6f:bb: ee:3a:b8:80:48:62:5c:62:88:5e:55:f8:01:fb:3a: af:01:13:1b:ad:ba:f2:e0:e5:20:5b:0d:5c:32:3f: 68:f4:2c:38:7f:01:a3:68:52:bd:e4:f9:98:f2:91: cc:0b:0b:f8:17:7f:fe:7f:8c:78:34:74:fa:0f:ba: 4e:17:fe:1e:f0:df:c8:7d:4f:75:fb:ae:6b:8a:f5: d3:cb:8d:4e:84:32:95:d8:10:a1:07:a1:cb:81:e5: 76:6a:a8:e9:1c:03:7c:8a:d5:93:a1:23:22:68:4d: 24:e8:d4:2e:d7:9d:7e:74:0b:44:49:40:c7:e7:ad: a3:5b:63:09:13:49:9e:0f:62:fb:16:44:0a:ce:d9: c6:48:e2:da:41:cb:76:d1:f0:06:65:32:c8:f8:d4: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:A9:03:CE:06:7C:E1:3A:43:6D:90:F4:14:D6:14:3D:7A:C6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d1:e7:14:bb:f7:45:e9:9b:a4:7f:63:17:61:74:ad:ed:4b: 81:51:1e:87:cc:1e:0a:8b:3f:a7:dc:a6:8e:84:2a:69:f6:d1: 13:01:4d:1d:36:a3:a9:3d:3e:5b:52:70:44:d4:43:1e:d2:ce: d0:19:ea:64:c5:fa:df:14:dd:6b:50:ce:71:7a:86:bd:11:5a: 7a:c0:e7:93:43:b8:98:b3:fd:d5:c8:82:5b:ab:9a:49:fc:a1: 79:20:68:de:b3:59:d8:9f:50:fd:52:a7:c1:5d:af:71:ce:9b: 5e:8c:7f:de:09:67:78:cd:68:57:b9:58:78:66:2a:4e:48:11: bc:47:30:9b:48:b5:c7:5e:cf:18:53:5d:e8:01:46:26:be:6e: ce:03:c2:f3:65:6e:ba:07:7e:ac:08:f7:c0:b8:63:64:3f:63: 98:f4:ae:b6:98:99:af:ee:15:14:21:5a:a4:a6:54:07:aa:55: e3:95:c8:7b:89:30:39:48:68:1b:d6:63:41:0f:5c:b9:9f:e5: 49:ab:5c:55:f5:f9:cf:a1:a0:fc:b3:55:85:06:40:3a:a3:c0: 69:0b:c1:c1:a8:53:3b:06:63:ba:6f:b3:8e:82:39:c8:bb:e1: c7:12:22:da:8d:39:45:2d:2e:d9:7a:46:34:fa:80:4b:c5:4d: 88:fe:e0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qHPa0G1I8KtjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWYzNjhiM2ItODAwOS00NmU2LWFkM2UtMmZhZmM1ZDkwNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT97SJ5US3vVe8K8SkDBBTzU3fkzpVdKfCQB H1B7A0Um1IBH7tCgT/17DhKYWNe6UYXd/5zya+s1CyhvSIDmYO+7vC/9Lia6olQX hZEq8k7p8Gv4qbQCL7PZv/MRYLrh2DAVrDaSb7vuOriASGJcYoheVfgB+zqvARMb rbry4OUgWw1cMj9o9Cw4fwGjaFK95PmY8pHMCwv4F3/+f4x4NHT6D7pOF/4e8N/I fU91+65rivXTy41OhDKV2BChB6HLgeV2aqjpHAN8itWToSMiaE0k6NQu151+dAtE SUDH562jW2MJE0meD2L7FkQKztnGSOLaQct20fAGZTLI+NQMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5DqQPOBnzhOkNtkPQU1hQ9esZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNjUwNDk0ZjktN2Q4OS0z YWQyLWI2ZjQtZmM3YzdjZTQ0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ankMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHR5xS790Xpm6R/YxdhdK3tS4FRHofMHgqLP6fcpo6EKmn20RMBTR02 o6k9PltScETUQx7SztAZ6mTF+t8U3WtQznF6hr0RWnrA55NDuJiz/dXIglurmkn8 oXkgaN6zWdifUP1Sp8Fdr3HOm16Mf94JZ3jNaFe5WHhmKk5IEbxHMJtItcdezxhT XegBRia+bs4DwvNlbroHfqwI98C4Y2Q/Y5j0rraYma/uFRQhWqSmVAeqVeOVyHuJ MDlIaBvWY0EPXLmf5UmrXFX1+c+hoPyzVYUGQDqjwGkLwcGoUzsGY7pvs46COci7 4ccSItqNOUUtLtl6RjT6gEvFTYj+4BU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:08 2025 by rpki-client