$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa File: 3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa (raw, json) Hash identifier: xb7eWIKS7EHWNZ6A5KO+5r1YLpaan3Uh2ItQ0gCSb+o= Subject key identifier: 11:47:F4:26:2A:A3:99:92:56:B0:0A:55:23:F0:48:BC:BD:CE:74:BC Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285848ADC60D4645D5BF3CDB8AE280 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0d:46:45:d5:bf:3c:db:8a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=a5259aeb-74dc-4c87-bab3-49062a3577fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:e0:f2:57:46:9b:12:80:89:1b:14:9d:83: b3:d8:e2:e8:83:1c:bd:8e:b1:d9:0f:d0:76:92:0a: bf:21:90:c3:de:96:79:4f:3f:b2:cb:e3:2c:3f:a3: e3:83:0b:be:38:87:be:bd:08:9a:ad:9d:d0:3e:3e: 92:44:39:29:ef:34:d8:f5:33:cb:b9:b4:73:37:71: 2a:5d:bf:e9:d4:a4:6d:ae:77:2f:d3:bc:a0:ae:3e: ef:21:eb:0e:df:a3:3b:c0:13:f0:36:bd:05:f3:7a: 4e:ab:15:67:cf:bd:ef:96:fe:aa:0c:f8:a3:c2:17: ce:4c:9d:f1:82:f0:09:d6:11:44:6d:70:0b:0c:e2: 7b:45:fb:23:3f:17:bb:a9:e6:ee:5b:f2:f2:d4:3c: 45:66:44:c6:44:eb:03:9c:b9:9e:5d:e8:95:e5:18: c2:14:bc:52:f4:d5:da:d0:04:47:e3:63:66:2c:df: 83:3e:cc:df:e5:5b:97:f8:bf:ef:54:b8:61:4f:b0: c5:a7:28:da:66:30:74:34:30:59:83:08:e7:25:20: a1:ec:69:e6:a1:5e:ed:9b:86:a7:1f:fd:ff:9a:cf: 86:d2:d6:db:96:87:69:49:59:38:9e:29:13:62:37: 15:4f:96:02:28:92:89:d8:d2:f0:93:26:50:72:3d: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:F4:26:2A:A3:99:92:56:B0:0A:55:23:F0:48:BC:BD:CE:74:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:00:6a:62:06:dd:45:af:27:7b:60:72:24:77:7f:74:59:c8: 5c:4f:2d:1a:14:98:50:74:30:93:39:c8:be:72:1a:75:a7:9a: 55:e2:3b:7a:bd:a1:18:9f:c1:f2:f6:ef:d7:be:d4:b2:bd:41: a9:5a:f2:37:88:9a:ee:45:46:63:d4:fa:c9:ab:39:b9:dd:84: c2:39:0e:9e:f1:6f:2f:a7:fb:4e:d7:57:70:ac:85:2e:25:2e: 90:8b:65:51:1e:1a:02:da:e2:5a:06:c2:b1:c5:a1:23:8c:b2: a4:4d:c2:45:72:3e:eb:cd:ba:1d:73:45:15:62:59:8c:f2:90: f6:55:e1:b2:fe:b6:4d:38:76:98:f3:20:d6:d1:5d:a8:06:76: 91:f8:ef:cc:2b:5c:61:2c:40:da:b6:bd:23:b7:4c:80:a3:27: 14:70:68:72:dd:49:5c:6a:bd:4a:d6:91:3b:33:50:1e:81:f6: b8:ee:fe:57:4c:bf:00:37:85:fd:59:ae:ec:8d:ca:e9:4b:9c: ed:33:30:e7:cb:16:3f:cf:5c:d0:16:08:3c:86:bf:3b:d6:54: 2e:cd:75:77:9d:bf:4e:15:fb:4e:fc:2b:ca:c9:4f:b0:2e:bb: 07:48:85:96:e7:83:96:9f:62:e4:19:e8:7f:2f:7e:46:ec:96: 52:72:5b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg1GRdW/PNuK4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTUyNTlhZWItNzRkYy00Yzg3LWJhYjMtNDkwNjJhMzU3N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFTg8ldGmxKAiRsUnYOz2OLogxy9jrHZD9B2 kgq/IZDD3pZ5Tz+yy+MsP6Pjgwu+OIe+vQiarZ3QPj6SRDkp7zTY9TPLubRzN3Eq Xb/p1KRtrncv07ygrj7vIesO36M7wBPwNr0F83pOqxVnz73vlv6qDPijwhfOTJ3x gvAJ1hFEbXALDOJ7RfsjPxe7qebuW/Ly1DxFZkTGROsDnLmeXeiV5RjCFLxS9NXa 0ARH42NmLN+DPszf5VuX+L/vVLhhT7DFpyjaZjB0NDBZgwjnJSCh7GnmoV7tm4an H/3/ms+G0tbblodpSVk4nikTYjcVT5YCKJKJ2NLwkyZQcj3tlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFH9CYqo5mSVrAKVSPwSLy9znS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvM2JlYTcwZDAtY2QyYi0z Zjc0LTkwOTItZTY0YjYyZjZkYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIAamIG3UWvJ3tgciR3f3RZyFxPLRoUmFB0MJM5yL5yGnWnmlXiO3q9 oRifwfL279e+1LK9Qala8jeImu5FRmPU+smrObndhMI5Dp7xby+n+07XV3CshS4l LpCLZVEeGgLa4loGwrHFoSOMsqRNwkVyPuvNuh1zRRViWYzykPZV4bL+tk04dpjz INbRXagGdpH478wrXGEsQNq2vSO3TICjJxRwaHLdSVxqvUrWkTszUB6B9rju/ldM vwA3hf1ZruyNyulLnO0zMOfLFj/PXNAWCDyGvzvWVC7NdXedv04V+078K8rJT7Au uwdIhZbng5afYuQZ6H8vfkbsllJyW1o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:03 2025 by rpki-client