$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa File: a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa (raw, json) Hash identifier: hMiBH3lR0mjzA94AM96VVg2itHnzLJ2AYn2U/2UNsIA= Subject key identifier: 09:89:D0:51:A6:D3:00:49:12:80:26:F5:32:A2:A4:56:B6:96:3C:BC Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858491ED6E990E173D17EDD7A1580 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e9:90:e1:73:d1:7e:dd:7a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=fcdec2e0-1bd5-403b-9903-5f73ea533e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:6e:64:c4:cc:4a:60:17:0b:92:4f:30:cd: 33:04:2a:bd:f7:f7:7f:49:c8:31:a3:bc:fc:b3:21: 0c:3f:2f:7a:6d:d8:e7:b0:47:20:7d:98:15:67:54: c0:5c:bd:88:91:59:65:43:05:8b:de:a8:0b:e5:80: 6c:e5:da:db:6f:31:c4:a3:bd:51:61:da:73:82:b5: e1:6c:48:26:20:60:c4:58:f1:64:2a:ee:6a:9b:06: e5:ac:29:37:a4:73:b4:7a:73:b4:13:a1:cf:d3:43: e3:cc:21:1c:6d:c5:9f:11:8b:cc:1c:5e:35:14:08: 15:ba:74:77:b1:bd:1d:6c:24:66:ef:2e:c5:f6:43: 5d:5f:01:0d:d3:5d:21:a9:af:0f:e5:29:4f:06:41: fa:50:71:b6:f5:73:93:b0:20:ba:c4:3f:9b:30:38: e1:45:08:74:b6:09:b9:91:63:23:25:ee:d5:bd:8c: 1e:4c:56:7f:d2:21:f0:96:e7:a8:57:96:15:d0:63: 6d:76:7e:98:c0:cb:6a:bd:17:fe:a4:59:7d:97:1c: 09:60:d1:c0:62:42:83:10:a1:3e:66:06:89:ec:88: 18:0f:5f:64:bb:56:ab:22:25:bd:07:2c:09:0a:9b: be:2f:f4:1c:e4:64:f7:55:b5:b8:45:41:d4:fe:aa: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:D0:51:A6:D3:00:49:12:80:26:F5:32:A2:A4:56:B6:96:3C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a2:b6:c5:fe:33:b0:91:9e:0a:9f:1c:de:31:7a:33:8d:6d: cd:fe:fc:c4:f1:1d:4c:d2:aa:f2:e1:c6:25:80:eb:6e:42:0d: 72:92:4a:a1:4a:e5:79:f6:0a:f3:54:83:a9:45:b0:dd:6a:8a: 14:59:ed:ac:9d:d3:3d:e9:d6:81:e1:e2:16:82:b4:da:57:1e: 5e:6d:3d:d6:8c:51:35:5c:14:75:4e:36:da:5d:7e:ff:b7:82: cd:57:50:62:df:e8:4a:f5:15:7a:6b:ae:b2:33:92:ca:e4:fb: a4:11:86:21:dc:11:cd:72:6d:75:47:56:64:04:7c:32:30:68: cf:32:36:59:1f:e1:08:a2:5b:05:3b:8f:bb:00:71:1e:f4:b0: 25:22:a9:2a:73:52:b1:c9:4c:d4:85:ce:43:b2:91:65:e1:29: 66:87:dd:23:e8:aa:0b:97:7c:fb:9a:1e:a3:f1:ee:34:82:c1: d3:7b:91:27:d1:8b:26:36:03:6b:6b:12:08:fb:ac:d4:39:f9: bb:59:2e:1e:db:a2:b0:08:ff:d2:20:5b:1a:c4:5b:86:87:a1: 62:a7:e6:36:ef:b1:3f:90:10:d1:df:48:4a:2d:d1:2f:60:27: c0:7d:07:5a:90:7d:82:ed:d8:b5:20:e6:04:bb:d5:6c:d3:fe: d9:c2:78:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1umQ4XPRft16FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZmNkZWMyZTAtMWJkNS00MDNiLTk5MDMtNWY3M2VhNTMzZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xuZMTMSmAXC5JPMM0zBCq99/d/Scgxo7z8 syEMPy96bdjnsEcgfZgVZ1TAXL2IkVllQwWL3qgL5YBs5drbbzHEo71RYdpzgrXh bEgmIGDEWPFkKu5qmwblrCk3pHO0enO0E6HP00PjzCEcbcWfEYvMHF41FAgVunR3 sb0dbCRm7y7F9kNdXwEN010hqa8P5SlPBkH6UHG29XOTsCC6xD+bMDjhRQh0tgm5 kWMjJe7VvYweTFZ/0iHwlueoV5YV0GNtdn6YwMtqvRf+pFl9lxwJYNHAYkKDEKE+ ZgaJ7IgYD19ku1arIiW9BywJCpu+L/Qc5GT3VbW4RUHU/qpc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmJ0FGm0wBJEoAm9TKipFa2ljy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTllYTdkZWUtNzJjOC0z ZjBlLWJkMzItZDMwMTk5YjM4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6itsX+M7CRngqfHN4xejONbc3+/MTxHUzSqvLhxiWA625CDXKSSqFK 5Xn2CvNUg6lFsN1qihRZ7ayd0z3p1oHh4haCtNpXHl5tPdaMUTVcFHVONtpdfv+3 gs1XUGLf6Er1FXprrrIzksrk+6QRhiHcEc1ybXVHVmQEfDIwaM8yNlkf4QiiWwU7 j7sAcR70sCUiqSpzUrHJTNSFzkOykWXhKWaH3SPoqguXfPuaHqPx7jSCwdN7kSfR iyY2A2trEgj7rNQ5+btZLh7borAI/9IgWxrEW4aHoWKn5jbvsT+QENHfSEot0S9g J8B9B1qQfYLt2LUg5gS71WzT/tnCePo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:13 2025 by rpki-client