$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa File: a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa (raw, json) Hash identifier: c7FGpjbjAzilbd1AGeEGKEiHvY0IyLe96jMBNqxZBwo= Subject key identifier: 3A:68:DE:B0:03:BD:FE:DD:D3:78:74:37:63:24:2B:B7:75:0B:8A:33 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858483F8039FA7205EC3BC8B1AA00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:39:fa:72:05:ec:3b:c8:b1:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=864ae0ab-5ca4-4a35-a932-cf945dfa127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:f5:3b:cd:e6:13:2e:47:3c:49:56:29:bc: 2a:f8:f8:ef:c3:3f:7d:e6:5e:d5:7e:f1:78:a7:fa: af:3e:ad:c9:76:dd:7b:cd:b2:0c:da:0c:c8:b4:e9: a3:8c:44:4a:d9:a2:3c:56:f0:1a:0d:86:64:85:8d: 67:6f:b0:47:8a:d2:47:d9:4b:28:d6:0d:b8:6e:3e: ef:8a:06:a3:ae:8c:36:f2:56:2a:66:e9:b2:e9:0f: af:fe:4d:4a:b3:3c:bb:c1:43:c4:93:b3:9d:80:8f: 21:1e:83:ff:43:4f:3f:c4:c0:92:e4:c3:d6:fa:41: e1:5d:ad:42:3a:97:ea:fb:5c:d5:9b:bd:8f:0b:52: c4:39:84:a3:60:85:83:44:d5:6f:d9:5a:29:8e:f0: d1:b9:1e:3d:f2:a9:7d:a5:f1:9a:a5:d6:80:5f:7b: dc:3d:e5:c3:bd:85:12:c6:1a:0a:ea:c5:a6:cd:d2: 53:7f:68:a1:e6:d2:22:cf:70:99:6b:d7:09:df:fb: b0:be:36:88:c3:0b:65:6b:0f:1a:ab:a8:da:ad:b2: 72:17:e4:95:5f:5f:1c:4b:62:78:18:92:14:49:fc: 9e:5f:da:f5:5d:08:05:13:d2:bb:b8:14:fc:cd:21: 97:f4:85:26:c0:e3:bf:4e:c9:5c:48:43:cd:3d:0f: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:DE:B0:03:BD:FE:DD:D3:78:74:37:63:24:2B:B7:75:0B:8A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:65:fa:36:9c:83:ea:31:a8:68:2e:50:d0:07:72:be:fa:31: b8:e1:47:3c:e6:ae:09:24:9c:e5:6f:68:d1:d4:59:e5:7d:2e: 63:7e:f6:a5:d0:aa:8e:3e:fc:f3:a2:24:cc:7a:a2:52:4d:18: e2:6d:2d:5e:9e:45:46:59:d2:78:96:13:38:a7:5f:c9:ec:dc: 11:10:b0:64:76:7a:2e:dd:ac:7e:20:e5:9d:9c:7c:a2:03:dc: a3:82:76:99:4f:1e:ec:82:41:4e:0b:3d:44:7d:28:1b:ec:a2: 7a:87:05:31:8c:51:23:b4:0f:85:25:ea:e6:41:ae:b2:e0:24: bd:10:1a:e1:25:72:60:7e:7a:21:26:95:e3:0b:5c:4c:f8:c9: fc:4c:31:6b:eb:c7:18:e1:3c:a3:27:ed:13:13:f0:d4:bc:2f: bb:69:42:0d:ac:39:8e:9f:e7:24:f6:ba:6a:f4:60:aa:35:5f: a3:08:7e:8d:25:0a:69:e6:8a:30:dd:41:7a:c5:7b:f3:1f:32: 74:8d:1c:2b:42:9a:7a:4a:3f:23:e8:14:ad:f2:83:a7:40:3b: 15:f4:06:b3:4e:52:4a:a9:93:15:df:e3:bb:e9:a2:ef:ca:cb: a6:c3:f5:e2:3c:91:f8:fe:a1:39:08:a2:39:c8:3f:13:88:ec: 5d:88:dc:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDn6cgXsO8ixqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk ODY0YWUwYWItNWNhNC00YTM1LWE5MzItY2Y5NDVkZmExMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/n1O83mEy5HPElWKbwq+Pjvwz995l7VfvF4 p/qvPq3Jdt17zbIM2gzItOmjjERK2aI8VvAaDYZkhY1nb7BHitJH2Uso1g24bj7v igajrow28lYqZumy6Q+v/k1Kszy7wUPEk7OdgI8hHoP/Q08/xMCS5MPW+kHhXa1C Opfq+1zVm72PC1LEOYSjYIWDRNVv2VopjvDRuR498ql9pfGapdaAX3vcPeXDvYUS xhoK6sWmzdJTf2ih5tIiz3CZa9cJ3/uwvjaIwwtlaw8aq6jarbJyF+SVX18cS2J4 GJIUSfyeX9r1XQgFE9K7uBT8zSGX9IUmwOO/TslcSEPNPQ/mnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpo3rADvf7d03h0N2MkK7d1C4ozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTllYTdkZWUtNzJjOC0z ZjBlLWJkMzItZDMwMTk5YjM4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1l+jacg+oxqGguUNAHcr76MbjhRzzmrgkknOVvaNHUWeV9LmN+9qXQ qo4+/POiJMx6olJNGOJtLV6eRUZZ0niWEzinX8ns3BEQsGR2ei7drH4g5Z2cfKID 3KOCdplPHuyCQU4LPUR9KBvsonqHBTGMUSO0D4Ul6uZBrrLgJL0QGuElcmB+eiEm leMLXEz4yfxMMWvrxxjhPKMn7RMT8NS8L7tpQg2sOY6f5yT2umr0YKo1X6MIfo0l CmnmijDdQXrFe/MfMnSNHCtCmnpKPyPoFK3yg6dAOxX0BrNOUkqpkxXf47vpou/K y6bD9eI8kfj+oTkIojnIPxOI7F2I3Lw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:55 2025 by rpki-client