$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa File: a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa (raw, json) Hash identifier: hKD1akjgC/ozIj44SZ+Ux50o+c3zm4ndiBw2xrZRPEQ= Subject key identifier: AE:58:12:7F:2E:FB:49:60:66:E9:16:63:09:D4:EC:84:22:85:28:03 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285849FE0FFD2CA5B79D5F41038580 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16509 IP address blocks: 209.169.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fd:2c:a5:b7:9d:5f:41:03:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=34cf26d7-5e4a-456d-8cc5-066cc759a99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:4e:56:e2:25:5b:54:20:c5:99:1f:d5:6b: 6c:11:96:2c:ab:6e:34:e4:0b:c5:87:ed:30:29:eb: 38:68:7a:f2:22:5f:ba:31:60:49:31:98:e9:b6:3a: 78:a7:80:a0:43:e3:f1:38:13:cf:90:29:d2:bf:4f: 26:bb:3b:a4:3d:b0:ab:22:68:61:46:4c:6c:56:ac: d9:81:e4:e7:bf:8e:ca:96:68:f1:c2:73:8b:e4:7a: 8b:d1:86:45:78:9a:95:84:c7:ca:c4:6f:8f:5b:72: 49:86:8e:b9:0c:35:f0:84:ad:5d:4f:fa:9b:29:ba: 6d:df:49:61:d4:d4:be:89:c0:a9:aa:ba:dc:34:a2: 06:25:18:bc:0b:09:46:c8:06:07:47:aa:1a:83:6c: ba:ab:a1:46:c9:aa:3f:4a:3c:65:bb:09:28:db:86: 70:b6:f8:47:6d:32:a3:ee:71:39:cc:c5:83:d2:d4: c1:3b:39:25:0f:f7:96:4c:ce:f9:4a:dd:de:26:3d: 18:6e:b4:50:93:7b:e6:57:51:d3:db:27:af:f4:75: 43:bf:0f:ea:ad:ff:c1:c0:1a:11:59:12:16:3e:a3: 27:53:bd:c5:c9:01:33:e1:88:f9:29:62:0d:6b:37: e0:5d:74:01:45:2e:ce:1e:00:30:86:b0:c0:ec:b2: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:12:7F:2E:FB:49:60:66:E9:16:63:09:D4:EC:84:22:85:28:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3b:f5:51:89:e4:13:cd:6f:a2:ad:63:5d:0f:fe:5f:31:4d: 3e:aa:3f:b7:b4:29:9f:e6:b6:1d:5b:23:9c:6b:08:84:57:47: 42:05:7b:c5:25:a0:5c:ef:f8:39:fe:70:f2:cd:e2:c6:ce:95: 7d:35:3d:39:49:d5:01:f4:54:7c:70:9c:e7:52:01:3e:f2:f3: 5a:b6:fe:54:10:6c:11:2d:83:0c:be:a7:af:d8:ec:ef:06:50: 47:22:ca:9a:49:90:f0:5f:dc:7b:4f:18:b3:5d:41:67:4d:47: 21:00:9e:85:46:ee:68:39:8b:f7:d2:6b:be:df:06:8f:80:3a: 4f:6c:6a:b3:96:52:85:cf:b5:b0:39:5c:27:c0:43:1a:f1:50: d7:c5:a3:95:40:03:f5:26:ae:68:40:6a:8d:ce:2f:12:3c:00: 4a:ea:0f:ea:54:ca:83:06:21:c6:05:5c:0b:0d:a7:b2:10:d1: 45:c6:0a:c6:8c:43:27:a5:b4:65:1a:16:4b:c2:73:3d:27:b5: a8:77:50:b5:5c:47:f2:d6:1d:98:d5:d4:be:29:e0:ee:6c:8f: 3f:ba:19:61:dd:02:09:85:60:3e:30:39:7e:17:38:5c:0a:f9: d7:f8:a2:20:1a:c7:36:4f:dc:a5:2d:ca:c4:95:38:cf:20:cc: 15:69:8b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/0spbedX0EDhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzRjZjI2ZDctNWU0YS00NTZkLThjYzUtMDY2Y2M3NTlhOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoVOVuIlW1QgxZkf1WtsEZYsq2405AvFh+0w Kes4aHryIl+6MWBJMZjptjp4p4CgQ+PxOBPPkCnSv08muzukPbCrImhhRkxsVqzZ geTnv47KlmjxwnOL5HqL0YZFeJqVhMfKxG+PW3JJho65DDXwhK1dT/qbKbpt30lh 1NS+icCpqrrcNKIGJRi8CwlGyAYHR6oag2y6q6FGyao/Sjxluwko24ZwtvhHbTKj 7nE5zMWD0tTBOzklD/eWTM75St3eJj0YbrRQk3vmV1HT2yev9HVDvw/qrf/BwBoR WRIWPqMnU73FyQEz4Yj5KWINazfgXXQBRS7OHgAwhrDA7LLbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5YEn8u+0lgZukWYwnU7IQihSgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTllYTdkZWUtNzJjOC0z ZjBlLWJkMzItZDMwMTk5YjM4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk79VGJ5BPNb6KtY10P/l8xTT6qP7e0KZ/mth1bI5xrCIRXR0IFe8Ul oFzv+Dn+cPLN4sbOlX01PTlJ1QH0VHxwnOdSAT7y81q2/lQQbBEtgwy+p6/Y7O8G UEciyppJkPBf3HtPGLNdQWdNRyEAnoVG7mg5i/fSa77fBo+AOk9sarOWUoXPtbA5 XCfAQxrxUNfFo5VAA/UmrmhAao3OLxI8AErqD+pUyoMGIcYFXAsNp7IQ0UXGCsaM QyeltGUaFkvCcz0ntah3ULVcR/LWHZjV1L4p4O5sjz+6GWHdAgmFYD4wOX4XOFwK +df4oiAaxzZP3KUtysSVOM8gzBVpi0M= -----END CERTIFICATE-----Generated at Wed Jun 4 10:42:26 2025 by rpki-client