$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa File: c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa (raw, json) Hash identifier: KbJ+ojHGJhYvqJe3QE/KWcAPX1CVZlxKdrLrr7palG0= Subject key identifier: 8F:C0:88:DC:9C:1A:FA:FA:57:81:86:36:59:CA:33:A1:56:EF:15:D1 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285848E59BB1FFC0A6F131DF904C00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 209.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b1:ff:c0:a6:f1:31:df:90:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=23f24044-85cf-4cea-8ead-335db8ec6c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:f2:bd:ce:75:44:d6:39:50:92:1c:cb:ed: 4f:2e:cd:36:ce:72:4e:6c:d7:26:a1:aa:16:37:e1: 8d:ea:26:cd:8d:19:13:c1:f6:0c:73:a3:02:bb:7d: 1e:fb:46:35:44:2e:04:15:7f:3f:b7:f4:0d:7c:a5: 4a:10:70:c6:46:00:68:bc:ff:1a:f4:55:5c:74:12: 64:d9:44:b6:c4:2e:3b:45:53:71:c6:6b:fa:d7:b7: 85:04:35:cd:45:36:2b:f6:ed:05:19:e1:b5:26:65: ba:f2:ec:30:a0:34:e8:c0:fd:d9:d4:a7:b6:2e:65: f0:61:2e:54:9b:7a:2f:be:06:f7:af:94:a5:b9:bd: b0:ec:ce:e8:87:18:f4:8a:f8:76:7f:08:3b:b4:40: ec:f6:0a:bc:01:a8:b3:2f:e6:a2:8b:c2:a8:67:49: 62:b9:56:1d:06:23:86:e7:19:04:95:5c:95:b9:51: 90:4b:8e:8a:fd:43:53:0c:5f:8e:17:77:c1:77:08: 64:93:cc:21:dc:9a:a2:74:7f:10:6c:90:72:32:6e: 83:b3:8b:a2:42:9d:e8:17:b8:49:45:13:71:05:5d: b9:52:03:0e:54:00:64:0f:0c:c7:68:79:27:df:36: 18:48:5e:02:a3:4c:b7:16:86:91:90:42:37:3d:f8: 5b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C0:88:DC:9C:1A:FA:FA:57:81:86:36:59:CA:33:A1:56:EF:15:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f8:0e:fb:34:ba:34:0b:48:87:6f:a1:0d:04:ea:c8:23:3a: de:b7:a3:1d:76:37:ce:c9:c1:d6:de:54:ba:61:b3:c2:de:73: 77:27:6b:b3:1e:5d:b1:e7:49:3e:c4:c9:76:ca:c9:72:87:d7: 9a:b6:90:6f:42:07:6c:f4:96:30:c3:78:51:ed:2a:2b:79:1f: c3:b8:d8:a8:07:df:a8:46:a6:65:fe:eb:c5:04:8b:19:83:8d: 8f:18:6b:26:8a:94:84:a4:d8:ea:82:29:1b:62:13:73:f5:04: ff:3b:4a:37:4e:b0:fe:96:63:a6:42:79:8c:43:b6:de:ff:b1: 7c:93:9b:22:0b:84:9d:d7:ef:bd:d3:37:68:fd:c5:4e:33:5a: 34:9a:da:a9:06:27:ec:6d:48:70:87:ae:12:03:97:87:1d:98: 36:65:d3:42:23:e3:e7:0f:aa:77:be:ab:31:5a:2d:28:d6:da: 88:90:2d:89:ed:ba:14:41:99:fa:ca:63:50:7a:a4:ce:e7:26: d5:bc:b8:25:47:10:d4:23:41:47:c3:24:d4:65:28:91:f2:d2: 0b:a3:4c:4b:02:0d:38:d4:a6:7f:dd:ef:37:72:b4:1e:e8:0d: 48:23:1e:86:5c:54:e5:f9:bf:51:ba:96:56:42:e8:fe:dc:17: b0:0b:91:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7H/wKbxMd+QTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjNmMjQwNDQtODVjZi00Y2VhLThlYWQtMzM1ZGI4ZWM2YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiHyvc51RNY5UJIcy+1PLs02znJObNcmoaoW N+GN6ibNjRkTwfYMc6MCu30e+0Y1RC4EFX8/t/QNfKVKEHDGRgBovP8a9FVcdBJk 2US2xC47RVNxxmv617eFBDXNRTYr9u0FGeG1JmW68uwwoDTowP3Z1Ke2LmXwYS5U m3ovvgb3r5Slub2w7M7ohxj0ivh2fwg7tEDs9gq8AaizL+aii8KoZ0liuVYdBiOG 5xkElVyVuVGQS46K/UNTDF+OF3fBdwhkk8wh3JqidH8QbJByMm6Ds4uiQp3oF7hJ RRNxBV25UgMOVABkDwzHaHkn3zYYSF4Co0y3FoaRkEI3PfhblQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/AiNycGvr6V4GGNlnKM6FW7xXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzk0ZWMyY2EtNGNiMy0z NDcxLWExYzktMmM1ZWZhZTVkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz4Dvs0ujQLSIdvoQ0E6sgjOt63ox12N87JwdbeVLphs8Lec3cna7Me XbHnST7EyXbKyXKH15q2kG9CB2z0ljDDeFHtKit5H8O42KgH36hGpmX+68UEixmD jY8YayaKlISk2OqCKRtiE3P1BP87SjdOsP6WY6ZCeYxDtt7/sXyTmyILhJ3X773T N2j9xU4zWjSa2qkGJ+xtSHCHrhIDl4cdmDZl00Ij4+cPqne+qzFaLSjW2oiQLYnt uhRBmfrKY1B6pM7nJtW8uCVHENQjQUfDJNRlKJHy0gujTEsCDTjUpn/d7zdytB7o DUgjHoZcVOX5v1G6llZC6P7cF7ALkQg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:59 2025 by rpki-client