$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa File: 0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa (raw, json) Hash identifier: of01WEFNIKO+bU4NcgJaTaivJH7m9McgM+YIpXikJr8= Subject key identifier: D5:67:38:3F:62:B1:11:7F:66:6E:B8:64:39:48:D9:B9:81:1C:04:E6 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858491ED6E97420F45BAE8BC8B200 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e9:74:20:f4:5b:ae:8b:c8:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=1d3ecf74-e81c-4f19-973d-2259f0702dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:bb:ec:12:a5:e2:8c:c3:99:ae:67:ae:1a: 45:7d:3f:79:5b:10:33:6d:d5:1c:0e:51:c9:ac:78: 33:d4:14:61:46:6a:5f:0d:bb:3b:2e:c8:26:1e:71: 79:ac:25:7d:1d:2c:6a:1b:29:f3:9a:3a:f2:ef:f0: 1a:18:39:7f:4b:65:0d:d7:87:07:30:ee:74:1d:51: b7:3d:3b:e3:04:cd:9d:fe:7a:5a:a5:b7:5a:5d:db: 80:b4:71:45:06:93:1d:fd:4f:13:b5:29:0b:0c:26: 94:ba:4b:f7:a3:c2:bd:7b:d9:ef:ba:9a:21:f0:91: 75:fc:f0:31:da:46:d2:fb:0c:70:14:81:32:9e:10: 36:72:71:1e:1e:1c:70:32:56:de:f1:72:9d:fd:99: 92:ec:ca:5e:6c:b8:bc:b8:34:38:ec:a4:82:4a:34: eb:7a:98:8b:7a:cd:c3:e1:98:7a:a8:40:8e:36:57: 3e:a0:51:ce:6d:0c:5a:62:80:82:f1:6e:c5:d6:ec: 21:21:9d:72:47:b3:30:0e:40:2f:ad:68:35:8a:d9: 9a:a0:03:37:1e:9a:f2:82:9a:e4:a1:33:3d:d1:3c: bd:8b:f3:92:1f:ce:72:2a:65:82:6a:1e:cc:95:70: ac:b5:f5:d9:b2:4d:13:7d:a7:36:8e:ba:f4:de:f0: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:38:3F:62:B1:11:7F:66:6E:B8:64:39:48:D9:B9:81:1C:04:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b3:15:b4:54:73:6b:ca:da:ad:c9:64:b5:ab:bc:12:b9:bb: 39:64:78:63:1b:7d:3d:2e:29:a9:49:3e:2d:cd:59:2b:54:2d: 89:81:59:ff:21:23:29:7d:3e:8b:05:dd:e7:d2:65:db:38:54: d8:88:e7:22:7f:d8:b2:d5:cc:74:64:f7:94:44:ce:81:90:65: f8:33:de:f5:bf:e4:84:fa:fd:5d:07:f9:d5:50:b1:5a:ac:1c: 04:8b:99:11:2a:2c:a2:37:ba:d4:66:df:65:d5:d8:fd:0b:67: cc:6c:3d:c9:a4:0e:72:d1:2e:b1:97:6d:7f:db:97:eb:5f:71: 9c:6e:ac:d8:e7:c0:76:49:d7:80:4f:a4:11:8b:45:e4:e6:a0: b1:14:7e:e3:35:be:8c:6e:c1:f6:a8:99:0b:37:5f:03:e6:25: 6c:0f:8b:05:59:89:ed:80:25:18:15:79:f7:01:17:07:d8:b0: 7c:df:e9:ba:52:41:bb:6f:e4:97:f4:43:da:d4:5f:0c:fc:58: 97:68:c6:36:f5:0f:72:8a:ee:84:74:c5:74:04:9e:36:e5:1d: 32:a1:f5:52:09:ff:0e:d2:d0:44:89:1f:d2:27:09:a5:1d:90: 69:ac:40:a3:89:a6:98:8f:f0:c6:cf:a2:a0:de:b6:a0:fd:c2: 2a:d5:ad:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ul0IPRbrovIsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MWQzZWNmNzQtZTgxYy00ZjE5LTk3M2QtMjI1OWYwNzAyZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleu77BKl4ozDma5nrhpFfT95WxAzbdUcDlHJ rHgz1BRhRmpfDbs7LsgmHnF5rCV9HSxqGynzmjry7/AaGDl/S2UN14cHMO50HVG3 PTvjBM2d/npapbdaXduAtHFFBpMd/U8TtSkLDCaUukv3o8K9e9nvupoh8JF1/PAx 2kbS+wxwFIEynhA2cnEeHhxwMlbe8XKd/ZmS7MpebLi8uDQ47KSCSjTrepiLes3D 4Zh6qECONlc+oFHObQxaYoCC8W7F1uwhIZ1yR7MwDkAvrWg1itmaoAM3Hprygprk oTM90Ty9i/OSH85yKmWCah7MlXCstfXZsk0Tfac2jrr03vBSrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVnOD9isRF/Zm64ZDlI2bmBHATmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvMGRmZDY1MTUtYmRiMS0z ZGY1LTkzZjAtZDU3NzhiNzAwMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOzFbRUc2vK2q3JZLWrvBK5uzlkeGMbfT0uKalJPi3NWStULYmBWf8h Iyl9PosF3efSZds4VNiI5yJ/2LLVzHRk95REzoGQZfgz3vW/5IT6/V0H+dVQsVqs HASLmREqLKI3utRm32XV2P0LZ8xsPcmkDnLRLrGXbX/bl+tfcZxurNjnwHZJ14BP pBGLReTmoLEUfuM1voxuwfaomQs3XwPmJWwPiwVZie2AJRgVefcBFwfYsHzf6bpS Qbtv5Jf0Q9rUXwz8WJdoxjb1D3KK7oR0xXQEnjblHTKh9VIJ/w7S0ESJH9InCaUd kGmsQKOJppiP8MbPoqDetqD9wirVrbA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:56 2025 by rpki-client