$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa File: 3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa (raw, json) Hash identifier: gbax9yWjtfLxP2Iy7wQ8p2WYQIOMhEwVGtSmva/OpPY= Subject key identifier: 67:52:06:FD:1B:E8:14:39:60:C6:2D:E7:6A:7C:0E:DE:4D:40:37:04 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584A6C55CDC0EAE074D9B03BEA20 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cd:c0:ea:e0:74:d9:b0:3b:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=93109753-f1c8-4a26-8daf-0819829cfeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:17:3c:f6:ea:54:ed:a3:b7:a8:8a:43:4d: 4e:90:61:88:e5:b6:21:15:1e:0b:bc:ff:3b:e3:e8: a1:93:b4:1f:1d:ee:d3:13:33:1e:42:94:ab:1f:b4: a1:53:22:41:76:a5:c9:f0:ab:b4:a8:3a:de:97:31: 66:9f:a5:9e:43:ab:ab:39:cf:3c:4b:b2:8c:91:8f: 32:95:39:e7:9e:35:7c:24:ed:1c:3e:71:13:d1:88: d1:34:8c:c0:9d:51:b5:5a:87:ee:33:f9:cd:f9:ab: f9:29:e3:cd:8d:c9:ed:e0:b8:e1:8d:ca:d0:20:18: 13:dc:1e:bd:31:e0:98:ec:12:11:65:aa:61:c0:70: 29:45:03:e1:01:6f:2a:38:72:47:0e:8e:d9:a4:81: 81:99:ce:f2:57:e7:30:21:40:42:32:25:0a:f8:cb: 3f:12:01:7b:54:2a:44:5c:14:b0:6f:64:f8:bd:c5: 39:f2:92:50:4c:b6:18:f3:cc:ee:66:bf:ed:2e:a2: 75:5d:5c:6b:1b:d0:e6:c9:e9:35:ad:e9:ac:01:83: 95:1f:a8:fb:1f:d6:32:56:38:6e:d2:bb:98:80:e6: ba:21:60:51:66:27:38:b6:a1:d5:cf:ed:32:a9:3e: bf:e2:74:c2:4e:09:5f:ed:34:fd:97:19:d7:b5:43: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:06:FD:1B:E8:14:39:60:C6:2D:E7:6A:7C:0E:DE:4D:40:37:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8e:88:4a:20:aa:a1:32:f5:cd:df:18:6b:66:e1:8f:35:bd: ec:7f:f6:73:27:eb:ac:c1:49:c3:73:82:03:a2:27:b3:0d:0a: ef:ee:28:dd:c2:cb:e5:e1:d4:f4:7a:dd:e6:bc:4c:2f:16:1e: 88:10:c9:01:34:72:1f:47:d7:85:a9:2a:fd:4c:a0:5d:c6:b9: 7e:82:73:26:07:cf:60:78:73:d0:11:02:75:6b:b2:e9:0d:17: 95:f6:8b:16:5b:a0:3a:cd:61:d9:41:d0:cf:3b:13:b1:42:18: 97:e8:ea:0c:46:ac:1b:0a:35:28:dc:d1:ba:de:b9:97:4e:1d: e9:a5:77:ea:70:3d:a3:7f:57:de:28:ca:6e:67:0f:8b:83:61: b7:bb:39:b2:d9:ec:fb:1d:c7:39:31:4f:c5:62:6f:14:1b:f0: 6f:7a:64:34:0d:7d:00:91:24:11:91:15:86:ab:6b:3c:a8:a8: a3:ca:08:7b:7e:88:71:5c:c9:f2:f3:e3:3c:cb:17:e7:38:2a: c5:01:50:80:fb:b8:cc:5d:c5:9f:74:5e:68:ea:9d:77:d4:2f: 75:11:4b:79:5e:01:fe:41:ff:d1:95:99:13:c3:2f:9c:41:6e: 92:a5:44:ad:48:ff:7b:63:75:95:6f:8a:eb:9f:04:ab:a6:ca: 6f:e9:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc3A6uB02bA76iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OTMxMDk3NTMtZjFjOC00YTI2LThkYWYtMDgxOTgyOWNmZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooUXPPbqVO2jt6iKQ01OkGGI5bYhFR4LvP87 4+ihk7QfHe7TEzMeQpSrH7ShUyJBdqXJ8Ku0qDrelzFmn6WeQ6urOc88S7KMkY8y lTnnnjV8JO0cPnET0YjRNIzAnVG1WofuM/nN+av5KePNjcnt4LjhjcrQIBgT3B69 MeCY7BIRZaphwHApRQPhAW8qOHJHDo7ZpIGBmc7yV+cwIUBCMiUK+Ms/EgF7VCpE XBSwb2T4vcU58pJQTLYY88zuZr/tLqJ1XVxrG9Dmyek1remsAYOVH6j7H9YyVjhu 0ruYgOa6IWBRZic4tqHVz+0yqT6/4nTCTglf7TT9lxnXtUMOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdSBv0b6BQ5YMYt52p8Dt5NQDcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvM2JlYTcwZDAtY2QyYi0z Zjc0LTkwOTItZTY0YjYyZjZkYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqOiEogqqEy9c3fGGtm4Y81vex/9nMn66zBScNzggOiJ7MNCu/uKN3C y+Xh1PR63ea8TC8WHogQyQE0ch9H14WpKv1MoF3GuX6CcyYHz2B4c9ARAnVrsukN F5X2ixZboDrNYdlB0M87E7FCGJfo6gxGrBsKNSjc0breuZdOHemld+pwPaN/V94o ym5nD4uDYbe7ObLZ7PsdxzkxT8VibxQb8G96ZDQNfQCRJBGRFYarazyoqKPKCHt+ iHFcyfLz4zzLF+c4KsUBUID7uMxdxZ90XmjqnXfUL3URS3leAf5B/9GVmRPDL5xB bpKlRK1I/3tjdZVviuufBKumym/p1Nk= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:28 2025 by rpki-client