$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa File: 4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa (raw, json) Hash identifier: HzwqwfcRq13yU47Zn41a2zt/ACKKzEqX+MVshd9J/Cw= Subject key identifier: E9:E2:97:FC:87:26:F3:86:84:BD:80:D5:33:17:D6:7E:78:3D:A4:AD Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584A6C55CDD35E0FD43737664B00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cd:d3:5e:0f:d4:37:37:66:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=976ee389-67be-4cf2-8d33-b5b7c9650d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:5e:b3:4e:d1:3e:8b:69:84:64:5e:55:bd: 81:7c:f0:74:a9:70:a4:f5:69:47:9c:6a:4c:97:61: 73:ba:fd:71:02:6b:f0:9f:83:05:2f:91:fc:4b:e9: 28:21:48:78:1f:f8:68:8f:c3:7a:4d:49:2c:59:a8: 88:80:a3:50:06:52:ca:17:bb:3e:e7:c3:91:b6:12: 40:35:65:84:8c:57:da:f9:e2:c4:10:60:2e:0a:76: 14:20:07:eb:8c:b2:73:e4:ce:71:63:b6:02:7b:be: 00:e6:5c:37:e5:37:f4:a6:55:64:ce:ee:1e:22:af: a3:68:8d:f1:62:43:6e:44:bb:b4:80:a0:28:aa:92: 8d:c4:34:f1:c7:81:56:12:f0:5b:7d:1a:53:11:c3: 80:75:d5:2c:73:e2:da:d5:4e:54:40:3b:d1:93:2c: 35:a1:82:ca:43:bf:9b:4f:90:3c:64:19:4f:2b:0d: 93:67:3a:2d:74:f0:68:4a:d0:a4:24:71:b2:3a:aa: a2:32:44:7f:05:4a:0d:09:49:72:d2:c5:50:06:ec: e3:cf:1b:bc:1a:f9:16:6c:2f:87:c8:b7:54:31:21: 4d:79:bb:7e:32:e7:ac:ea:0f:3a:d8:78:e3:fc:ea: a9:e7:2c:27:af:ac:20:51:12:f0:5c:44:52:db:89: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:97:FC:87:26:F3:86:84:BD:80:D5:33:17:D6:7E:78:3D:A4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:90:da:f4:df:31:f7:94:58:f9:c3:0a:f6:8b:eb:89:79:b5: 1b:2e:da:06:cb:8b:af:36:7c:d0:ee:9a:63:9f:bb:de:f1:ca: 53:84:ba:07:49:93:80:3b:0f:ad:b1:a0:db:80:3e:69:c0:63: c6:7c:2e:56:9b:d4:b3:4a:ed:75:93:8a:3a:64:5f:37:b9:ac: 49:68:22:b3:3e:7e:ec:c1:d3:53:c9:a5:5a:9c:9e:4b:f0:9c: 2e:e4:33:ce:17:81:06:a9:6b:17:48:99:09:bd:8d:03:50:cd: 52:5f:b1:73:47:69:48:58:ea:2f:72:17:12:d0:01:f5:62:9d: d3:3b:93:ac:c6:9d:e0:bd:74:db:fe:8d:67:61:c3:48:d2:a2: 3d:4a:28:41:33:84:0a:41:48:75:73:04:43:48:2c:60:24:93: 59:24:80:cd:2b:75:cb:a4:3b:0c:cb:d8:64:59:85:af:6f:40: 58:34:93:8a:71:4b:f1:3a:40:eb:a2:fb:45:64:06:8c:11:8e: 1a:77:66:58:46:da:d4:64:6d:c7:4a:49:ca:9c:2c:a2:4b:45: 6a:cf:8b:94:04:61:de:37:3d:13:b5:4b:bb:73:5b:ee:fc:ba: 22:15:36:27:9d:3e:06:8e:03:8e:03:f2:76:58:4e:5e:61:4d: e6:f3:39:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc3TXg/UNzdmSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OTc2ZWUzODktNjdiZS00Y2YyLThkMzMtYjViN2M5NjUwZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf1es07RPotphGReVb2BfPB0qXCk9WlHnGpM l2Fzuv1xAmvwn4MFL5H8S+koIUh4H/hoj8N6TUksWaiIgKNQBlLKF7s+58ORthJA NWWEjFfa+eLEEGAuCnYUIAfrjLJz5M5xY7YCe74A5lw35Tf0plVkzu4eIq+jaI3x YkNuRLu0gKAoqpKNxDTxx4FWEvBbfRpTEcOAddUsc+La1U5UQDvRkyw1oYLKQ7+b T5A8ZBlPKw2TZzotdPBoStCkJHGyOqqiMkR/BUoNCUly0sVQBuzjzxu8GvkWbC+H yLdUMSFNebt+Mues6g862Hjj/Oqp5ywnr6wgURLwXERS24nl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnil/yHJvOGhL2A1TMX1n54PaStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNGQ0ZDVjOWUtYTQ3MC0z ZDE5LWFkZTktYjUwYmQ0NWJlM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqQ2vTfMfeUWPnDCvaL64l5tRsu2gbLi682fNDummOfu97xylOEugdJ k4A7D62xoNuAPmnAY8Z8Llab1LNK7XWTijpkXze5rEloIrM+fuzB01PJpVqcnkvw nC7kM84XgQapaxdImQm9jQNQzVJfsXNHaUhY6i9yFxLQAfVindM7k6zGneC9dNv+ jWdhw0jSoj1KKEEzhApBSHVzBENILGAkk1kkgM0rdcukOwzL2GRZha9vQFg0k4px S/E6QOui+0VkBowRjhp3ZlhG2tRkbcdKScqcLKJLRWrPi5QEYd43PRO1S7tzW+78 uiIVNiedPgaOA44D8nZYTl5hTebzOQU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:44 2025 by rpki-client