$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa File: 4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa (raw, json) Hash identifier: mMz1IqzPXHh50cOGhwanBEU+1hV/VhHOPjqW2PungF4= Subject key identifier: C5:5C:97:DE:92:06:9A:17:C4:F8:91:B3:3A:C2:51:91:3B:1F:45:BD Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858498CFF082DDD9FE2031A46EC80 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 14618 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:08:2d:dd:9f:e2:03:1a:46:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=6f3b8651-3618-4fd3-aa21-74129fed13f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:85:d6:37:f7:b8:ad:74:9a:0b:ca:a5:38:2f: e4:5c:53:30:c6:90:d9:a8:7a:16:67:61:fa:5b:34: 11:f5:02:c1:32:60:8b:41:97:1f:6d:57:d6:66:04: a6:a0:14:3c:c1:dc:cf:bb:22:26:77:b0:40:af:49: 48:54:84:d1:7e:e8:89:28:50:72:2c:34:a9:36:08: a9:b6:39:42:14:de:5f:b2:99:8e:67:e4:08:0a:71: a8:5b:c5:9b:a8:83:b5:83:be:3a:c0:c3:5f:ac:9c: 7d:26:e8:ad:16:50:06:09:b5:15:29:a7:72:d7:fd: ff:a6:f9:a2:3d:e8:d4:e1:16:b9:7d:24:1f:51:da: 0a:82:08:1a:41:2b:f0:01:9a:4f:78:9b:8a:a8:ed: 10:f5:06:b1:91:76:4a:66:55:2c:d4:dc:77:c4:ec: 58:0c:b6:7e:20:88:57:54:fc:f1:ae:56:f3:99:0c: 68:aa:45:89:ac:36:41:6d:9b:90:9c:1a:87:f3:e9: 33:df:96:1c:6f:fa:3b:a9:22:8b:6a:2b:c2:b7:67: 87:d3:9c:ae:39:33:04:4a:a9:37:3f:7b:cf:23:4c: c4:47:c1:b8:29:cc:fe:db:51:57:76:ef:96:1b:22: fa:aa:27:ce:16:9f:ec:9e:cf:28:64:b0:38:99:b6: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:97:DE:92:06:9A:17:C4:F8:91:B3:3A:C2:51:91:3B:1F:45:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:73:04:eb:01:bf:d5:60:9f:62:df:54:03:31:77:d1:1d:fd: b4:ef:46:4c:fb:66:6b:a1:1c:64:3d:f1:a1:64:02:e6:26:b7: 1c:39:8e:e8:93:19:6e:b3:ce:b5:7d:b8:63:8d:95:f1:5c:dd: 01:bc:77:63:30:d7:74:15:92:47:00:2f:56:3c:38:eb:38:f9: cf:68:b3:bd:2f:90:16:38:1d:9a:b7:20:77:32:26:ce:60:23: 2f:88:88:a6:f3:09:8c:12:ec:ec:ac:d7:9c:5c:d1:39:1e:9f: bf:00:c1:af:33:e9:b1:95:0b:ff:dc:1c:ea:d6:34:6e:8b:0d: 03:17:ea:28:fd:b0:db:98:4d:d6:26:da:f4:74:6a:09:97:e8: 69:5c:49:d1:d1:ad:16:bb:48:e9:7e:8c:ec:b7:48:65:b1:21: af:37:2a:45:4d:3c:9c:80:11:00:e4:04:ab:f0:80:4a:d6:16: 02:3f:58:0f:42:63:05:5e:2e:94:b8:3e:62:da:f5:62:b5:18: c8:0e:72:be:44:29:9a:6a:c7:22:60:74:29:a9:5d:d0:68:21: fa:24:0e:27:c4:1a:32:30:f6:61:10:78:86:04:d3:7c:c1:1c: fd:82:c8:d5:d1:f9:44:76:29:c6:36:23:43:83:ab:28:78:0c: 7f:f4:82:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wgt3Z/iAxpG7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NmYzYjg2NTEtMzYxOC00ZmQzLWFhMjEtNzQxMjlmZWQxM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4XWN/e4rXSaC8qlOC/kXFMwxpDZqHoWZ2H6 WzQR9QLBMmCLQZcfbVfWZgSmoBQ8wdzPuyImd7BAr0lIVITRfuiJKFByLDSpNgip tjlCFN5fspmOZ+QICnGoW8WbqIO1g746wMNfrJx9JuitFlAGCbUVKady1/3/pvmi PejU4Ra5fSQfUdoKgggaQSvwAZpPeJuKqO0Q9QaxkXZKZlUs1Nx3xOxYDLZ+IIhX VPzxrlbzmQxoqkWJrDZBbZuQnBqH8+kz35Ycb/o7qSKLaivCt2eH05yuOTMESqk3 P3vPI0zER8G4Kcz+21FXdu+WGyL6qifOFp/sns8oZLA4mbYi/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVcl96SBpoXxPiRszrCUZE7H0W9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNGQ0ZDVjOWUtYTQ3MC0z ZDE5LWFkZTktYjUwYmQ0NWJlM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9zBOsBv9Vgn2LfVAMxd9Ed/bTvRkz7ZmuhHGQ98aFkAuYmtxw5juiT GW6zzrV9uGONlfFc3QG8d2Mw13QVkkcAL1Y8OOs4+c9os70vkBY4HZq3IHcyJs5g Iy+IiKbzCYwS7Oys15xc0Tken78Awa8z6bGVC//cHOrWNG6LDQMX6ij9sNuYTdYm 2vR0agmX6GlcSdHRrRa7SOl+jOy3SGWxIa83KkVNPJyAEQDkBKvwgErWFgI/WA9C YwVeLpS4PmLa9WK1GMgOcr5EKZpqxyJgdCmpXdBoIfokDifEGjIw9mEQeIYE03zB HP2CyNXR+UR2KcY2I0ODqyh4DH/0gps= -----END CERTIFICATE-----Generated at Sat Apr 26 13:21:05 2025 by rpki-client