$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa File: 65d11a05-2769-3f82-a107-6def6f4c6ffe.roa (raw, json) Hash identifier: RiTbRIcYNaXDsPPTzD6zxJGW9BYn8sC8N0740RI/FSo= Subject key identifier: 5A:63:BA:02:4B:91:30:8E:69:65:BD:C0:79:73:18:31:F3:97:B9:3D Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858491ED6E9AC883246E70D95C500 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e9:ac:88:32:46:e7:0d:95:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=9a7796ed-a790-4ffa-b2db-ab340d3df9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:59:51:c9:48:36:b5:ca:08:ba:49:4a:3b: 19:69:4a:4b:bd:92:90:87:65:2e:86:0d:0d:dc:11: 40:84:6e:5b:23:8b:1b:20:75:87:7e:08:ce:5d:6e: 5c:0c:17:66:90:fa:67:db:86:33:af:f2:67:04:1c: c4:e3:81:e4:d1:cc:e3:30:61:a4:41:07:39:d8:de: 94:ef:c2:3c:a5:0c:66:4c:55:63:4a:a1:f6:db:d5: be:0b:80:b1:63:73:76:f4:00:c3:d0:c3:e8:9e:08: 58:40:6a:0f:cc:87:a4:89:0a:0e:5e:24:a8:ba:5e: b0:c3:28:90:3a:c2:4a:2a:0b:dc:4a:1b:f6:b5:1c: 3b:9c:ab:e8:87:b9:29:be:d6:fc:54:97:bd:22:8d: ae:ff:1e:8b:80:78:24:87:97:18:f9:ad:09:37:2b: d3:70:8f:0c:9e:ae:51:7d:fd:a0:bc:10:ce:12:e8: 0e:5b:25:7f:24:7f:62:b9:d0:ae:d4:1b:4e:67:0c: c1:d0:5d:a2:d8:1a:e9:f7:99:1c:d8:7c:a0:80:60: f0:3b:b6:4e:dc:16:de:e0:2b:70:a6:f7:e8:9f:f9: a0:8c:3b:63:6d:42:eb:18:1e:64:a4:ce:aa:79:36: 8c:7f:01:ae:41:fc:b0:bf:f1:0b:45:d3:0c:76:62: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:BA:02:4B:91:30:8E:69:65:BD:C0:79:73:18:31:F3:97:B9:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b4:48:ea:dd:e6:82:6f:46:a0:f3:3b:be:cc:87:94:a2:85: 8d:47:bd:dc:6f:35:48:56:47:1f:39:88:94:7a:ee:a2:46:ed: 4c:cf:a5:e2:21:32:99:70:ec:2f:bd:f5:0f:fd:79:be:46:93: e0:75:58:f3:6d:44:13:5e:4f:40:40:8d:1d:a6:97:c9:fb:51: 60:4d:53:8d:d4:6c:17:98:03:59:e7:91:9e:9c:86:17:6d:5b: b1:6e:5b:cd:94:ab:95:44:56:20:1b:21:72:62:03:98:fd:fc: 65:64:c3:c7:d1:38:c0:04:90:49:e6:07:e5:4a:14:c2:19:10: e5:14:5d:15:a4:32:67:9f:ec:3d:bf:15:55:ae:d8:84:4a:21: ce:3d:df:c1:88:1a:be:8d:63:7e:84:30:1c:0f:9f:76:5e:85: b3:c7:76:73:e5:7c:8b:14:6d:15:54:fb:d8:51:86:8b:82:ac: b4:fe:fd:2f:a1:34:8f:18:76:6f:e9:74:f3:a2:aa:66:d5:bd: d7:cc:e8:19:03:20:9f:7c:b2:6c:4c:dd:7e:e6:70:66:26:28: 5d:a6:80:33:e6:d5:0f:17:08:7c:27:ce:c8:1a:4f:2d:18:f5: 71:cf:34:be:bf:b4:4e:ea:93:93:89:00:78:63:03:cd:9e:c6: 5f:74:8e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1umsiDJG5w2VxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk OWE3Nzk2ZWQtYTc5MC00ZmZhLWIyZGItYWIzNDBkM2RmOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7lZUclINrXKCLpJSjsZaUpLvZKQh2Uuhg0N 3BFAhG5bI4sbIHWHfgjOXW5cDBdmkPpn24Yzr/JnBBzE44Hk0czjMGGkQQc52N6U 78I8pQxmTFVjSqH229W+C4CxY3N29ADD0MPonghYQGoPzIekiQoOXiSoul6wwyiQ OsJKKgvcShv2tRw7nKvoh7kpvtb8VJe9Io2u/x6LgHgkh5cY+a0JNyvTcI8Mnq5R ff2gvBDOEugOWyV/JH9iudCu1BtOZwzB0F2i2Brp95kc2HyggGDwO7ZO3Bbe4Ctw pvfon/mgjDtjbULrGB5kpM6qeTaMfwGuQfywv/ELRdMMdmLFEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpjugJLkTCOaWW9wHlzGDHzl7k9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNjVkMTFhMDUtMjc2OS0z ZjgyLWExMDctNmRlZjZmNGM2ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC0SOrd5oJvRqDzO77Mh5SihY1HvdxvNUhWRx85iJR67qJG7UzPpeIh Mplw7C+99Q/9eb5Gk+B1WPNtRBNeT0BAjR2ml8n7UWBNU43UbBeYA1nnkZ6chhdt W7FuW82Uq5VEViAbIXJiA5j9/GVkw8fROMAEkEnmB+VKFMIZEOUUXRWkMmef7D2/ FVWu2IRKIc4938GIGr6NY36EMBwPn3ZehbPHdnPlfIsUbRVU+9hRhouCrLT+/S+h NI8Ydm/pdPOiqmbVvdfM6BkDIJ98smxM3X7mcGYmKF2mgDPm1Q8XCHwnzsgaTy0Y 9XHPNL6/tE7qk5OJAHhjA82exl90jgs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:25 2025 by rpki-client