$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa File: 9d506a79-6de4-3c1a-b512-7280aa510ed1.roa (raw, json) Hash identifier: BB3itdWuN3Tb203MlOV6eMc6jTAMlKObgsOM6tVMj8Y= Subject key identifier: 75:21:FD:BD:88:90:84:2D:95:7B:6E:EF:E4:90:5C:26:4F:C6:A0:3D Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285848EC96A53356D5A7C6B1693A00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a5:33:56:d5:a7:c6:b1:69:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=44925cad-8e33-4185-8d31-12b6e059aa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:50:dc:1f:18:2a:9d:82:21:3b:0c:1a:02: 4e:31:b2:f3:f5:0b:03:6c:4a:64:d6:8c:03:cb:95: d3:11:7a:be:0c:c5:d7:92:0d:55:a7:d8:88:ae:77: 71:fc:d6:ef:82:47:95:26:05:1f:a8:9a:ce:c8:92: 5e:cb:6b:91:17:90:7a:a4:1a:aa:2a:80:11:37:5d: 18:35:b4:c3:f2:e5:a6:14:aa:51:79:22:aa:fe:fc: e7:67:af:52:29:89:f3:7b:e4:9a:6b:23:8a:cd:f9: 5d:87:c6:d9:c2:da:8d:c4:bf:6c:11:c6:66:c2:8d: 50:0c:4c:77:90:5c:cc:62:e5:b6:a6:89:b7:7a:2c: 20:41:1b:69:b6:5d:30:6b:7b:b7:31:98:d1:a0:83: 7e:02:6c:82:51:26:5b:54:6e:d7:82:3b:aa:12:4a: e9:79:c4:ef:a6:bd:cb:88:63:81:71:b7:63:d3:69: b4:5e:4d:ea:12:36:e7:77:2d:61:40:d1:0a:bf:ac: ee:2f:93:ca:10:b3:08:44:de:97:99:64:7e:4a:99: 72:07:02:f6:ec:c0:a8:7a:75:37:9d:84:4a:8b:27: 9d:4b:55:04:fa:fc:b6:2d:cd:03:aa:4d:2c:11:6c: 6e:38:a2:2e:b7:09:35:42:6a:52:c7:4f:ab:b9:25: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:21:FD:BD:88:90:84:2D:95:7B:6E:EF:E4:90:5C:26:4F:C6:A0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5e:1b:ee:ba:d3:ff:a6:9b:76:7f:21:36:e3:70:a5:ad:fa: d7:31:b8:28:49:85:e2:b4:db:2d:72:42:9f:fe:3f:ac:63:d6: 7c:55:89:c1:a4:5a:c1:48:e5:d6:0f:7f:d1:af:e3:d4:02:9a: e8:d8:07:bb:b1:97:19:55:10:ef:41:d1:7c:6a:00:21:4d:6e: 76:40:b0:b2:3b:f7:02:39:7e:16:7c:30:ef:c7:b0:89:23:e3: 46:c6:fc:41:33:9c:33:45:de:ef:fc:a4:92:c4:21:3e:fa:93: 79:e8:72:a2:ef:8b:38:41:4e:24:8a:68:47:15:46:53:11:de: f4:a2:0e:f5:9e:05:61:c3:26:f8:10:26:53:fa:2d:bf:7c:72: a4:b1:16:d9:c1:70:77:38:33:0f:2f:1d:a7:0e:69:91:2b:f0: 15:5f:80:6a:f1:75:40:57:10:6a:55:a0:45:2f:54:6c:ff:68: c2:8d:c6:f8:1b:bd:66:91:72:cb:29:4d:da:67:36:61:d4:bb: 6b:b1:5f:4c:98:1b:2f:9f:72:e1:81:ca:cc:a8:b7:4b:47:3b: e1:99:f5:82:71:bb:70:9b:4e:31:63:17:e9:d9:b6:72:5c:33: 3c:85:2b:dc:98:ec:ed:c0:4d:56:ad:fc:e0:bd:cc:5d:48:b2: 24:5b:ab:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqUzVtWnxrFpOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDQ5MjVjYWQtOGUzMy00MTg1LThkMzEtMTJiNmUwNTlhYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjxQ3B8YKp2CITsMGgJOMbLz9QsDbEpk1owD y5XTEXq+DMXXkg1Vp9iIrndx/NbvgkeVJgUfqJrOyJJey2uRF5B6pBqqKoARN10Y NbTD8uWmFKpReSKq/vznZ69SKYnze+SaayOKzfldh8bZwtqNxL9sEcZmwo1QDEx3 kFzMYuW2pom3eiwgQRtptl0wa3u3MZjRoIN+AmyCUSZbVG7XgjuqEkrpecTvpr3L iGOBcbdj02m0Xk3qEjbndy1hQNEKv6zuL5PKELMIRN6XmWR+SplyBwL27MCoenU3 nYRKiyedS1UE+vy2Lc0Dqk0sEWxuOKIutwk1QmpSx0+ruSU5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUh/b2IkIQtlXtu7+SQXCZPxqA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvOWQ1MDZhNzktNmRlNC0z YzFhLWI1MTItNzI4MGFhNTEwZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJleG+660/+mm3Z/ITbjcKWt+tcxuChJheK02y1yQp/+P6xj1nxVicGk WsFI5dYPf9Gv49QCmujYB7uxlxlVEO9B0XxqACFNbnZAsLI79wI5fhZ8MO/HsIkj 40bG/EEznDNF3u/8pJLEIT76k3nocqLvizhBTiSKaEcVRlMR3vSiDvWeBWHDJvgQ JlP6Lb98cqSxFtnBcHc4Mw8vHacOaZEr8BVfgGrxdUBXEGpVoEUvVGz/aMKNxvgb vWaRcsspTdpnNmHUu2uxX0yYGy+fcuGBysyot0tHO+GZ9YJxu3CbTjFjF+nZtnJc MzyFK9yY7O3ATVat/OC9zF1IsiRbqwA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:12 2025 by rpki-client