$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa File: c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa (raw, json) Hash identifier: 6HoCEVVNDnphKuY8chGg9SrqJ60D59p9ID0LcUZMLlY= Subject key identifier: 02:3B:57:6B:A3:47:62:60:F3:8C:45:37:47:76:FB:01:F3:AB:4E:51 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F43285849FE0FFD64F9F0AA348CDDF638 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16509 IP address blocks: 209.169.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fd:64:f9:f0:aa:34:8c:dd:f6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=d7c173ec-dbfb-43d1-bee9-fa79287ae9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e1:64:8d:3c:cb:4e:7e:ea:b5:9d:de:34:29: 08:ac:8d:69:0a:96:9e:ce:a5:d8:10:a9:85:b2:1b: a9:c1:31:69:45:94:59:8f:32:4e:25:13:0a:14:99: 41:d3:0f:6a:55:e4:e3:ad:0e:22:48:18:73:a5:7c: b2:3a:94:68:53:43:33:66:d5:51:4b:3e:62:dd:f5: 7f:8c:b4:3d:3b:33:a9:77:0b:ab:63:b0:67:cb:61: f3:ef:47:28:81:ba:19:e0:64:de:8e:00:be:fb:85: d2:ee:02:c5:fc:bc:82:26:fa:85:17:a6:d6:d2:94: 17:c5:8b:6e:a3:7b:7d:96:36:f8:49:05:89:93:ce: 4a:75:c6:d6:11:ba:b5:ad:86:ff:58:50:25:a8:6a: ad:68:80:90:56:6d:71:83:d1:bc:3e:e7:f5:4b:d5: ec:49:b1:42:97:7f:50:04:13:b1:67:37:78:0a:2e: c4:41:2e:75:83:88:6b:14:86:75:9f:c4:13:21:6c: 71:0b:58:24:bf:ce:e3:66:bc:0f:e0:89:8c:3c:fd: 8a:1e:7c:8d:aa:93:99:15:35:f1:0e:f8:92:63:8b: 4b:27:53:2b:e0:d6:50:da:49:e7:5f:09:55:f5:d6: 69:b5:36:0f:23:57:c3:0a:50:0c:3d:5c:ba:c4:11: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:57:6B:A3:47:62:60:F3:8C:45:37:47:76:FB:01:F3:AB:4E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a5:25:4a:88:62:61:4a:e7:bf:9e:dc:4b:3d:a7:70:bc:b5: 7d:d2:6b:46:47:64:1c:3b:7d:df:0e:1d:df:9c:ac:29:7a:1f: ba:8e:cf:6e:0a:9b:20:54:85:83:88:fd:c1:b0:8a:23:06:d0: 2a:e6:d2:7d:92:ad:6d:60:d5:0c:9e:bf:e0:68:22:ad:c8:21: cf:35:7c:d5:c0:1e:13:8e:60:b9:c5:3f:ad:ce:62:fb:78:0f: f9:b7:31:41:c2:97:93:06:22:43:2d:86:31:9c:da:e6:5e:3b: 4d:1b:52:22:0d:d7:0b:4b:10:e1:c8:03:b6:a5:1d:e1:8f:c3: 65:76:51:b2:5f:ff:d5:f3:c0:45:d5:00:59:0b:d2:03:5c:5a: be:a4:3a:60:e5:d7:67:1f:11:d9:6a:40:29:19:38:3b:be:98: b8:21:ab:c6:3b:08:2b:2c:d8:fa:0b:c8:7c:6b:fe:6f:80:0e: 8c:49:b6:8f:e4:08:50:88:77:43:c3:c8:f9:07:80:b1:36:82: bc:70:35:37:d8:e6:c6:ba:5c:c3:08:1a:8e:a0:d9:54:d2:6b: b1:67:07:8a:47:b7:c3:b0:07:14:1f:bc:6e:82:01:75:62:39: 2f:24:2e:c2:cb:04:b2:49:e6:b5:4d:97:93:58:71:bc:06:06: 54:19:95:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/1k+fCqNIzd9jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDdjMTczZWMtZGJmYi00M2QxLWJlZTktZmE3OTI4N2FlOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eFkjTzLTn7qtZ3eNCkIrI1pCpaezqXYEKmF shupwTFpRZRZjzJOJRMKFJlB0w9qVeTjrQ4iSBhzpXyyOpRoU0MzZtVRSz5i3fV/ jLQ9OzOpdwurY7Bny2Hz70cogboZ4GTejgC++4XS7gLF/LyCJvqFF6bW0pQXxYtu o3t9ljb4SQWJk85KdcbWEbq1rYb/WFAlqGqtaICQVm1xg9G8Puf1S9XsSbFCl39Q BBOxZzd4Ci7EQS51g4hrFIZ1n8QTIWxxC1gkv87jZrwP4ImMPP2KHnyNqpOZFTXx DviSY4tLJ1Mr4NZQ2knnXwlV9dZptTYPI1fDClAMPVy6xBERjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI7V2ujR2Jg84xFN0d2+wHzq05RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzcyYzNmOWYtNmFlOS0z NWJiLThmMGUtMmE0NDM1YzAzZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmlJUqIYmFK57+e3Es9p3C8tX3Sa0ZHZBw7fd8OHd+crCl6H7qOz24K myBUhYOI/cGwiiMG0Crm0n2SrW1g1Qyev+BoIq3IIc81fNXAHhOOYLnFP63OYvt4 D/m3MUHCl5MGIkMthjGc2uZeO00bUiIN1wtLEOHIA7alHeGPw2V2UbJf/9XzwEXV AFkL0gNcWr6kOmDl12cfEdlqQCkZODu+mLghq8Y7CCss2PoLyHxr/m+ADoxJto/k CFCId0PDyPkHgLE2grxwNTfY5sa6XMMIGo6g2VTSa7FnB4pHt8OwBxQfvG6CAXVi OS8kLsLLBLJJ5rVNl5NYcbwGBlQZlQE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:20:24 2025 by rpki-client