$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa File: c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa (raw, json) Hash identifier: PVe+LG7mzWqDasYTDfaplegKTN/XGhHYWxHN8T/QNlw= Subject key identifier: B7:CE:43:9F:F0:81:4D:51:33:01:5B:F8:64:6E:56:E3:84:8F:42:34 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F432858491ED6E9DD53F1E369A870B180 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 209.169.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e9:dd:53:f1:e3:69:a8:70:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=610fecc6-2850-47d4-9191-7e297bfa32df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:c6:b6:ec:76:66:e4:d9:11:2c:b3:1b:e8: f1:fe:6e:a6:85:85:4e:ce:9e:20:33:81:74:2e:e7: 93:49:05:c5:b1:0a:99:c3:81:9a:ee:51:fd:cf:00: ca:6d:79:49:c5:da:e0:aa:e2:90:5d:84:c3:f6:95: ee:e8:5d:14:dd:0c:6f:65:23:e1:8c:4e:39:98:58: a7:98:26:43:2b:93:3e:c3:c1:0a:e4:ae:f9:1a:93: 43:a1:93:b8:b3:5b:4e:bc:fe:44:1d:8b:2f:c5:db: 8e:5d:6b:15:b9:e2:5d:81:f9:6f:25:76:94:1b:f0: e0:c1:f2:03:52:1d:22:3a:2d:ac:23:4f:f5:02:21: 61:f7:94:cd:f3:4b:24:62:d4:a7:01:fc:46:f5:cb: 36:29:5a:6f:b1:41:30:1d:b5:b6:54:09:98:3c:ec: 3b:49:35:fd:62:6f:d1:1c:57:c6:da:1f:78:fc:ae: c8:5d:85:80:e5:4c:61:e1:2e:ff:33:63:23:83:5d: 86:28:23:d5:d8:e5:d2:1b:ea:f9:2f:04:f5:f2:84: 02:cb:db:3d:2f:83:eb:b9:b5:24:71:d7:e2:8f:d6: a2:45:b0:77:55:93:ff:dc:05:67:e6:f1:54:4c:d3: 3a:4c:46:df:84:53:06:cc:16:cd:27:e9:cd:07:05: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CE:43:9F:F0:81:4D:51:33:01:5B:F8:64:6E:56:E3:84:8F:42:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f9:0e:68:8f:d1:f2:4f:d6:c1:2a:92:9b:ba:61:08:6c:ee: b4:ff:c2:4f:35:96:d1:f4:0b:8d:b9:6b:5a:20:dd:8b:d3:d7: 23:08:21:21:2d:d2:90:ef:56:16:5e:76:79:56:d8:8a:83:39: 6f:c6:3d:c8:5a:bd:2c:97:9f:7a:aa:0d:2b:7f:7d:30:58:36: e3:c3:3a:f3:26:40:7b:61:89:fe:26:cd:a5:4a:4f:58:81:5f: c8:f3:e8:97:4a:cd:8e:bb:ff:0a:c8:2e:3c:37:31:d9:24:3d: 45:70:4a:b3:02:b6:c3:9d:da:9c:43:4f:5a:19:c7:af:4b:bf: 71:5c:7d:79:6a:30:f2:72:60:7f:93:4b:c7:34:db:08:98:ef: 7d:ac:9b:fa:05:a9:3b:43:9d:26:67:2c:50:80:e6:b9:b4:47: 83:6d:44:61:0d:92:69:f4:cc:8b:87:e2:ed:99:87:8a:f0:79: 43:00:0c:f7:a2:c6:d3:5d:5d:6e:a7:76:6e:8e:a2:42:10:15: 72:23:dd:4e:d1:22:ca:58:fa:43:ca:38:ce:21:dc:01:a5:c7: 97:87:ba:ab:d3:4a:f1:78:9e:a8:5e:f3:9c:36:40:24:92:3d: 08:d9:b7:4c:f8:a0:de:7e:0c:ae:6f:70:1e:be:33:e9:cf:4b: 10:14:a0:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1undU/HjaahwsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NjEwZmVjYzYtMjg1MC00N2Q0LTkxOTEtN2UyOTdiZmEzMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkELGtux2ZuTZESyzG+jx/m6mhYVOzp4gM4F0 LueTSQXFsQqZw4Ga7lH9zwDKbXlJxdrgquKQXYTD9pXu6F0U3QxvZSPhjE45mFin mCZDK5M+w8EK5K75GpNDoZO4s1tOvP5EHYsvxduOXWsVueJdgflvJXaUG/DgwfID Uh0iOi2sI0/1AiFh95TN80skYtSnAfxG9cs2KVpvsUEwHbW2VAmYPOw7STX9Ym/R HFfG2h94/K7IXYWA5Uxh4S7/M2Mjg12GKCPV2OXSG+r5LwT18oQCy9s9L4PrubUk cdfij9aiRbB3VZP/3AVn5vFUTNM6TEbfhFMGzBbNJ+nNBwVvoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfOQ5/wgU1RMwFb+GRuVuOEj0I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzcyYzNmOWYtNmFlOS0z NWJiLThmMGUtMmE0NDM1YzAzZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr5DmiP0fJP1sEqkpu6YQhs7rT/wk81ltH0C425a1og3YvT1yMIISEt 0pDvVhZednlW2IqDOW/GPchavSyXn3qqDSt/fTBYNuPDOvMmQHthif4mzaVKT1iB X8jz6JdKzY67/wrILjw3MdkkPUVwSrMCtsOd2pxDT1oZx69Lv3FcfXlqMPJyYH+T S8c02wiY732sm/oFqTtDnSZnLFCA5rm0R4NtRGENkmn0zIuH4u2Zh4rweUMADPei xtNdXW6ndm6OokIQFXIj3U7RIspY+kPKOM4h3AGlx5eHuqvTSvF4nqhe85w2QCSS PQjZt0z4oN5+DK5vcB6+M+nPSxAUoGA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:05 2025 by rpki-client