$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa File: c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa (raw, json) Hash identifier: y4Kxe4Uj6pXmjobQEr/NQNmfBJh6SGQ5anUL36k3reY= Subject key identifier: CB:BC:3E:73:78:A2:0A:5B:B3:15:39:E4:62:34:CF:BF:81:39:DC:F8 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584AA42B8494D94FDB5951BD2890 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 209.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:84:94:d9:4f:db:59:51:bd:28:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=bcaf8c7c-4cd9-4672-9215-4016b313ac1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:dd:66:95:c6:d6:af:b4:73:6e:b4:13:34: e4:d1:48:22:95:7a:f6:71:7e:ac:47:5e:39:24:6d: 8e:04:2f:7a:a1:ca:a6:58:af:d3:9f:fd:e6:cd:d6: f1:83:c1:4a:aa:45:af:b5:3e:62:88:34:08:31:c9: b4:c5:0f:99:21:b2:82:c2:46:09:bb:4f:8f:93:cd: b3:42:01:37:96:0f:f2:1e:90:b3:b0:42:d9:07:21: f5:63:e7:a1:44:7b:1f:e7:44:7f:53:71:3b:33:93: 03:34:d1:2c:86:d4:78:4b:f6:86:b6:89:e6:df:5e: a3:9c:f0:64:47:c1:3e:71:96:93:71:5b:ff:b3:7b: 41:46:b3:c0:70:f9:b8:f6:47:8f:5c:2c:f6:b6:54: ce:53:d7:d6:88:98:5d:fc:79:78:af:92:ef:cd:8d: a2:1f:78:00:32:18:2a:5b:38:7a:39:64:cf:45:77: fc:e2:51:57:71:cf:27:1d:25:b2:12:32:90:4f:87: da:5a:15:b1:5e:d2:23:31:1b:5c:e0:07:db:7e:8b: 05:fc:e7:70:66:fe:ab:92:d0:fa:bf:21:b0:dd:e7: 54:f3:26:18:d3:5a:74:35:86:7b:7c:2c:38:f1:cc: 9d:c6:a8:16:24:3a:62:81:7d:f3:29:d4:96:f9:64: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:3E:73:78:A2:0A:5B:B3:15:39:E4:62:34:CF:BF:81:39:DC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c3:ed:b6:d7:3d:62:1d:df:bd:cb:c1:9e:08:10:b2:3f:42: 66:6f:00:d6:4a:79:d5:9b:9a:6e:41:9b:87:8a:91:b7:09:02: 8b:63:c8:a8:15:c8:20:b4:ce:db:c4:ab:77:11:a9:98:a5:e8: 45:ee:4d:17:5e:87:01:08:f0:c6:dd:46:ca:69:2a:34:6a:6c: 0a:2f:7f:56:de:df:66:c9:ac:15:f7:b1:23:2b:c3:0c:1b:0a: e3:73:f3:9d:9a:e7:3f:3f:09:88:76:dd:25:8d:91:e3:ef:6b: d6:50:89:63:a5:ce:3d:40:74:3f:4f:fb:1d:de:08:7c:48:af: 98:3c:d6:ff:8c:b7:b0:4c:ac:1b:59:00:44:36:12:91:65:19: cf:48:cd:51:53:f0:8d:57:e1:38:fc:b0:39:19:1a:3f:a8:b8: ef:72:29:34:4d:05:7b:36:cf:12:51:68:c7:94:f1:4d:bd:82: 26:1d:32:fb:81:c2:07:2a:d3:a2:34:2f:2c:57:b2:92:98:dd: b1:7c:10:12:1f:64:c4:a8:21:72:5f:c2:58:d5:b6:38:48:1f: a9:51:c5:45:d9:27:f1:62:1b:54:a4:35:94:8d:94:e0:8a:0e: 7f:92:ae:ac:fa:1f:cf:5c:4c:49:b2:56:82:c5:af:d2:9a:f6: 1b:51:c1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4SU2U/bWVG9KJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YmNhZjhjN2MtNGNkOS00NjcyLTkyMTUtNDAxNmIzMTNhYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY/dZpXG1q+0c260EzTk0UgilXr2cX6sR145 JG2OBC96ocqmWK/Tn/3mzdbxg8FKqkWvtT5iiDQIMcm0xQ+ZIbKCwkYJu0+Pk82z QgE3lg/yHpCzsELZByH1Y+ehRHsf50R/U3E7M5MDNNEshtR4S/aGtonm316jnPBk R8E+cZaTcVv/s3tBRrPAcPm49kePXCz2tlTOU9fWiJhd/Hl4r5LvzY2iH3gAMhgq Wzh6OWTPRXf84lFXcc8nHSWyEjKQT4faWhWxXtIjMRtc4AfbfosF/OdwZv6rktD6 vyGw3edU8yYY01p0NYZ7fCw48cydxqgWJDpigX3zKdSW+WSd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu8PnN4ogpbsxU55GI0z7+BOdz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzk0ZWMyY2EtNGNiMy0z NDcxLWExYzktMmM1ZWZhZTVkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7D7bbXPWId373LwZ4IELI/QmZvANZKedWbmm5Bm4eKkbcJAotjyKgV yCC0ztvEq3cRqZil6EXuTRdehwEI8MbdRsppKjRqbAovf1be32bJrBX3sSMrwwwb CuNz852a5z8/CYh23SWNkePva9ZQiWOlzj1AdD9P+x3eCHxIr5g81v+Mt7BMrBtZ AEQ2EpFlGc9IzVFT8I1X4Tj8sDkZGj+ouO9yKTRNBXs2zxJRaMeU8U29giYdMvuB wgcq06I0LyxXspKY3bF8EBIfZMSoIXJfwljVtjhIH6lRxUXZJ/FiG1SkNZSNlOCK Dn+Srqz6H89cTEmyVoLFr9Ka9htRwRM= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:05 2025 by rpki-client