$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa File: 1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa (raw, json) Hash identifier: zyrUjqTZ3ict9uuQ7ld2qdYDROxUp9WfUXxgTh3V3kg= Subject key identifier: 72:28:24:72:2C:E2:5B:DC:E3:1C:85:5D:23:38:BF:F0:62:43:CD:E7 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584A90A0B572B01544D21D3CFCC0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 11810 IP address blocks: 204.194.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b5:72:b0:15:44:d2:1d:3c:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c8dde0f3-7c33-4386-a60a-bc59679fb1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:38:51:26:31:25:d5:1d:01:29:19:11:10: 63:9c:2b:27:54:98:7e:f2:a1:47:f8:a9:d1:55:07: af:49:15:16:75:60:81:28:53:32:8e:b8:9a:6d:b0: 09:63:4f:7c:0c:39:aa:94:97:7f:59:5f:c0:d8:d8: 3f:9a:d1:80:98:f4:d7:61:1b:2f:ac:23:47:f0:9d: fc:12:db:88:bc:f7:b9:e8:fc:04:a7:29:bb:b0:c5: 0a:fa:73:35:9d:7d:71:43:24:da:a6:25:1f:ed:21: ef:34:41:5e:5f:ec:93:ea:53:04:6c:41:ba:a4:e0: 39:1a:4c:47:c6:d4:c1:97:09:c4:d3:22:ba:dd:9a: 93:0b:da:ca:87:8a:3f:3d:23:c6:40:55:ee:1a:96: 5b:81:30:6d:dc:d7:ca:b1:8d:09:f1:95:a2:fc:74: 46:39:dd:ed:1d:fd:0d:19:fa:67:ba:8e:d6:12:5d: 50:d4:5e:56:82:98:91:61:be:1c:2a:a1:09:0a:ca: 52:81:58:6d:34:c2:93:b9:72:67:42:60:48:4d:8e: 9e:33:ac:12:80:f3:fa:3f:7f:e5:a3:7c:bc:71:ab: 62:0a:fe:b2:c9:0e:29:05:7b:c1:a5:22:ca:d6:96: 91:e2:a3:60:06:70:25:65:97:f2:88:8f:d1:6d:3b: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:28:24:72:2C:E2:5B:DC:E3:1C:85:5D:23:38:BF:F0:62:43:CD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:68:4f:c6:a7:03:a1:87:ec:0d:b3:8e:07:23:d9:d0:ed:cb: b1:dd:08:72:36:54:fb:48:bd:58:40:c1:ce:70:44:f4:7b:bb: 91:13:f3:9e:32:79:25:25:4e:18:a6:a1:1e:9e:ee:9c:80:5e: 64:ac:4b:23:f6:18:63:c3:43:fe:43:d5:17:91:ed:0a:95:17: 97:8b:25:61:ab:c7:35:f5:1d:3a:4f:6f:e1:17:a1:d5:29:ac: d6:86:6c:82:7d:5e:55:d5:48:7d:32:06:6e:09:c2:9d:a9:16: 01:11:16:6a:d2:d8:50:ed:b9:0f:0f:5c:a1:44:ea:b0:36:52: 97:37:8c:cc:9e:1f:f0:4f:4f:fb:5a:bf:3d:7a:56:2f:10:24: 00:8b:7d:9c:05:24:de:6a:4e:f2:18:6a:59:25:ae:c3:93:87: 53:c9:0c:f4:ed:b1:18:ee:b9:10:f0:bd:68:87:9c:ba:30:b6: aa:99:76:f2:f9:a4:12:18:e4:39:3e:f9:36:ef:c1:a6:b7:d0: d1:8a:16:75:fe:3f:b7:d5:3f:02:80:2a:1c:e0:84:e5:8b:32: f9:76:b5:4f:d8:73:a3:9d:49:c3:04:9a:0e:71:e9:81:52:dd: 0c:2b:d6:d3:7c:2e:59:1a:fd:48:37:23:0d:57:83:8a:c5:bd: 8d:23:ba:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLVysBVE0h08/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzhkZGUwZjMtN2MzMy00Mzg2LWE2MGEtYmM1OTY3OWZiMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOg4USYxJdUdASkZERBjnCsnVJh+8qFH+KnR VQevSRUWdWCBKFMyjriabbAJY098DDmqlJd/WV/A2Ng/mtGAmPTXYRsvrCNH8J38 EtuIvPe56PwEpym7sMUK+nM1nX1xQyTapiUf7SHvNEFeX+yT6lMEbEG6pOA5GkxH xtTBlwnE0yK63ZqTC9rKh4o/PSPGQFXuGpZbgTBt3NfKsY0J8ZWi/HRGOd3tHf0N Gfpnuo7WEl1Q1F5WgpiRYb4cKqEJCspSgVhtNMKTuXJnQmBITY6eM6wSgPP6P3/l o3y8catiCv6yyQ4pBXvBpSLK1paR4qNgBnAlZZfyiI/RbTtHvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIoJHIs4lvc4xyFXSM4v/BiQ83nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMWNkYjAyZTktNWRmYS0z OWNlLTk5NjctOWNlZGRhZWNhNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtoT8anA6GH7A2zjgcj2dDty7HdCHI2VPtIvVhAwc5wRPR7u5ET854y eSUlThimoR6e7pyAXmSsSyP2GGPDQ/5D1ReR7QqVF5eLJWGrxzX1HTpPb+EXodUp rNaGbIJ9XlXVSH0yBm4Jwp2pFgERFmrS2FDtuQ8PXKFE6rA2Upc3jMyeH/BPT/ta vz16Vi8QJACLfZwFJN5qTvIYalklrsOTh1PJDPTtsRjuuRDwvWiHnLowtqqZdvL5 pBIY5Dk++Tbvwaa30NGKFnX+P7fVPwKAKhzghOWLMvl2tU/Yc6OdScMEmg5x6YFS 3Qwr1tN8Llka/Ug3Iw1Xg4rFvY0juq8= -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:22 2025 by rpki-client