$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa File: 72eec912-ade1-390d-84e6-2a1081e27fb4.roa (raw, json) Hash identifier: b27TAsYIy5zD3t1V7D+txBGkCIDvaz8xD2Fbp9FOcmA= Subject key identifier: 95:28:71:B3:73:62:37:AE:84:A3:35:F5:C2:EA:49:88:0B:6B:97:6C Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F432858498E64802D350DF54CFFBC4610 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 216.185.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:80:2d:35:0d:f5:4c:ff:bc:46:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=a4e61b44-8855-41a9-bbd0-d4b86f810651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:bd:58:cc:e1:30:cc:5e:c4:ca:db:d9:b4: b0:9e:47:80:d3:83:aa:44:22:2b:04:f7:66:26:85: 5a:37:8a:56:22:c9:9d:6d:b0:0c:33:33:d6:32:bd: fe:57:30:7f:88:48:00:3f:35:c6:65:51:0c:f2:36: 7d:03:6b:16:5b:3f:1e:8a:83:ba:db:5d:de:d4:4f: 54:bd:0a:87:22:9e:03:67:39:11:7f:2a:5d:65:f1: 71:fb:df:6d:d4:bb:19:1f:b4:6d:a1:df:72:bb:31: b4:0d:eb:87:d9:6d:cd:6f:8f:53:c0:6b:aa:1d:c7: 09:22:87:34:8e:4c:c9:10:d9:c7:3c:e4:33:6a:f3: 24:28:08:93:e8:c1:0a:33:41:6f:81:ee:0f:82:ad: da:54:8e:b2:49:93:3c:9a:e5:f8:c6:4b:cb:cb:5b: 07:d5:05:2e:8b:e9:7b:8c:41:2f:86:25:00:53:b3: 6b:35:e8:d7:e8:72:40:8e:88:ff:0d:e2:87:40:9a: f1:3c:26:85:a0:27:eb:53:fa:2e:61:a8:f3:25:c0: 38:38:cc:b1:83:08:50:6c:7b:68:9f:a1:54:d9:06: 2d:9b:fe:fd:da:35:cf:0f:64:ca:a9:5a:10:21:27: fe:2d:b0:43:fa:29:bc:83:43:e8:e2:2b:39:db:6a: b0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:71:B3:73:62:37:AE:84:A3:35:F5:C2:EA:49:88:0B:6B:97:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f0:e0:71:aa:3d:49:77:6a:bd:fe:80:ca:c9:4e:74:78:8c: 71:4a:b9:2b:35:e8:63:69:b7:cc:7c:d7:41:2e:e0:d0:5a:2d: df:c0:c0:94:54:36:ac:d5:82:71:88:d5:2c:0d:5c:59:4c:e8: af:86:70:ba:c9:f7:81:8e:42:8b:f5:56:c8:f5:02:ac:a3:f0: 24:53:89:c2:b3:19:ee:6a:54:46:a6:9a:ec:02:52:97:ea:78: b4:d3:55:b4:17:69:3a:48:61:8e:53:6f:cd:3c:b5:b5:21:19: 52:05:06:fe:19:4a:90:f9:d1:91:bb:73:72:c7:2d:60:c5:b7: 09:12:5b:e2:0d:9d:3e:bf:0a:9d:19:21:8e:c3:97:99:ab:d1: f0:97:fe:8f:bd:c2:1b:9f:ee:0b:b8:59:2d:c3:f2:83:f5:0d: 1f:ca:c4:ac:c8:91:f2:60:39:d1:3f:28:e7:61:1c:7e:1b:05: 66:c8:28:69:bb:b0:b5:00:16:12:63:77:c2:8a:ae:68:49:3c: ba:ec:e1:42:6d:c0:92:10:f4:a6:c8:26:95:0d:24:4e:45:e9: 64:13:59:fc:ae:19:9f:df:55:02:9a:41:da:0a:c0:e3:bf:73: be:e5:58:bc:a6:a1:e4:1f:bc:3a:71:e3:a4:c3:fe:00:df:85: d1:26:36:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIAtNQ31TP+8RhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTRlNjFiNDQtODg1NS00MWE5LWJiZDAtZDRiODZmODEwNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg+9WMzhMMxexMrb2bSwnkeA04OqRCIrBPdm JoVaN4pWIsmdbbAMMzPWMr3+VzB/iEgAPzXGZVEM8jZ9A2sWWz8eioO6213e1E9U vQqHIp4DZzkRfypdZfFx+99t1LsZH7Rtod9yuzG0DeuH2W3Nb49TwGuqHccJIoc0 jkzJENnHPOQzavMkKAiT6MEKM0Fvge4Pgq3aVI6ySZM8muX4xkvLy1sH1QUui+l7 jEEvhiUAU7NrNejX6HJAjoj/DeKHQJrxPCaFoCfrU/ouYajzJcA4OMyxgwhQbHto n6FU2QYtm/792jXPD2TKqVoQISf+LbBD+im8g0Po4is522qwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUocbNzYjeuhKM19cLqSYgLa5dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvNzJlZWM5MTItYWRlMS0z OTBkLTg0ZTYtMmExMDgxZTI3ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzw4HGqPUl3ar3+gMrJTnR4jHFKuSs16GNpt8x810Eu4NBaLd/AwJRU NqzVgnGI1SwNXFlM6K+GcLrJ94GOQov1Vsj1Aqyj8CRTicKzGe5qVEammuwCUpfq eLTTVbQXaTpIYY5Tb808tbUhGVIFBv4ZSpD50ZG7c3LHLWDFtwkSW+INnT6/Cp0Z IY7Dl5mr0fCX/o+9whuf7gu4WS3D8oP1DR/KxKzIkfJgOdE/KOdhHH4bBWbIKGm7 sLUAFhJjd8KKrmhJPLrs4UJtwJIQ9KbIJpUNJE5F6WQTWfyuGZ/fVQKaQdoKwOO/ c77lWLymoeQfvDpx46TD/gDfhdEmNuE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:53 2025 by rpki-client