$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa File: 8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa (raw, json) Hash identifier: BopcH2FjzWwH1PPthvSA8kLCU2mnQIm7+JkB1EurZy4= Subject key identifier: 82:D4:5A:A7:CB:28:4A:D0:B1:19:66:DC:24:A8:27:6C:34:B1:93:0C Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F432858498E647F64A224099FD25282A0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 216.185.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7f:64:a2:24:09:9f:d2:52:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=ee6addf7-30f9-468a-9764-cb78d2e2d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:4a:c0:f4:b9:e8:c8:f4:31:c0:73:62:83: 56:71:1f:72:ad:69:5e:6d:80:1f:51:e0:92:d5:45: 57:58:75:cd:cb:da:a3:ea:f7:f7:b3:4f:a3:30:dd: 4d:7f:78:5e:d0:a0:2f:9c:93:d7:c8:95:b5:5a:9c: f4:e3:10:f5:59:da:cf:52:fe:66:d5:46:99:59:07: 63:4d:48:f6:f1:9f:6e:c5:43:d9:cc:97:1d:fb:3a: fc:d2:b1:f9:b9:5e:28:fd:e2:c0:26:b0:e2:86:3f: 75:21:3a:ba:6e:d6:bb:40:46:5b:31:4c:45:42:24: 10:6c:0a:4e:c6:c2:d4:68:1e:4d:2a:24:64:2f:e7: e2:88:80:1e:77:dc:f1:f1:e5:6d:09:23:cd:a2:78: 31:58:b1:bc:c6:7c:53:96:13:7e:37:73:12:d5:8f: 7a:1a:51:75:e5:e7:bb:de:c1:e0:2a:b5:44:cd:7a: 49:3f:97:79:74:b4:26:9c:a7:15:dc:8d:02:33:c2: 36:a3:24:82:c0:42:51:e4:fc:63:bc:cd:77:f8:1a: ce:b4:14:05:80:c9:2f:bc:04:89:06:20:ae:18:9f: dd:0e:f8:bd:45:25:3e:fe:9b:e9:46:73:a1:02:fd: 27:4f:26:0f:49:37:3e:a5:86:7b:37:77:cf:f2:0d: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:5A:A7:CB:28:4A:D0:B1:19:66:DC:24:A8:27:6C:34:B1:93:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d4:4a:54:50:3c:6d:54:28:4f:f0:23:15:56:c7:66:f0:bb: af:84:5c:e6:01:dc:47:18:35:4e:65:21:2b:9f:23:36:c7:e9: 6f:7b:11:60:62:a7:31:5d:db:5f:2e:9d:d3:c5:98:bf:8c:e8: 0a:aa:f1:2e:1f:b9:b4:cb:22:48:57:25:f9:be:4c:3f:3b:33: c4:8f:64:30:ba:35:f8:36:b4:2f:d3:43:a3:85:df:9a:7c:d5: d2:aa:ed:f0:a6:62:8b:07:94:68:48:e8:90:19:d0:52:28:ab: ba:fb:5f:bc:19:d8:73:f2:a4:f1:a0:d7:66:e7:22:27:05:c1: a5:11:09:f1:69:21:8f:4b:09:62:57:0c:74:51:8d:1e:f3:ff: 9c:96:5e:5e:47:c1:4f:a6:e3:14:7b:64:c8:5d:6f:18:0e:f1: 5d:8d:c9:39:84:54:8a:d9:ce:2f:57:58:d2:fe:37:bd:44:86: 9e:54:69:1d:ba:35:38:ce:fe:eb:d2:ec:c3:f8:5e:3c:8b:54: e9:5f:ba:05:7f:25:5b:ee:59:4d:7a:0f:d1:99:b4:6a:c6:49: 66:b8:cd:a3:f7:5a:f8:0c:63:82:cc:3a:7a:75:08:63:c5:f7: 58:bb:46:07:43:76:23:58:c1:45:88:68:c7:6d:f4:d9:78:df: ea:d7:e2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH9koiQJn9JSgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZWU2YWRkZjctMzBmOS00NjhhLTk3NjQtY2I3OGQyZTJkMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvFKwPS56Mj0McBzYoNWcR9yrWlebYAfUeCS 1UVXWHXNy9qj6vf3s0+jMN1Nf3he0KAvnJPXyJW1Wpz04xD1WdrPUv5m1UaZWQdj TUj28Z9uxUPZzJcd+zr80rH5uV4o/eLAJrDihj91ITq6bta7QEZbMUxFQiQQbApO xsLUaB5NKiRkL+fiiIAed9zx8eVtCSPNongxWLG8xnxTlhN+N3MS1Y96GlF15ee7 3sHgKrVEzXpJP5d5dLQmnKcV3I0CM8I2oySCwEJR5PxjvM13+BrOtBQFgMkvvASJ BiCuGJ/dDvi9RSU+/pvpRnOhAv0nTyYPSTc+pYZ7N3fP8g2ZNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILUWqfLKErQsRlm3CSoJ2w0sZMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvOGRjZDMzYWQtODJlOC0z NDk5LTlkMGEtZmUwZmUxYTA4NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHUSlRQPG1UKE/wIxVWx2bwu6+EXOYB3EcYNU5lISufIzbH6W97EWBi pzFd218undPFmL+M6Aqq8S4fubTLIkhXJfm+TD87M8SPZDC6Nfg2tC/TQ6OF35p8 1dKq7fCmYosHlGhI6JAZ0FIoq7r7X7wZ2HPypPGg12bnIicFwaURCfFpIY9LCWJX DHRRjR7z/5yWXl5HwU+m4xR7ZMhdbxgO8V2NyTmEVIrZzi9XWNL+N71Ehp5UaR26 NTjO/uvS7MP4XjyLVOlfugV/JVvuWU16D9GZtGrGSWa4zaP3WvgMY4LMOnp1CGPF 91i7RgdDdiNYwUWIaMdt9Nl43+rX4lI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:57 2025 by rpki-client