$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json) Hash identifier: VgQj8T80PJAdhCJEMR+2XF2Fmr8st76nu0w5rupROLs= Subject key identifier: D4:27:70:1A:A6:9A:0B:62:41:F3:19:39:62:C1:CB:7E:F5:E6:D1:58 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F432858498E647FC40ED4018A1CB873C0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7f:c4:0e:d4:01:8a:1c:b8:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=6d2f4b5b-29da-43eb-b199-faf35fdcec5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:8a:6e:41:c7:e5:6e:84:39:47:34:34:83: d4:4e:9a:84:17:6e:52:7a:1b:dd:a8:65:56:c2:8d: 9a:bf:1d:23:39:84:30:8d:2c:57:e3:cb:98:5f:9a: fe:64:26:1e:06:ae:b3:65:fe:22:d6:1f:67:65:0b: ab:72:b6:42:4b:e2:c8:19:27:ec:8c:4b:14:21:a0: 07:0d:49:7a:43:8f:95:3f:4b:5f:86:ce:d0:43:02: 7a:54:cf:94:5b:80:7c:70:95:39:f4:2a:f3:0f:56: 07:cc:5f:24:6a:69:2c:fe:88:97:12:0d:3e:ed:aa: 5a:ed:ad:66:7b:53:67:2d:cc:9a:65:b2:cb:f1:91: eb:e4:fd:23:13:8c:eb:2a:78:f9:fe:c9:f1:42:41: 79:3c:e1:f9:04:7b:fe:7d:6c:19:a9:23:3d:7f:a5: da:43:be:fa:b5:15:42:b8:a1:1f:0b:56:7e:11:c8: 67:91:82:77:83:bd:fa:96:62:9a:ec:1d:28:05:b3: 0b:41:10:cd:38:9e:75:ab:e2:5e:5a:37:0b:9a:46: d0:26:89:de:ce:52:77:b7:f0:7e:2b:69:c7:90:1b: 3d:98:5e:18:57:25:0c:94:7a:e2:9d:18:8e:c6:fa: 7e:40:ed:ee:e0:0b:66:78:c6:ee:d3:04:99:0a:01: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:27:70:1A:A6:9A:0B:62:41:F3:19:39:62:C1:CB:7E:F5:E6:D1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:06:ee:e8:54:ce:72:a7:9d:1e:c1:c3:92:38:9b:fc:a9:a4: 8d:7a:74:9a:fa:4d:12:52:e4:12:4f:d8:c5:0a:6a:22:b5:2d: 34:90:70:0e:72:8a:63:da:2a:7b:7c:7b:cf:f3:1e:ec:e0:ed: c4:28:29:0a:65:90:18:7b:7a:47:fc:81:99:20:47:60:d9:0f: 92:57:80:ad:73:5d:be:c2:db:19:6e:a6:8c:b7:7e:5b:ad:13: 09:5a:79:d9:98:14:d7:09:17:0b:20:d5:c4:1b:78:be:45:07: 12:d5:de:ad:dd:f4:31:cc:53:92:ce:b7:cf:68:9e:58:1f:ad: d4:e2:cb:96:55:0d:cc:02:28:85:0e:aa:cc:a8:f4:9d:31:3d: fc:4c:f7:a7:84:72:18:27:52:4b:b9:d6:0a:85:3b:b2:59:a9: fb:ae:74:f9:20:a9:c9:4b:94:b3:e5:ae:8c:34:1a:25:24:eb: 61:3a:69:ab:3c:01:4f:84:05:93:b6:c3:c6:eb:24:7e:f8:ea: a3:73:5f:9c:52:06:db:3d:f9:d5:e6:db:fc:f6:c5:be:ef:8c: 52:7a:d1:d0:11:73:ca:fc:91:a1:29:74:ad:b2:11:79:0d:ef: 2b:f8:af:b8:f3:1a:84:35:62:5a:5c:b9:43:bc:b1:d5:e1:99: e7:bf:c8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH/EDtQBihy4c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NmQyZjRiNWItMjlkYS00M2ViLWIxOTktZmFmMzVmZGNlYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXuKbkHH5W6EOUc0NIPUTpqEF25SehvdqGVW wo2avx0jOYQwjSxX48uYX5r+ZCYeBq6zZf4i1h9nZQurcrZCS+LIGSfsjEsUIaAH DUl6Q4+VP0tfhs7QQwJ6VM+UW4B8cJU59CrzD1YHzF8kamks/oiXEg0+7apa7a1m e1NnLcyaZbLL8ZHr5P0jE4zrKnj5/snxQkF5POH5BHv+fWwZqSM9f6XaQ776tRVC uKEfC1Z+EchnkYJ3g736lmKa7B0oBbMLQRDNOJ51q+JeWjcLmkbQJonezlJ3t/B+ K2nHkBs9mF4YVyUMlHrinRiOxvp+QO3u4AtmeMbu0wSZCgEPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQncBqmmgtiQfMZOWLBy3715tFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZGY5YjU1YTctZmIxYS0z Y2QwLWI5ZTMtZGQxNzhjYjI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgG7uhUznKnnR7Bw5I4m/yppI16dJr6TRJS5BJP2MUKaiK1LTSQcA5y imPaKnt8e8/zHuzg7cQoKQplkBh7ekf8gZkgR2DZD5JXgK1zXb7C2xlupoy3flut EwlaedmYFNcJFwsg1cQbeL5FBxLV3q3d9DHMU5LOt89onlgfrdTiy5ZVDcwCKIUO qsyo9J0xPfxM96eEchgnUku51gqFO7JZqfuudPkgqclLlLPlrow0GiUk62E6aas8 AU+EBZO2w8brJH746qNzX5xSBts9+dXm2/z2xb7vjFJ60dARc8r8kaEpdK2yEXkN 7yv4r7jzGoQ1YlpcuUO8sdXhmee/yNs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:33 2025 by rpki-client