$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa File: 9a076cba-01e2-3a07-9207-a8e38727cb87.roa (raw, json) Hash identifier: ThnKXBiRJLbUvqtCjT96SoEoxfjWgxlfJe1ckBUo/jk= Subject key identifier: 84:6E:64:C7:39:40:37:39:06:6E:08:50:0F:C4:1E:D4:2F:89:72:24 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285848D2113BE6C7A8A40152199880 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3b:e6:c7:a8:a4:01:52:19:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1f568a6f-a0f0-406e-8d1d-345fe5715654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:1a:35:97:c2:7e:96:ba:8b:cb:35:44:42: 32:27:1d:b3:0d:33:2b:49:94:e2:a2:29:d3:99:a0: 32:b1:7f:66:ff:3e:a4:f2:c7:6e:99:ad:15:14:bc: 75:50:90:bf:aa:7d:12:ae:1a:d1:60:b5:ea:3c:ce: ae:0c:41:ac:d9:a6:f1:c7:6b:b7:81:b3:6c:e8:d3: 3b:71:f8:74:7e:45:e4:5c:26:ba:d0:bb:47:d9:64: e3:0a:56:df:0b:2b:38:4e:cc:06:fa:b9:92:54:e0: 27:c6:02:c1:ee:ef:de:c4:f7:07:fa:67:9e:c9:4f: 53:1f:e8:a6:17:1e:dc:0b:1f:51:d6:06:56:62:b5: 34:33:0f:a8:34:df:4c:7e:8e:cc:22:37:70:b7:7a: 1b:a6:70:fc:36:00:83:37:79:1f:a1:96:ce:08:bc: 9f:d5:c6:f2:85:3d:5c:53:ee:ba:60:76:62:88:7c: d4:df:bd:81:fc:93:cb:5a:2f:ed:18:2d:6a:88:b4: 01:c1:e5:d3:b0:f5:3c:6f:79:ee:8c:81:dd:2f:6e: b2:1f:29:c5:55:77:82:36:28:51:1e:77:2b:8f:49: 5c:dc:f8:1b:8e:76:0f:ca:28:48:05:67:77:48:e5: a2:2c:86:58:fa:27:06:46:76:80:67:79:63:a0:7f: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:64:C7:39:40:37:39:06:6E:08:50:0F:C4:1E:D4:2F:89:72:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9a076cba-01e2-3a07-9207-a8e38727cb87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f4:f0:2e:79:44:52:db:02:81:14:e4:72:00:97:7d:34:06: 92:32:5b:c7:05:b6:14:52:cd:f7:9f:94:f9:bf:23:eb:01:58: 50:b8:53:c5:c1:04:c1:5b:5e:75:43:69:b5:de:c2:49:8e:f5: 32:7d:55:24:0c:fb:b8:89:cb:78:7b:47:5b:6e:72:da:10:1e: cd:81:c9:2f:6c:72:f4:0a:36:b0:6b:49:a0:2a:f9:c5:64:1c: 3e:25:c4:80:59:9c:7e:72:bc:92:6c:61:6b:bf:50:0d:ea:70: 35:db:07:e9:63:1f:55:f5:6c:92:64:ca:92:55:b6:52:97:f1: a9:75:15:64:5f:c4:4d:73:d9:8b:2d:3a:0b:1a:66:94:7c:c3: bf:e6:7e:f1:e3:c5:ec:bb:dd:ed:5b:d2:ab:13:db:94:31:2b: 98:fe:69:6f:b5:34:d3:05:f9:c5:2d:2c:36:b2:80:73:88:24: 9f:9b:4f:7e:d0:83:60:1b:72:71:b0:77:46:e8:01:20:ed:18: bd:56:4a:bb:3d:1b:b8:9d:91:f2:f7:42:2e:41:c5:05:65:8e: 6d:d4:77:95:ce:1a:fd:1f:4a:48:83:bc:14:ad:08:a6:7e:e0: 44:c0:a6:1a:f0:a4:60:8c:61:90:51:8f:f7:44:c1:70:7d:a9: c9:77:36:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETvmx6ikAVIZmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWY1NjhhNmYtYTBmMC00MDZlLThkMWQtMzQ1ZmU1NzE1NjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlosaNZfCfpa6i8s1REIyJx2zDTMrSZTioinT maAysX9m/z6k8sduma0VFLx1UJC/qn0SrhrRYLXqPM6uDEGs2abxx2u3gbNs6NM7 cfh0fkXkXCa60LtH2WTjClbfCys4TswG+rmSVOAnxgLB7u/exPcH+meeyU9TH+im Fx7cCx9R1gZWYrU0Mw+oNN9Mfo7MIjdwt3obpnD8NgCDN3kfoZbOCLyf1cbyhT1c U+66YHZiiHzU372B/JPLWi/tGC1qiLQBweXTsPU8b3nujIHdL26yHynFVXeCNihR Hncrj0lc3PgbjnYPyihIBWd3SOWiLIZY+icGRnaAZ3ljoH8t7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRuZMc5QDc5Bm4IUA/EHtQviXIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvOWEwNzZjYmEtMDFlMi0z YTA3LTkyMDctYThlMzg3MjdjYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF708C55RFLbAoEU5HIAl300BpIyW8cFthRSzfeflPm/I+sBWFC4U8XB BMFbXnVDabXewkmO9TJ9VSQM+7iJy3h7R1tuctoQHs2ByS9scvQKNrBrSaAq+cVk HD4lxIBZnH5yvJJsYWu/UA3qcDXbB+ljH1X1bJJkypJVtlKX8al1FWRfxE1z2Yst OgsaZpR8w7/mfvHjxey73e1b0qsT25QxK5j+aW+1NNMF+cUtLDaygHOIJJ+bT37Q g2AbcnGwd0boASDtGL1WSrs9G7idkfL3Qi5BxQVljm3Ud5XOGv0fSkiDvBStCKZ+ 4ETAphrwpGCMYZBRj/dEwXB9qcl3Nr8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:03 2025 by rpki-client