$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json) Hash identifier: DkjQ0zAGfBPuwNkufcdqZAC9BQchQE32+H4erVvN0u8= Subject key identifier: 72:6E:35:82:1C:D8:F1:2A:17:E6:1A:54:82:63:B3:86:8C:94:2A:D5 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285848AF2B7BDAE7D46201E0A34680 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7b:da:e7:d4:62:01:e0:a3:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=f2adad1d-e479-402b-9e25-74b7129c3d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:c4:01:03:a8:19:f9:98:a2:15:19:0a:19: 9f:bc:81:87:ae:39:bc:9b:99:7f:f0:7c:92:a5:1d: a9:bb:a1:be:a0:d7:6f:fc:6e:68:af:de:18:31:e4: ca:b9:84:5c:78:ba:c5:2b:c4:d2:94:2c:df:bb:9a: 0e:d0:6d:d3:0c:fc:55:4e:fd:83:64:1a:87:43:b0: 1e:13:89:a8:64:b9:c5:6a:17:bb:29:7d:87:05:79: f6:de:7e:f7:b0:d3:81:e0:f2:40:20:ba:3b:77:50: a6:22:91:e7:4a:a2:a6:93:13:1c:ff:e5:87:c7:f5: c0:25:d3:ef:28:bc:e6:6f:2c:48:de:d6:c4:f6:68: 8c:de:76:ee:46:a8:1b:7f:21:5f:bc:2f:56:d8:bb: 5b:cb:ef:94:75:1e:e7:7a:c8:41:86:8f:28:92:e6: 5e:ad:4e:80:e0:38:8c:65:b4:ac:8c:42:15:cc:71: 86:f4:1f:50:48:74:a8:1d:ff:f2:e9:47:30:1e:ca: e4:95:76:50:1c:b0:74:b1:64:a2:4e:20:c4:a3:e2: 1a:82:e1:08:ad:6e:e2:67:df:2b:15:fa:90:6e:3b: 09:04:b9:a5:9e:72:5a:b5:ba:4b:d5:6c:05:08:4a: df:12:c3:b2:1c:e0:4b:09:d8:4b:88:cd:d0:ea:db: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:35:82:1C:D8:F1:2A:17:E6:1A:54:82:63:B3:86:8C:94:2A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4f:16:d4:6a:65:5e:79:1a:a1:e2:d1:ec:ff:38:48:4b:f7: 27:fd:cd:5d:06:08:49:4d:a3:d5:e5:84:89:0f:f7:41:70:5d: 61:aa:06:f1:6f:da:45:d7:18:ef:97:14:f0:de:65:c5:d8:0d: 43:34:be:c1:39:a6:0d:48:c6:cd:fc:1f:9e:2a:0b:f2:a9:1c: ae:82:46:ea:d9:ad:47:f2:1a:97:b1:51:5f:44:1d:f8:64:fd: a6:7b:0d:a4:2c:25:fd:16:83:9a:fb:1f:93:3e:1c:13:fe:20: 8e:d3:94:84:2d:54:a2:5f:4d:67:f5:73:fb:7d:9c:97:b9:a5: 2c:77:89:fc:5a:53:d2:98:c5:37:94:28:96:43:10:28:81:8c: df:39:ef:cb:6c:7b:57:93:d7:c1:36:ae:bb:2c:1f:b5:30:e9: a9:aa:68:f5:6d:c5:8b:77:3c:38:6a:a0:48:02:02:17:54:7b: 4a:0a:7a:6f:df:15:a8:8b:9b:1d:e1:61:dc:28:5d:76:bd:33: e8:06:e2:e8:73:69:56:22:c6:34:e9:81:0d:52:ef:aa:3c:50: 8e:bf:d3:c3:99:01:05:1b:3d:ca:e0:81:a0:fc:82:07:d4:e3: 1d:18:60:1e:b8:00:e3:50:d2:56:9c:ef:d5:b8:ad:cf:bd:aa: 9e:ee:96:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3va59RiAeCjRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjJhZGFkMWQtZTQ3OS00MDJiLTllMjUtNzRiNzEyOWMzZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwjEAQOoGfmYohUZChmfvIGHrjm8m5l/8HyS pR2pu6G+oNdv/G5or94YMeTKuYRceLrFK8TSlCzfu5oO0G3TDPxVTv2DZBqHQ7Ae E4moZLnFahe7KX2HBXn23n73sNOB4PJAILo7d1CmIpHnSqKmkxMc/+WHx/XAJdPv KLzmbyxI3tbE9miM3nbuRqgbfyFfvC9W2Ltby++UdR7neshBho8okuZerU6A4DiM ZbSsjEIVzHGG9B9QSHSoHf/y6UcwHsrklXZQHLB0sWSiTiDEo+IaguEIrW7iZ98r FfqQbjsJBLmlnnJatbpL1WwFCErfEsOyHOBLCdhLiM3Q6tsbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJuNYIc2PEqF+YaVIJjs4aMlCrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZGY5YjU1YTctZmIxYS0z Y2QwLWI5ZTMtZGQxNzhjYjI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVPFtRqZV55GqHi0ez/OEhL9yf9zV0GCElNo9XlhIkP90FwXWGqBvFv 2kXXGO+XFPDeZcXYDUM0vsE5pg1Ixs38H54qC/KpHK6CRurZrUfyGpexUV9EHfhk /aZ7DaQsJf0Wg5r7H5M+HBP+II7TlIQtVKJfTWf1c/t9nJe5pSx3ifxaU9KYxTeU KJZDECiBjN8578tse1eT18E2rrssH7Uw6amqaPVtxYt3PDhqoEgCAhdUe0oKem/f FaiLmx3hYdwoXXa9M+gG4uhzaVYixjTpgQ1S76o8UI6/08OZAQUbPcrggaD8ggfU 4x0YYB64AONQ0lac79W4rc+9qp7ulgc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:30 2025 by rpki-client