$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa File: 1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa (raw, json) Hash identifier: LQnqpV9JtoCSVpIUVEJvUipr2OWwHuSJLIIRJras/BY= Subject key identifier: 52:DB:A7:7A:F9:24:62:48:FF:58:7E:FE:97:BF:76:88:90:85:B3:4C Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285848D2113B9B67C0471E4BD58640 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 11810 IP address blocks: 204.194.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3b:9b:67:c0:47:1e:4b:d5:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e70e1072-648f-49ab-85c3-f92f3c2e80f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:bd:6f:07:a8:68:4e:cf:13:18:f8:74:6c: 06:22:a9:a8:cc:e1:f1:2d:93:e5:a9:8b:34:c3:64: 26:da:35:60:fb:d6:41:94:52:c4:88:92:8a:c7:50: 87:29:96:e7:fd:82:e7:b2:63:7d:b5:68:0b:34:84: bc:67:ff:ff:35:cc:ac:1c:66:a3:f5:6a:4d:48:d3: a5:e6:b6:3b:82:74:43:36:8a:17:7f:b3:ad:11:2d: 46:c5:e7:c9:12:18:4c:fb:c2:a6:db:9f:ef:5e:a7: d2:dc:8c:29:0f:54:63:6a:9b:11:de:10:c8:21:d7: 00:e0:f1:30:d2:0e:28:73:da:85:d9:e3:c4:46:e3: 00:b3:54:e9:18:3a:df:5b:6b:f2:bd:f4:69:58:68: 91:53:84:73:bf:b5:69:1d:45:25:7a:32:12:b2:e4: 4a:7e:a6:b7:04:25:43:3a:ba:16:67:c4:12:d1:a1: dc:56:9a:bc:a8:c2:bc:4e:68:26:c6:92:cc:ae:79: 31:d3:b0:4d:4e:b0:c6:68:6d:fb:2e:86:f7:4f:68: b9:9e:c8:d3:e4:0d:75:18:a5:65:9e:44:cc:ab:f6: 75:b3:4b:26:7d:84:7c:4a:23:81:2b:ee:b2:07:80: fd:6c:9b:22:ab:0a:de:f2:86:4b:7a:37:d8:2e:c2: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DB:A7:7A:F9:24:62:48:FF:58:7E:FE:97:BF:76:88:90:85:B3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b0:3a:a9:c2:b4:fc:97:ea:27:7b:47:02:d2:da:ec:84:f8: 95:5e:b4:ff:11:5f:47:88:08:23:04:82:e1:73:b2:fc:06:76: 9b:f0:05:6e:21:ad:15:cc:f9:bf:a3:54:64:2e:16:21:30:98: ae:10:42:d6:a4:61:3a:a0:fd:e5:e0:b4:22:01:25:e9:4b:4c: f0:23:cc:71:b9:ed:53:b9:29:b8:03:dd:8b:7e:f1:35:b7:37: d4:20:d9:a3:56:17:52:00:6a:44:1b:e7:a0:77:77:28:71:5f: 7c:5c:94:2a:06:d6:b0:66:25:7d:7e:d1:ca:2e:83:bf:26:b6: 5b:fa:6e:fc:90:15:97:a4:79:58:16:ba:c8:02:22:78:7f:88: 92:c4:04:46:11:ab:a8:0b:fd:66:1a:ad:97:ca:b2:e7:42:e7: 02:a9:c4:55:3d:82:84:fe:57:73:90:21:04:6a:4f:99:ac:37: 3f:0e:56:19:72:ef:72:7c:9b:37:0d:d7:a2:c5:ca:f8:4f:bb: da:54:ff:e7:65:ab:52:3a:f3:61:91:13:7b:50:12:5d:2c:10: 77:b7:85:33:3c:d6:43:16:44:2e:d1:5c:9e:ff:95:45:56:f4: 54:5a:db:e3:0a:9b:6d:5d:bd:ff:c4:c6:90:c5:d3:5a:17:9e: 67:c2:e4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETubZ8BHHkvVhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTcwZTEwNzItNjQ4Zi00OWFiLTg1YzMtZjkyZjNjMmU4MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHG9bweoaE7PExj4dGwGIqmozOHxLZPlqYs0 w2Qm2jVg+9ZBlFLEiJKKx1CHKZbn/YLnsmN9tWgLNIS8Z///NcysHGaj9WpNSNOl 5rY7gnRDNooXf7OtES1GxefJEhhM+8Km25/vXqfS3IwpD1RjapsR3hDIIdcA4PEw 0g4oc9qF2ePERuMAs1TpGDrfW2vyvfRpWGiRU4Rzv7VpHUUlejISsuRKfqa3BCVD OroWZ8QS0aHcVpq8qMK8TmgmxpLMrnkx07BNTrDGaG37Lob3T2i5nsjT5A11GKVl nkTMq/Z1s0smfYR8SiOBK+6yB4D9bJsiqwre8oZLejfYLsJHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLbp3r5JGJI/1h+/pe/doiQhbNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMWNkYjAyZTktNWRmYS0z OWNlLTk5NjctOWNlZGRhZWNhNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSwOqnCtPyX6id7RwLS2uyE+JVetP8RX0eICCMEguFzsvwGdpvwBW4h rRXM+b+jVGQuFiEwmK4QQtakYTqg/eXgtCIBJelLTPAjzHG57VO5KbgD3Yt+8TW3 N9Qg2aNWF1IAakQb56B3dyhxX3xclCoG1rBmJX1+0coug78mtlv6bvyQFZekeVgW usgCInh/iJLEBEYRq6gL/WYarZfKsudC5wKpxFU9goT+V3OQIQRqT5msNz8OVhly 73J8mzcN16LFyvhPu9pU/+dlq1I682GRE3tQEl0sEHe3hTM81kMWRC7RXJ7/lUVW 9FRa2+MKm21dvf/ExpDF01oXnmfC5JA= -----END CERTIFICATE-----Generated at Sun Apr 6 01:22:13 2025 by rpki-client