$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa File: 72eec912-ade1-390d-84e6-2a1081e27fb4.roa (raw, json) Hash identifier: Vrc+vb+a3CUX0Z6HPyP3S3K/HVGImn/pJjtV/wYwGZE= Subject key identifier: D3:38:65:58:89:E2:90:74:EC:38:34:6E:1E:F2:BE:8A:88:37:00:39 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285848AF2B7C2EF19AD59FAB6D3700 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 216.185.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7c:2e:f1:9a:d5:9f:ab:6d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=721b2e90-8df9-4ff9-a168-fbd20411dd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:b3:0b:9c:7d:34:dc:9b:18:3f:64:dd:e7: c7:03:f4:4b:3c:df:c7:9f:e2:35:59:2d:e9:5e:d7: bd:24:02:e7:28:2c:b5:74:09:9b:34:c7:be:9a:59: d5:2b:8a:95:59:e9:7c:19:69:b3:a9:6a:39:31:a1: b5:59:fb:86:c3:f9:fb:43:6f:c4:6c:12:17:e9:7c: 91:36:6e:c2:42:32:7a:bb:ff:6c:c3:52:03:71:b1: 45:49:37:90:b3:08:70:27:fa:7d:4f:b8:8c:7e:08: b9:14:c2:f0:b4:06:1c:c3:70:3d:a3:e5:66:9f:7d: 91:d9:4f:de:86:fe:74:29:20:27:dd:bd:67:30:37: 3c:92:6a:13:d7:13:44:41:e9:dd:f6:84:4c:dc:0a: 95:c3:e5:45:0f:73:f3:a7:82:6f:73:d0:fd:87:3f: 10:e0:e8:d6:bf:d5:10:10:a8:af:c2:6d:8a:e3:2a: 27:5e:1e:d4:f4:9f:a7:72:17:70:7e:73:66:62:f9: 92:d4:83:9e:91:4a:29:a0:97:74:4c:d8:05:b4:ea: 06:d1:16:3e:bb:9a:80:54:a2:68:a0:55:d3:cb:ae: 9b:af:1c:4f:cb:4b:0d:0f:e6:b9:ec:e1:0a:e5:99: 8d:fd:a7:9d:36:0d:69:3c:df:44:cd:f0:85:f0:ce: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:65:58:89:E2:90:74:EC:38:34:6E:1E:F2:BE:8A:88:37:00:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3a:78:a0:24:e2:aa:e1:57:fa:70:9b:43:d5:8a:d2:3a:14: 32:c1:4b:5e:53:d5:65:49:92:22:25:71:1d:b6:06:89:db:04: 7c:c1:b0:75:76:cd:d5:f0:61:f0:e5:84:bf:e8:d2:86:56:53: 5c:69:ad:e9:a2:47:aa:9a:4c:2a:99:58:03:3c:1a:78:a7:40: d9:df:b9:3d:67:b1:51:e6:7f:2b:40:3b:88:49:4f:15:49:3d: 59:55:f2:32:77:af:a6:c5:49:cf:f2:3f:d9:f4:a2:aa:16:82: b1:5c:7a:dd:c5:c4:71:17:48:ed:a1:6d:74:67:6c:06:e9:fc: bd:68:65:ee:f0:77:d0:bd:5a:fe:00:6f:d8:64:05:a9:5f:c8: 2e:b7:85:19:c3:76:20:1d:92:23:19:5c:43:53:55:c3:df:43: 54:e7:a3:d2:10:83:82:b0:f8:4e:bd:9c:64:99:65:ab:41:f7: 7c:96:fa:4f:e9:62:9e:7a:97:80:e3:41:f3:aa:ff:cb:48:ba: d9:9c:d2:78:99:e2:02:69:0a:4f:47:57:ab:39:9b:6d:ba:72: 7c:89:57:94:7b:42:82:fd:2d:10:19:f6:25:a9:73:c8:0b:23: 76:b6:20:a1:a7:36:38:b3:c0:80:ab:27:72:54:49:ab:e6:23: 39:2d:d6:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3wu8ZrVn6ttNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NzIxYjJlOTAtOGRmOS00ZmY5LWExNjgtZmJkMjA0MTFkZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgGzC5x9NNybGD9k3efHA/RLPN/Hn+I1WS3p Xte9JALnKCy1dAmbNMe+mlnVK4qVWel8GWmzqWo5MaG1WfuGw/n7Q2/EbBIX6XyR Nm7CQjJ6u/9sw1IDcbFFSTeQswhwJ/p9T7iMfgi5FMLwtAYcw3A9o+Vmn32R2U/e hv50KSAn3b1nMDc8kmoT1xNEQend9oRM3AqVw+VFD3Pzp4Jvc9D9hz8Q4OjWv9UQ EKivwm2K4yonXh7U9J+nchdwfnNmYvmS1IOekUopoJd0TNgFtOoG0RY+u5qAVKJo oFXTy66brxxPy0sND+a57OEK5ZmN/aedNg1pPN9EzfCF8M7hMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM4ZViJ4pB07Dg0bh7yvoqINwA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvNzJlZWM5MTItYWRlMS0z OTBkLTg0ZTYtMmExMDgxZTI3ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA6eKAk4qrhV/pwm0PVitI6FDLBS15T1WVJkiIlcR22BonbBHzBsHV2 zdXwYfDlhL/o0oZWU1xpremiR6qaTCqZWAM8GninQNnfuT1nsVHmfytAO4hJTxVJ PVlV8jJ3r6bFSc/yP9n0oqoWgrFcet3FxHEXSO2hbXRnbAbp/L1oZe7wd9C9Wv4A b9hkBalfyC63hRnDdiAdkiMZXENTVcPfQ1Tno9IQg4Kw+E69nGSZZatB93yW+k/p Yp56l4DjQfOq/8tIutmc0niZ4gJpCk9HV6s5m226cnyJV5R7QoL9LRAZ9iWpc8gL I3a2IKGnNjizwICrJ3JUSavmIzkt1oo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:59 2025 by rpki-client