$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa File: 18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa (raw, json) Hash identifier: ZaB+44lObwj6G/cno7UU/Ve5pEEZRueAhS1VhzRnsoA= Subject key identifier: 85:74:A1:58:C5:4A:E4:38:B6:17:AD:34:A7:90:5B:40:88:66:CA:9F Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F43285849ED4FCEBC0EAF48B8F4EBAC00 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 20398 IP address blocks: 167.206.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:ce:bc:0e:af:48:b8:f4:eb:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=3ad61b28-ab5c-4b6a-9535-e0b1bf304368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:30:5b:6d:45:ed:f0:9a:7c:4f:36:5e:7e: 0b:14:ac:f4:42:92:91:56:ee:fa:69:58:8b:e9:cc: f2:c4:68:5d:97:f6:52:a5:c9:30:76:0f:db:9c:46: 0b:51:31:22:50:f3:c8:43:fa:a3:ac:17:02:50:15: 3a:41:87:11:cf:9a:a2:f6:ca:69:b0:82:29:13:05: 70:d8:5a:b6:8b:c2:a0:4d:c7:46:03:14:c1:79:39: ef:2a:96:8e:a2:c1:af:48:a4:de:8a:96:c0:49:9a: 34:2e:d4:d6:52:09:4f:8f:f6:f6:95:bf:06:a3:0e: 7e:b6:c4:83:a8:1a:19:c2:61:5e:99:43:a5:30:a9: 31:b7:d2:77:c0:19:b9:a9:75:6a:cf:f6:2f:9b:28: ae:ca:73:3e:fa:83:cc:01:46:6c:35:16:d4:9b:61: 87:45:86:0b:5e:7e:9a:20:20:e3:fb:6a:50:a5:5b: 34:b3:25:c8:53:70:20:ee:b6:7d:0d:d9:ee:9d:b5: e5:3f:ff:6c:73:ae:4a:db:97:33:d2:5c:c5:49:e5: 73:00:52:ce:ee:25:e6:54:ad:de:c7:38:89:b0:43: 3e:ca:a3:a8:ab:05:37:7d:06:a1:90:98:f2:ae:fe: 64:e4:ee:0b:9f:87:61:63:23:1b:6a:f2:e1:81:ed: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:74:A1:58:C5:4A:E4:38:B6:17:AD:34:A7:90:5B:40:88:66:CA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a1:b5:3e:bb:cf:7f:64:91:31:9a:2d:eb:07:df:95:ba:e3: cd:d1:31:0b:33:7d:7f:40:51:98:fa:f7:54:87:7d:a6:31:2b: bd:41:68:02:5d:45:b9:c2:63:a2:34:a6:e0:26:34:bd:35:fd: 17:19:52:d4:20:b1:38:ba:bb:a7:33:93:cc:7f:db:da:63:09: 72:70:78:3c:b0:38:6f:48:07:23:31:cb:7f:8e:87:41:28:bb: 13:de:92:72:c3:a6:f3:6c:e1:94:06:77:92:b9:cc:57:44:4a: b7:a8:46:67:87:1d:7e:6c:7c:8e:45:5a:a1:c9:d1:17:32:51: ee:c1:a0:80:92:d9:19:7c:f3:c4:21:77:41:1a:a3:98:78:24: 2b:19:ab:91:ea:1b:98:55:60:a8:2d:e5:ec:9a:93:4d:e4:cd: 6b:8b:73:b3:34:0f:90:25:0b:70:fd:24:f3:73:58:a9:00:be: cd:70:c0:85:ee:8f:71:f3:3f:b9:4d:cb:b3:8b:cb:64:12:17: 52:96:a9:ba:4b:e6:3c:fa:6b:9b:21:a3:0f:7c:c6:ae:c7:ec: 9e:5e:b5:9d:c8:b9:a4:d2:5b:19:87:b9:b6:50:00:7c:27:39: f6:9c:80:3e:d8:bb:9b:cd:c4:60:3f:6b:d5:b8:10:72:74:3a: 30:62:b1:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT868Dq9IuPTrrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk M2FkNjFiMjgtYWI1Yy00YjZhLTk1MzUtZTBiMWJmMzA0MzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcwW21F7fCafE82Xn4LFKz0QpKRVu76aViL 6czyxGhdl/ZSpckwdg/bnEYLUTEiUPPIQ/qjrBcCUBU6QYcRz5qi9sppsIIpEwVw 2Fq2i8KgTcdGAxTBeTnvKpaOosGvSKTeipbASZo0LtTWUglPj/b2lb8Gow5+tsSD qBoZwmFemUOlMKkxt9J3wBm5qXVqz/YvmyiuynM++oPMAUZsNRbUm2GHRYYLXn6a ICDj+2pQpVs0syXIU3Ag7rZ9DdnunbXlP/9sc65K25cz0lzFSeVzAFLO7iXmVK3e xziJsEM+yqOoqwU3fQahkJjyrv5k5O4Ln4dhYyMbavLhge0YjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIV0oVjFSuQ4thetNKeQW0CIZsqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMThhYjQyYjMtYTY5ZS0z ZjBjLWEwNzEtNzkyM2JkMzllNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp85WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqhtT67z39kkTGaLesH35W6483RMQszfX9AUZj691SHfaYxK71BaAJd RbnCY6I0puAmNL01/RcZUtQgsTi6u6czk8x/29pjCXJweDywOG9IByMxy3+Oh0Eo uxPeknLDpvNs4ZQGd5K5zFdESreoRmeHHX5sfI5FWqHJ0RcyUe7BoICS2Rl888Qh d0Eao5h4JCsZq5HqG5hVYKgt5eyak03kzWuLc7M0D5AlC3D9JPNzWKkAvs1wwIXu j3HzP7lNy7OLy2QSF1KWqbpL5jz6a5show98xq7H7J5etZ3IuaTSWxmHubZQAHwn OfacgD7Yu5vNxGA/a9W4EHJ0OjBisYg= -----END CERTIFICATE-----Generated at Fri Jun 6 03:12:25 2025 by rpki-client