$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa File: 1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa (raw, json) Hash identifier: LPxBA8HpR8dAWiW+NrU1OafRlBhCaQ2UWwDAS7Dxq08= Subject key identifier: C0:48:2D:80:FC:1B:50:07:31:7C:A4:60:B9:9F:AD:A5:87:0E:23:DD Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285849B14A05CA62079FE1FAB20E00 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11810 IP address blocks: 204.194.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:05:ca:62:07:9f:e1:fa:b2:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cdfa4a64-c0cd-4d60-afdf-590ef163f576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:a5:7d:87:6d:96:8e:1d:b9:c6:5e:26:98: c5:1f:72:ea:a5:66:cf:42:8c:9e:03:db:17:51:f2: 20:60:de:8e:81:ae:4c:7c:bd:74:6d:d9:d3:bf:9a: e6:1a:c5:b7:3b:33:77:23:09:2e:d4:96:b4:be:42: c6:db:ef:0d:6b:ba:c4:b8:18:42:82:c8:9f:61:1d: 26:e3:ed:d5:87:f8:a7:ab:01:a2:0c:87:1b:20:94: df:99:4b:e1:58:69:3f:75:30:64:16:26:f0:ef:3a: ec:1d:7a:7a:c2:ca:30:a2:62:c5:96:e1:9a:a6:95: 70:71:dc:5b:2a:c1:14:03:5d:3a:2d:ad:61:0c:93: 09:5b:b9:df:95:00:e8:bd:90:e7:3e:ac:22:08:ad: 98:5a:dd:9d:e2:aa:a1:2c:a7:d4:68:70:46:dc:59: 50:3e:d8:e6:27:e6:35:ca:56:0d:b6:7e:c4:50:fc: a0:52:e5:80:6b:b5:41:99:72:61:4f:14:62:72:ac: 94:42:41:eb:0b:89:a4:28:9a:7c:91:64:4e:89:6a: 4f:37:28:16:ca:bf:8b:96:04:e9:41:93:c0:92:92: 12:6c:fe:ae:b4:0e:14:b2:3b:a9:bd:7c:e2:29:fc: 8d:b8:65:67:74:2f:90:79:08:29:08:57:18:43:ea: 16:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:48:2D:80:FC:1B:50:07:31:7C:A4:60:B9:9F:AD:A5:87:0E:23:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/1cdb02e9-5dfa-39ce-9967-9ceddaeca78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:21:26:e8:1b:b2:9e:3a:ba:46:84:57:65:21:83:d7:be:5a: 91:40:c0:69:15:ac:61:c1:c6:b4:6b:45:e1:72:c3:34:79:97: 44:f6:97:d6:ef:1b:91:7b:d2:cb:70:27:3c:65:7d:8c:e1:ac: 1b:d2:9c:26:51:e6:17:2d:65:ad:56:e1:bf:68:1b:2b:79:03: 34:46:df:c2:6f:f2:c2:94:66:15:45:35:f3:09:2e:0a:47:49: 55:37:5b:81:f8:38:f9:46:f1:59:f3:a1:24:ea:83:84:2d:99: 5a:a7:0e:5d:06:2c:67:18:31:c6:5c:32:89:fd:e7:ff:75:59: 3b:4f:be:31:f0:ce:37:98:28:af:ad:f7:e6:3e:fa:85:86:21: 45:18:b2:72:ef:4e:88:8d:03:b1:5d:c1:98:ff:35:d7:d9:77: 5d:a3:45:89:32:4b:fc:6b:ca:bd:45:d1:32:a7:55:3c:dc:76: 60:57:bd:f6:4a:b8:cf:bf:d1:18:29:93:57:64:52:95:f2:1f: f3:ba:73:e7:d4:e1:61:c4:7e:36:d5:7a:35:1b:8b:ee:02:cd: 09:6f:a4:b1:de:c8:ef:15:0a:7e:24:93:48:79:fc:a1:49:0a: 51:c4:53:30:87:a1:f6:5f:2d:3c:11:57:80:40:63:d8:c8:59: 52:c4:d3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgXKYgef4fqyDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2RmYTRhNjQtYzBjZC00ZDYwLWFmZGYtNTkwZWYxNjNmNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRulfYdtlo4ducZeJpjFH3LqpWbPQoyeA9sX UfIgYN6Oga5MfL10bdnTv5rmGsW3OzN3Iwku1Ja0vkLG2+8Na7rEuBhCgsifYR0m 4+3Vh/inqwGiDIcbIJTfmUvhWGk/dTBkFibw7zrsHXp6wsowomLFluGappVwcdxb KsEUA106La1hDJMJW7nflQDovZDnPqwiCK2YWt2d4qqhLKfUaHBG3FlQPtjmJ+Y1 ylYNtn7EUPygUuWAa7VBmXJhTxRicqyUQkHrC4mkKJp8kWROiWpPNygWyr+LlgTp QZPAkpISbP6utA4UsjupvXziKfyNuGVndC+QeQgpCFcYQ+oWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBILYD8G1AHMXykYLmfraWHDiPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMWNkYjAyZTktNWRmYS0z OWNlLTk5NjctOWNlZGRhZWNhNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHshJugbsp46ukaEV2Uhg9e+WpFAwGkVrGHBxrRrReFywzR5l0T2l9bv G5F70stwJzxlfYzhrBvSnCZR5hctZa1W4b9oGyt5AzRG38Jv8sKUZhVFNfMJLgpH SVU3W4H4OPlG8VnzoSTqg4QtmVqnDl0GLGcYMcZcMon95/91WTtPvjHwzjeYKK+t 9+Y++oWGIUUYsnLvToiNA7FdwZj/NdfZd12jRYkyS/xryr1F0TKnVTzcdmBXvfZK uM+/0Rgpk1dkUpXyH/O6c+fU4WHEfjbVejUbi+4CzQlvpLHeyO8VCn4kk0h5/KFJ ClHEUzCHofZfLTwRV4BAY9jIWVLE0yo= -----END CERTIFICATE-----Generated at Mon May 12 01:35:34 2025 by rpki-client