$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa File: 2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa (raw, json) Hash identifier: rs2w6EB/1go/MipSBKxJ9eCzEFk0KEdZNKyVRjZIdWI= Subject key identifier: F7:48:05:BE:56:96:66:4E:F6:FC:92:79:EE:25:A3:37:95:03:61:6B Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285849B14A05D9892E093C41CAF880 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11810 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:05:d9:89:2e:09:3c:41:ca:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bc4b45a5-0f05-44c3-8183-82a3ed29788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:32:6e:47:e8:1b:12:7e:04:fb:0c:7a:21: 93:60:5c:ee:4e:da:dc:11:c3:49:5b:4d:38:3b:43: 1f:58:bb:03:33:9f:6a:54:ba:d3:48:b0:01:83:10: 94:41:d3:42:55:c1:e2:6a:97:b4:e9:54:1b:65:c1: 18:2a:74:57:54:7e:b0:75:0c:d8:9c:66:85:c5:fc: 5f:a2:82:71:a7:46:1d:a9:ed:c2:3f:be:bc:cb:77: a8:42:d5:92:5a:9e:69:4f:4b:4b:f1:95:3c:80:3b: 47:4f:fe:df:97:d9:e8:a8:36:10:07:46:e1:06:ab: 86:3e:f2:0c:f5:cd:1c:f5:30:06:57:5a:d5:59:c7: 6c:36:10:e7:c0:9b:15:e1:a3:be:5a:7d:c9:66:0a: 48:67:c7:d3:12:9c:ab:c0:e3:a1:ae:4d:99:7d:bd: 6f:d8:f8:23:88:99:b1:58:16:1b:e6:ee:41:3f:2e: 4e:ee:6a:5b:c7:d9:9d:ca:12:25:8b:37:ee:86:79: c0:f2:a7:d4:4d:18:ec:99:12:19:78:64:f4:53:a3: b4:57:f3:80:37:f8:1b:2f:d3:fa:4a:0e:73:47:c7: 87:2c:17:e7:0b:8a:89:b6:41:f7:cd:bb:81:e3:c9: 7a:29:c8:27:7c:38:8b:ef:9c:f8:61:a6:d1:56:65: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:48:05:BE:56:96:66:4E:F6:FC:92:79:EE:25:A3:37:95:03:61:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b1:ff:44:d8:c1:f6:bb:21:1c:ea:2d:f4:67:06:e6:e5:92: c8:e7:59:0e:53:f4:ba:05:71:20:fa:d2:a7:e5:a9:32:26:b9: 7c:c9:6d:78:f9:2c:1a:77:f0:27:0f:ca:59:f5:4a:46:23:af: 2c:a8:fe:a1:45:e4:e3:11:ae:1d:df:35:51:6a:3f:62:eb:a3: aa:9e:9a:e5:41:88:26:3e:b6:8d:70:d8:27:78:22:65:87:1f: 05:7b:27:22:7d:84:1b:ee:a7:51:ff:13:f1:4e:ab:3f:74:39: 48:81:4d:22:d8:d2:2d:56:c3:e4:83:bb:86:28:d5:a1:0e:86: 8c:92:0b:fd:bf:c9:10:59:94:e4:d0:42:e8:ac:55:a3:0f:82: 49:38:11:07:73:7e:52:6c:93:56:9c:64:a8:65:3a:dc:c4:3f: 45:79:a6:10:27:dc:bf:44:30:67:f3:d1:17:cb:c3:47:ca:45: 05:bc:ad:69:55:9d:0f:9e:8b:15:da:94:4f:ca:c8:0b:85:1a: 10:6d:3f:f0:3e:0f:1c:59:59:17:d3:16:95:00:a1:4f:24:28: 2e:25:a2:25:b7:6b:21:1e:f5:1c:4f:28:b0:56:e9:55:97:26: cd:8f:7b:40:49:c1:ca:ef:24:2c:7d:c4:9a:05:3e:25:36:51: 9d:5d:e0:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgXZiS4JPEHK+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmM0YjQ1YTUtMGYwNS00NGMzLTgxODMtODJhM2VkMjk3ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsUybkfoGxJ+BPsMeiGTYFzuTtrcEcNJW004 O0MfWLsDM59qVLrTSLABgxCUQdNCVcHiape06VQbZcEYKnRXVH6wdQzYnGaFxfxf ooJxp0Ydqe3CP768y3eoQtWSWp5pT0tL8ZU8gDtHT/7fl9noqDYQB0bhBquGPvIM 9c0c9TAGV1rVWcdsNhDnwJsV4aO+Wn3JZgpIZ8fTEpyrwOOhrk2Zfb1v2PgjiJmx WBYb5u5BPy5O7mpbx9mdyhIlizfuhnnA8qfUTRjsmRIZeGT0U6O0V/OAN/gbL9P6 Sg5zR8eHLBfnC4qJtkH3zbuB48l6KcgnfDiL75z4YabRVmVPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdIBb5WlmZO9vySee4lozeVA2FrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMmExYzU3YjctMjI3MS0z ZTAwLTllNzktYmQ3OTcyMTBkNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWx/0TYwfa7IRzqLfRnBublksjnWQ5T9LoFcSD60qflqTImuXzJbXj5 LBp38CcPyln1SkYjryyo/qFF5OMRrh3fNVFqP2Lro6qemuVBiCY+to1w2Cd4ImWH HwV7JyJ9hBvup1H/E/FOqz90OUiBTSLY0i1Ww+SDu4Yo1aEOhoySC/2/yRBZlOTQ QuisVaMPgkk4EQdzflJsk1acZKhlOtzEP0V5phAn3L9EMGfz0RfLw0fKRQW8rWlV nQ+eixXalE/KyAuFGhBtP/A+DxxZWRfTFpUAoU8kKC4loiW3ayEe9RxPKLBW6VWX Js2Pe0BJwcrvJCx9xJoFPiU2UZ1d4F4= -----END CERTIFICATE-----Generated at Mon May 12 03:29:07 2025 by rpki-client