$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa File: 39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json) Hash identifier: ackLbNmO/gOO8jY2O+uPEMwOp8Bw4WF7EHb6l5Euw+c= Subject key identifier: B9:42:AC:5F:C3:82:D3:49:75:43:57:A7:3C:9A:D2:3A:07:B8:23:68 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285849B14A05F8F86E5612A04B6A40 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:05:f8:f8:6e:56:12:a0:4b:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=887f1597-8c31-4bd5-bef4-380a6b070fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:c0:1e:d2:7c:6f:ff:4c:75:a4:ff:1d:aa: 9c:56:29:07:f0:d2:db:e7:92:e5:ae:5f:13:b5:5a: f8:8d:50:a0:0a:13:2f:87:cb:72:fe:33:4e:31:98: 4b:e7:2f:6f:6c:22:2b:fa:8b:b1:42:95:6c:0e:13: 24:75:2c:f7:91:db:94:3e:5b:7f:57:08:ee:f5:a7: 1e:0b:65:5c:33:29:d5:c3:9d:76:d1:c0:fd:11:8d: ba:cb:9e:9d:0f:df:98:c7:aa:39:4d:69:9a:14:b5: 01:42:81:d8:67:b2:9e:ad:77:a5:ba:62:6c:79:6a: 91:96:a0:a0:a5:f1:12:d8:8c:be:23:e9:a1:2f:79: 55:29:3a:f1:8f:97:14:56:6f:23:27:ca:79:57:2a: 46:51:96:49:a5:da:f6:8f:5f:3d:ed:bb:c3:6e:41: 2c:b8:64:7c:94:7b:37:39:e0:ee:77:22:be:a4:d0: 0b:f5:96:36:12:a1:e9:46:6c:9e:90:c7:cd:ea:cf: 60:bb:5b:3f:e7:77:c0:99:0f:9b:8a:31:5d:cc:bf: 61:4c:72:c3:ee:8f:ef:10:b9:ab:a3:eb:38:f7:01: 55:fa:f5:50:d9:8b:f4:5a:56:85:2c:35:28:6a:a1: 02:87:c8:71:07:3c:b3:a6:6b:7c:a1:cc:bc:4f:4b: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:42:AC:5F:C3:82:D3:49:75:43:57:A7:3C:9A:D2:3A:07:B8:23:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9e:52:4a:ec:fb:af:3a:d0:83:a8:29:69:b5:e6:ef:2f:c2: 81:15:c2:e3:43:47:87:74:07:76:c6:a2:98:ae:49:e9:b5:1f: fd:8a:55:78:3c:87:6c:bc:b6:6d:20:55:56:f3:91:dc:15:2b: 4e:05:6f:f1:ca:af:d0:cd:4c:9c:4c:ec:16:ec:15:95:66:b8: aa:1f:68:a4:ce:3c:1d:32:5c:77:55:f5:bb:f0:9f:4c:3d:c9: 4b:de:bd:7c:a5:a9:07:c7:f6:12:70:7b:15:87:5f:b2:e7:f8: 97:4a:74:a3:4a:4d:23:ae:db:90:75:aa:f8:25:09:2e:c3:b9: 2e:b4:fa:b8:f7:e9:14:4a:9f:06:c6:cb:89:0f:14:b0:2e:be: 34:9d:29:90:69:dc:7a:67:9e:5c:a1:25:bc:57:81:8d:9a:d2: 9e:a8:e8:be:df:5f:e8:f1:f5:ac:ff:7f:ec:74:fc:22:51:ec: 0f:04:10:2b:f5:96:e1:73:da:cd:9d:7e:c1:10:c6:eb:67:c5: 4a:d4:f5:05:7e:a6:ea:35:26:ab:05:f4:0e:ba:f8:d5:ad:8d: e1:47:c6:cc:39:0a:37:2a:01:10:cc:6b:25:a5:fa:9c:6f:5e: 91:9c:d8:80:b2:a8:e6:e2:ca:6b:12:40:d9:14:a5:c1:c5:31: bb:66:78:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgX4+G5WEqBLakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODg3ZjE1OTctOGMzMS00YmQ1LWJlZjQtMzgwYTZiMDcwZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxbAHtJ8b/9MdaT/HaqcVikH8NLb55Llrl8T tVr4jVCgChMvh8ty/jNOMZhL5y9vbCIr+ouxQpVsDhMkdSz3kduUPlt/Vwju9ace C2VcMynVw5120cD9EY26y56dD9+Yx6o5TWmaFLUBQoHYZ7KerXelumJseWqRlqCg pfES2Iy+I+mhL3lVKTrxj5cUVm8jJ8p5VypGUZZJpdr2j1897bvDbkEsuGR8lHs3 OeDudyK+pNAL9ZY2EqHpRmyekMfN6s9gu1s/53fAmQ+bijFdzL9hTHLD7o/vELmr o+s49wFV+vVQ2Yv0WlaFLDUoaqECh8hxBzyzpmt8ocy8T0tvqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlCrF/DgtNJdUNXpzya0joHuCNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMzlhMDczOGQtYmQ4MS0z ZGM0LWJhZGEtMDA3Nzc5YmZiM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICeUkrs+6860IOoKWm15u8vwoEVwuNDR4d0B3bGopiuSem1H/2KVXg8 h2y8tm0gVVbzkdwVK04Fb/HKr9DNTJxM7BbsFZVmuKofaKTOPB0yXHdV9bvwn0w9 yUvevXylqQfH9hJwexWHX7Ln+JdKdKNKTSOu25B1qvglCS7DuS60+rj36RRKnwbG y4kPFLAuvjSdKZBp3HpnnlyhJbxXgY2a0p6o6L7fX+jx9az/f+x0/CJR7A8EECv1 luFz2s2dfsEQxutnxUrU9QV+puo1JqsF9A66+NWtjeFHxsw5CjcqARDMayWl+pxv XpGc2ICyqObiymsSQNkUpcHFMbtmeBk= -----END CERTIFICATE-----Generated at Sun May 11 04:09:39 2025 by rpki-client