$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa File: 14e13490-7b59-32da-be38-c9fcf408a3e2.roa (raw, json) Hash identifier: kBZH/MaCg0hGhOyRPBMCNfFhHUANvsmHcUzgr4zUzmg= Subject key identifier: 86:A6:22:97:D8:61:70:47:4C:1B:9A:78:5A:49:39:55:A9:62:3C:44 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A108105F3A62E6D44FD80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397231 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:10:81:05:f3:a6:2e:6d:44:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=a959ba73-a288-426f-ab21-6cf7abd64941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:a6:a9:54:c3:f7:12:61:48:36:ac:62:bc: c0:56:91:0c:5f:0e:03:52:72:4c:94:bd:ad:11:c2: 8d:a1:06:90:fc:db:92:f3:b5:7b:3f:57:a9:2d:60: 29:96:44:e8:cc:c8:f3:ca:50:2d:8e:b7:8b:78:7e: 87:01:79:9d:74:96:8e:e0:08:76:dd:13:c0:75:51: 45:71:bd:65:f0:04:e1:e6:6d:5f:45:af:0a:8e:c4: e2:d2:96:b3:2f:a6:86:08:9c:5b:bc:cc:94:46:ae: d3:c6:5b:03:fa:d8:97:26:0e:68:38:c8:57:b5:b8: b9:1a:67:40:6c:00:2b:f5:d7:ea:f1:18:1f:70:0e: 43:0f:79:7f:64:86:4c:40:26:0a:ed:d5:1c:9e:64: f6:d2:21:be:b5:8a:72:86:b1:8b:ac:e7:7f:69:75: 8c:5c:07:ff:32:91:95:56:37:d6:b0:a0:84:97:48: b6:14:a5:15:73:16:1f:07:2d:b1:44:8d:a3:a8:a2: 4a:43:40:ab:cf:dc:f4:38:76:4b:ed:23:45:1b:64: 85:e3:20:57:c2:e5:59:ee:1b:c0:22:e1:ad:d5:8a: ee:49:49:63:dd:ce:79:50:05:1a:99:ff:bd:89:c6: fb:e9:71:7d:0c:f4:72:f8:1f:56:ee:c1:b9:ea:9e: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:22:97:D8:61:70:47:4C:1B:9A:78:5A:49:39:55:A9:62:3C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6e:3e:98:2f:82:9f:e9:7e:11:82:2c:55:77:21:8a:d4:61: 6d:59:43:66:e8:16:d4:33:79:4f:b4:4c:51:9c:c8:ba:c4:b9: 47:a7:20:c9:56:d0:36:35:4e:65:d7:ab:25:74:1d:63:bb:e5: 1f:d8:d4:3f:66:10:97:46:0b:27:56:22:58:04:a5:5d:53:a2: cf:78:3c:db:5c:27:05:38:df:b0:7b:04:fe:e4:26:09:09:e7: 14:5f:75:49:26:a1:0f:80:f1:60:b5:64:2a:8e:cb:95:08:3b: 7f:26:91:34:0a:33:0c:0b:b4:87:8d:95:21:e8:ec:5b:4c:cf: e0:04:af:6d:ad:7f:0e:14:f3:27:9a:5a:9c:07:17:15:08:a1: 19:ba:81:56:e2:27:36:3c:14:8d:eb:ca:61:33:0c:37:f6:c3: 50:e3:34:8d:0b:94:a2:d0:60:d7:b2:c6:d9:1e:38:74:d7:7a: 22:5e:b3:9c:cd:f6:f9:c1:b1:60:47:3a:f2:ce:4a:88:d2:3a: 34:03:f7:43:95:24:cf:82:5b:60:81:e2:c2:40:c6:39:5e:fc: d8:8e:39:0f:1c:49:ea:dd:7c:c5:67:e6:2d:24:d4:13:ff:1f: f9:95:47:6a:1c:35:da:ad:67:4e:82:2b:72:bc:bb:41:73:94: ca:c2:a2:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhCBBfOmLm1E/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YTk1OWJhNzMtYTI4OC00MjZmLWFiMjEtNmNmN2FiZDY0OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtICmqVTD9xJhSDasYrzAVpEMXw4DUnJMlL2t EcKNoQaQ/NuS87V7P1epLWAplkTozMjzylAtjreLeH6HAXmddJaO4Ah23RPAdVFF cb1l8ATh5m1fRa8KjsTi0pazL6aGCJxbvMyURq7TxlsD+tiXJg5oOMhXtbi5GmdA bAAr9dfq8RgfcA5DD3l/ZIZMQCYK7dUcnmT20iG+tYpyhrGLrOd/aXWMXAf/MpGV VjfWsKCEl0i2FKUVcxYfBy2xRI2jqKJKQ0Crz9z0OHZL7SNFG2SF4yBXwuVZ7hvA IuGt1YruSUlj3c55UAUamf+9icb76XF9DPRy+B9W7sG56p4VqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIamIpfYYXBHTBuaeFpJOVWpYjxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTRlMTM0OTAtN2I1OS0z MmRhLWJlMzgtYzlmY2Y0MDhhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZuPpgvgp/pfhGCLFV3IYrUYW1ZQ2boFtQzeU+0TFGcyLrEuUenIMlW 0DY1TmXXqyV0HWO75R/Y1D9mEJdGCydWIlgEpV1Tos94PNtcJwU437B7BP7kJgkJ 5xRfdUkmoQ+A8WC1ZCqOy5UIO38mkTQKMwwLtIeNlSHo7FtMz+AEr22tfw4U8yea WpwHFxUIoRm6gVbiJzY8FI3rymEzDDf2w1DjNI0LlKLQYNeyxtkeOHTXeiJes5zN 9vnBsWBHOvLOSojSOjQD90OVJM+CW2CB4sJAxjle/NiOOQ8cSerdfMVn5i0k1BP/ H/mVR2ocNdqtZ06CK3K8u0FzlMrCop4= -----END CERTIFICATE-----Generated at Sun Apr 27 23:59:51 2025 by rpki-client