$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15621b44-3e45-3785-86b7-f719cda82789.roa File: 15621b44-3e45-3785-86b7-f719cda82789.roa (raw, json) Hash identifier: cU/Gpen9FvpRCVdVKQeDZRksCxGhfEhJbMKWOayG8DM= Subject key identifier: AF:CA:E2:3E:B6:5E:E4:3C:89:81:42:54:D7:8A:A0:DC:CF:E0:A3:4D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A058F77CCD9CDAF3A1B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15621b44-3e45-3785-86b7-f719cda82789.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397239 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:05:8f:77:cc:d9:cd:af:3a:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=6d716521-04d5-4669-9fef-32ef10d09430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:8a:c9:10:54:2c:45:6a:f1:b3:03:b4:15: 75:54:fa:a8:58:2b:db:59:08:08:99:95:87:24:5f: 71:51:6b:7a:bf:8b:60:0d:e8:cf:c3:7c:5b:c7:94: 90:28:16:74:a5:1e:dd:4d:17:d4:82:eb:09:4a:b5: 46:96:05:01:4e:8c:29:2a:78:09:93:9f:51:70:c2: 2a:50:2f:2e:4c:c9:c5:1e:13:92:47:c8:9d:be:d7: b5:17:e7:9e:84:e5:ed:16:95:18:2a:b7:bd:7a:ef: 32:1c:d4:38:18:ac:ef:65:6b:21:7d:6b:3c:c0:45: 60:f0:d2:6b:ac:7e:7b:84:cf:d1:ff:af:29:98:62: 0c:93:11:c5:cf:c4:4b:56:4c:18:2c:b5:32:17:6b: 37:9a:0d:73:f2:30:f4:53:34:c8:c4:31:23:53:88: c8:40:86:3e:dc:49:43:68:2c:48:34:b9:86:de:be: e6:e2:80:85:0f:93:00:e6:30:53:cc:31:86:e3:d3: 8e:99:6a:c9:63:5d:47:3b:f7:d1:2f:85:0c:c4:1a: 7b:18:68:83:f6:20:d8:95:a2:98:6d:71:c8:c6:53: 39:61:f4:2e:5a:6f:1b:b0:5b:d4:c0:70:41:7f:a2: d3:36:34:1c:83:10:67:c4:73:9e:08:77:25:3b:96: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:E2:3E:B6:5E:E4:3C:89:81:42:54:D7:8A:A0:DC:CF:E0:A3:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15621b44-3e45-3785-86b7-f719cda82789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:60:20:0a:47:c1:ad:9a:f2:0a:9e:e0:e7:2b:3a:2f:eb:60: 6b:9d:42:b3:70:cd:b1:aa:b3:68:e1:20:fa:2e:28:80:a4:e7: 03:1a:25:cf:c1:53:8a:1d:42:d1:ab:0c:07:45:ac:86:3a:d0: b6:9a:99:b1:8c:35:75:66:9d:4b:85:5b:79:cc:2b:f9:4b:dc: 87:17:aa:7c:49:fd:e5:13:1d:9d:17:16:c4:05:8b:e5:5c:e8: 15:43:8d:3b:94:c2:47:7f:e1:bd:f4:6c:5d:c9:a6:73:b5:54: 25:2a:8e:39:7b:15:eb:4b:95:74:98:16:97:ef:9a:ef:b8:c4: 32:45:78:4c:38:47:c4:e8:d6:ad:97:4c:e2:52:b1:8e:2e:b2: b4:94:30:07:d2:60:81:47:fc:99:93:10:76:b4:13:57:88:b6: ba:4f:42:fb:e2:00:8f:7c:17:9e:21:c9:38:91:5b:28:83:7c: 1a:56:24:c0:47:b0:d6:80:c0:bb:61:e5:de:3d:ce:e2:d5:8c: ea:20:53:35:76:79:56:04:31:75:d8:7b:c9:18:c5:f6:b4:ac: 85:7d:67:30:65:dc:24:c2:38:ac:bc:92:8b:41:b0:3f:ae:09: f0:84:3b:42:70:73:7d:75:cd:0e:80:b0:bf:d9:ff:93:dc:f8: 50:5e:b4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgWPd8zZza86G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NmQ3MTY1MjEtMDRkNS00NjY5LTlmZWYtMzJlZjEwZDA5NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohWKyRBULEVq8bMDtBV1VPqoWCvbWQgImZWH JF9xUWt6v4tgDejPw3xbx5SQKBZ0pR7dTRfUgusJSrVGlgUBTowpKngJk59RcMIq UC8uTMnFHhOSR8idvte1F+eehOXtFpUYKre9eu8yHNQ4GKzvZWshfWs8wEVg8NJr rH57hM/R/68pmGIMkxHFz8RLVkwYLLUyF2s3mg1z8jD0UzTIxDEjU4jIQIY+3ElD aCxINLmG3r7m4oCFD5MA5jBTzDGG49OOmWrJY11HO/fRL4UMxBp7GGiD9iDYlaKY bXHIxlM5YfQuWm8bsFvUwHBBf6LTNjQcgxBnxHOeCHclO5YJsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/K4j62XuQ8iYFCVNeKoNzP4KNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTU2MjFiNDQtM2U0NS0z Nzg1LTg2YjctZjcxOWNkYTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZgIApHwa2a8gqe4OcrOi/rYGudQrNwzbGqs2jhIPouKICk5wMaJc/B U4odQtGrDAdFrIY60LaambGMNXVmnUuFW3nMK/lL3IcXqnxJ/eUTHZ0XFsQFi+Vc 6BVDjTuUwkd/4b30bF3JpnO1VCUqjjl7FetLlXSYFpfvmu+4xDJFeEw4R8To1q2X TOJSsY4usrSUMAfSYIFH/JmTEHa0E1eItrpPQvviAI98F54hyTiRWyiDfBpWJMBH sNaAwLth5d49zuLVjOogUzV2eVYEMXXYe8kYxfa0rIV9ZzBl3CTCOKy8kotBsD+u CfCEO0Jwc311zQ6AsL/Z/5Pc+FBetEg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:09 2025 by rpki-client