$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa File: 20a1ef9a-507c-32e7-a417-2c2460c4b459.roa (raw, json) Hash identifier: 8AmdWbkdH/yY1KO9sQ74ptmibQUJ3sUuFN/7t+CCL9M= Subject key identifier: D3:61:76:60:1A:2D:11:6F:E4:B1:4C:A9:FF:C4:FC:1A:6D:85:C7:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF603BF9645F6132979A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397223 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:60:3b:f9:64:5f:61:32:97:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0a043b2d-4ec4-4582-9cef-9815acc807d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:25:c6:3d:ae:88:85:2b:51:4b:2a:47:e4: cc:68:e7:f7:b0:ae:f1:a1:d6:2f:9e:43:1e:e2:c2: 60:68:7f:c9:e4:2d:bb:7d:c6:03:f2:f4:42:b4:82: 75:68:9d:36:3e:04:cc:e9:53:29:63:55:bc:50:16: 61:2a:9b:0c:b8:18:3f:e8:f5:ba:b6:d6:11:6c:80: 77:75:8e:95:0e:2a:d2:18:ec:7f:34:b1:d1:20:d2: 9e:13:da:36:f8:0d:03:ec:7e:e9:d9:07:04:3a:f1: 4f:85:bd:29:04:b5:a0:87:bf:c7:ff:bd:e8:66:a9: 9a:62:8e:0c:36:1c:9f:8e:7d:2e:2e:97:f1:34:4f: 79:e1:dd:41:89:39:3e:5b:11:c7:b9:c1:8c:d9:f3: 30:ed:cb:8e:4c:2b:9c:04:e0:18:83:be:76:ef:7c: 2b:84:2d:68:11:74:41:11:e2:1d:1f:93:75:b8:a1: 9f:50:23:77:20:e6:01:e4:e1:da:83:7c:82:af:e4: 10:47:5f:df:f3:b4:22:2f:6e:0c:d0:81:7f:2c:46: 84:1e:dd:0f:b6:28:51:c8:45:fc:8e:e1:c3:27:c4: 98:e2:7f:a8:25:5c:a9:36:d9:aa:ac:3a:39:61:0e: 71:9e:a3:c3:5c:09:b1:83:fb:08:dd:c7:f9:ab:d0: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:61:76:60:1A:2D:11:6F:E4:B1:4C:A9:FF:C4:FC:1A:6D:85:C7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fa:dd:f0:26:89:dc:4f:70:0e:40:e4:5e:66:91:2c:55:11: 15:38:f1:40:ea:68:de:7d:e6:d6:f2:c2:7a:29:be:de:69:9c: d1:bd:10:d1:f4:4e:14:e8:da:54:b1:2d:53:e8:1f:25:fa:54: 2b:c6:88:6c:59:19:aa:93:c3:9b:ec:a2:2c:12:18:32:14:6e: 8a:0e:8f:09:bf:51:da:71:20:92:b2:17:8c:65:7a:d4:ab:d2: 69:10:8a:57:48:c1:40:65:b2:ea:a2:6e:2f:fc:07:78:b8:fe: 7a:8f:a5:11:7a:07:26:91:9f:68:d2:6e:d9:16:3f:71:bc:bc: 27:2d:03:bd:4d:70:0e:ff:96:07:af:df:28:79:3a:3b:3b:5d: 90:68:8b:16:48:c6:f1:8c:76:aa:ea:16:b5:8f:89:e3:cb:47: 3d:55:ff:c9:62:4c:40:47:4f:1e:3b:87:3f:79:c2:df:89:4d: e6:02:4f:64:4e:36:88:b4:a0:c3:0f:87:fc:7e:88:67:10:a1: 37:09:5b:82:13:90:5a:06:33:d5:14:8d:f7:42:e1:b7:48:02: 94:5f:2c:7f:dc:9d:19:57:e7:cd:91:4b:d9:a2:c9:d4:9a:05: 63:ea:1b:7a:6e:61:87:1f:8e:18:d9:6b:12:54:15:b8:35:ae: 0a:95:4c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2A7+WRfYTKXmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGEwNDNiMmQtNGVjNC00NTgyLTljZWYtOTgxNWFjYzgwN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Ulxj2uiIUrUUsqR+TMaOf3sK7xodYvnkMe 4sJgaH/J5C27fcYD8vRCtIJ1aJ02PgTM6VMpY1W8UBZhKpsMuBg/6PW6ttYRbIB3 dY6VDirSGOx/NLHRINKeE9o2+A0D7H7p2QcEOvFPhb0pBLWgh7/H/73oZqmaYo4M Nhyfjn0uLpfxNE954d1BiTk+WxHHucGM2fMw7cuOTCucBOAYg75273wrhC1oEXRB EeIdH5N1uKGfUCN3IOYB5OHag3yCr+QQR1/f87QiL24M0IF/LEaEHt0PtihRyEX8 juHDJ8SY4n+oJVypNtmqrDo5YQ5xnqPDXAmxg/sI3cf5q9CtwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNhdmAaLRFv5LFMqf/E/Bpthcd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjBhMWVmOWEtNTA3Yy0z MmU3LWE0MTctMmMyNDYwYzRiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT63fAmidxPcA5A5F5mkSxVERU48UDqaN595tbywnopvt5pnNG9ENH0 ThTo2lSxLVPoHyX6VCvGiGxZGaqTw5vsoiwSGDIUbooOjwm/UdpxIJKyF4xletSr 0mkQildIwUBlsuqibi/8B3i4/nqPpRF6ByaRn2jSbtkWP3G8vCctA71NcA7/lgev 3yh5Ojs7XZBoixZIxvGMdqrqFrWPiePLRz1V/8liTEBHTx47hz95wt+JTeYCT2RO Noi0oMMPh/x+iGcQoTcJW4ITkFoGM9UUjfdC4bdIApRfLH/cnRlX582RS9miydSa BWPqG3puYYcfjhjZaxJUFbg1rgqVTDo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:09 2025 by rpki-client