$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa File: 2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa (raw, json) Hash identifier: /glD0O5EOXm+4qYqMdP5HPL/LljDcL5si2DibkzJ5rg= Subject key identifier: 21:BF:41:77:AC:D1:84:3A:F5:95:E1:67:A4:A1:08:EA:9C:8A:F5:36 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3A75F1FC2C83D264031E Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 12008 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3a:75:f1:fc:2c:83:d2:64:03:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=4ff3a68a-3a7e-40dc-bf32-7ea77c7e0bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:03:db:2f:48:44:07:1b:7b:f8:a2:f1:4d: 45:12:3e:ee:85:1a:e5:4a:a3:9f:e9:16:32:fe:f6: be:61:17:b3:5c:62:fb:9f:bf:e9:99:16:05:6d:37: 05:5a:c1:7b:c0:a6:46:2d:c6:29:2b:e5:22:fb:2d: d4:4d:e2:f3:03:69:38:f4:20:15:53:e1:91:b5:ec: 69:34:95:d3:fa:69:1e:a5:cf:d0:5c:a1:97:28:0c: c6:18:e9:cd:76:48:78:1e:56:13:88:0b:6a:b8:35: 5b:50:d4:93:70:85:bc:f8:0f:af:b3:a4:2b:88:5a: 88:d8:82:a3:e6:77:92:b8:f9:b4:df:54:6a:8f:0f: 5d:97:fb:d6:19:11:d8:ec:95:f8:14:13:d2:fe:d2: 37:6e:9c:46:fd:b8:f3:6b:38:dc:3d:ca:b3:18:a7: 86:0a:4f:b1:e8:5b:e0:7b:d7:ce:1a:09:e2:4b:e7: 71:e9:ca:61:51:b7:f1:f5:93:8c:1b:37:bb:09:ca: df:5e:00:3f:d0:1d:05:4c:6b:7d:cf:eb:b9:b8:37: 1b:6b:3e:9a:b0:5a:75:70:27:2d:25:02:c5:90:e6: c0:97:ac:d8:3a:95:31:15:9d:ee:25:95:42:3d:0b: 68:ff:fc:9e:dd:32:aa:3e:5c:07:cb:8f:fc:da:85: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:41:77:AC:D1:84:3A:F5:95:E1:67:A4:A1:08:EA:9C:8A:F5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f3:38:ef:7a:74:03:65:cb:f3:84:68:5d:10:bd:00:b7:bb: 6d:aa:c6:59:ca:4a:70:4a:b8:f1:8a:7f:8a:12:04:b0:c8:3f: 89:6d:18:c8:36:10:8a:d6:86:c1:64:e4:f2:49:32:ff:72:2e: 2d:23:fd:60:9e:65:97:30:b3:4a:6d:7c:0e:5c:39:31:e0:1b: 56:2b:05:ed:05:e8:85:d6:3d:94:92:6a:c7:0f:00:79:72:d7: f0:e8:47:d4:d7:f0:2a:90:34:cc:2d:b5:9e:fa:21:4d:b6:9e: 6e:e9:d2:a0:55:e8:60:30:d4:1c:6b:ff:94:bb:10:70:12:04: d9:91:51:f0:d6:f6:1c:5a:4e:50:8c:2b:49:49:dd:78:fc:74: fc:cc:78:86:83:7f:e6:5e:fe:ec:11:68:35:04:62:fc:6d:79: fb:a0:ab:ff:fb:33:03:24:6a:a0:b0:d0:b1:cb:10:aa:d7:37: c2:9a:7d:05:62:61:45:ee:d1:dc:37:3c:cc:4f:c7:ff:52:24: 3c:be:d9:ab:5a:8e:61:e2:84:ab:c4:53:6b:d6:2f:22:3e:d8: 55:06:75:5c:4c:2d:ff:6a:d2:80:38:a1:76:d6:d3:c8:02:db: 13:4a:45:37:5b:11:e1:a2:43:f7:4a:f5:63:52:33:c7:b5:07: 11:08:88:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzp18fwsg9JkAx4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGZmM2E2OGEtM2E3ZS00MGRjLWJmMzItN2VhNzdjN2UwYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ED2y9IRAcbe/ii8U1FEj7uhRrlSqOf6RYy /va+YRezXGL7n7/pmRYFbTcFWsF7wKZGLcYpK+Ui+y3UTeLzA2k49CAVU+GRtexp NJXT+mkepc/QXKGXKAzGGOnNdkh4HlYTiAtquDVbUNSTcIW8+A+vs6QriFqI2IKj 5neSuPm031Rqjw9dl/vWGRHY7JX4FBPS/tI3bpxG/bjzazjcPcqzGKeGCk+x6Fvg e9fOGgniS+dx6cphUbfx9ZOMGze7CcrfXgA/0B0FTGt9z+u5uDcbaz6asFp1cCct JQLFkObAl6zYOpUxFZ3uJZVCPQto//ye3TKqPlwHy4/82oXfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG/QXes0YQ69ZXhZ6ShCOqcivU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmFjOWQ3YWItOTY1Yy0z OWM3LThmYzktMTE0ODc3YjRkYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXzOO96dANly/OEaF0QvQC3u22qxlnKSnBKuPGKf4oSBLDIP4ltGMg2 EIrWhsFk5PJJMv9yLi0j/WCeZZcws0ptfA5cOTHgG1YrBe0F6IXWPZSSascPAHly 1/DoR9TX8CqQNMwttZ76IU22nm7p0qBV6GAw1Bxr/5S7EHASBNmRUfDW9hxaTlCM K0lJ3Xj8dPzMeIaDf+Ze/uwRaDUEYvxtefugq//7MwMkaqCw0LHLEKrXN8KafQVi YUXu0dw3PMxPx/9SJDy+2atajmHihKvEU2vWLyI+2FUGdVxMLf9q0oA4oXbW08gC 2xNKRTdbEeGiQ/dK9WNSM8e1BxEIiBI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:46 2025 by rpki-client