$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa File: 2bd20e07-9af0-35ca-a017-e2516bba252a.roa (raw, json) Hash identifier: +xbFXRxG8cRqA4wRTAkRddEHZ4lgSdQKj9a15+mus10= Subject key identifier: 50:8A:3F:87:91:16:DA:91:59:48:3A:A9:C3:F6:33:B3:41:98:58:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0348B092495CFA3A2E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397230 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:03:48:b0:92:49:5c:fa:3a:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=558b50ef-2fcf-4647-b184-a757f69ae858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:19:48:68:d5:15:30:64:71:9e:94:11:83: 2f:91:a1:74:e1:a8:d4:dc:ec:fc:d6:2b:06:fa:57: b3:da:7c:a5:71:bf:2e:d3:50:3b:be:19:a2:04:fe: 63:13:25:16:b1:b1:e7:31:96:b8:0a:d0:fb:78:77: 4a:51:f0:9f:27:5c:b0:a5:3f:44:ba:6d:49:00:35: ab:71:4e:7b:fb:7e:4b:7c:f9:61:24:af:16:0c:73: 64:05:3c:48:a9:09:e6:60:0b:9c:ca:81:1f:c4:7c: 0a:e1:fc:d2:4e:aa:8c:d4:21:58:60:ef:ec:c6:f3: 4f:c0:59:42:33:bb:a9:c1:b7:73:b1:7e:cc:81:53: f5:ef:4e:a4:eb:b7:35:f9:19:83:7b:eb:5c:58:44: 5b:81:43:e8:2e:90:ac:ec:50:cd:0d:cc:9f:dd:c4: 36:05:49:e2:21:37:a7:07:f7:f0:8c:ce:8d:08:6a: 1c:61:0a:ed:09:c4:21:28:03:1a:b7:51:c8:e1:36: 00:97:3a:27:04:d6:d4:59:c5:26:46:38:f0:07:f6: ad:39:e8:4e:ae:07:72:c2:65:7b:af:13:7e:3e:26: 16:9d:2c:b6:17:73:05:35:3a:8d:4b:6b:a2:c1:07: 92:c0:d1:d2:c8:7a:52:93:26:32:a6:d7:cc:b5:e7: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:3F:87:91:16:DA:91:59:48:3A:A9:C3:F6:33:B3:41:98:58:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:b8:fc:31:6b:39:74:89:8a:88:be:09:26:e1:1a:d8:3b: a7:56:66:6a:42:36:95:d7:24:29:61:d6:95:37:ca:1e:63:e4: bc:b6:07:77:1a:58:c6:ab:4b:e0:22:2e:7f:b4:62:a5:e1:6a: 4b:50:65:e1:6b:cf:13:24:32:20:e3:6a:fd:aa:f4:eb:cb:42: 44:ae:aa:db:27:16:00:7c:6f:f3:9c:b2:f1:12:6a:ae:aa:96: 06:49:13:cc:6d:24:d7:49:68:5a:bd:0c:ce:5a:6f:11:0f:fc: 36:b9:0f:6d:6f:eb:70:2d:16:8c:cd:e3:68:77:87:21:e9:05: b3:93:8a:08:be:64:aa:90:d2:0b:cd:5d:e0:0e:5a:13:7e:87: 88:ba:b2:a1:1e:e5:f4:42:2a:48:a5:7e:5b:b2:70:a1:56:5f: 04:2d:23:fa:2f:61:f2:69:ca:15:4b:f4:68:5d:52:a7:09:e6: 19:ec:6d:7e:c3:7a:33:9f:b9:83:02:c6:a8:ae:69:db:97:76: 89:30:b6:15:09:22:8e:2f:8e:f7:e1:05:e8:f5:bd:a0:bd:15: 1f:ec:59:c4:3a:3a:56:b7:9f:e3:bf:62:7e:c4:32:66:c0:40: 5d:62:c6:5f:42:bf:db:14:b3:13:4b:ee:a9:45:1e:70:b0:0d: 93:5d:64:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgNIsJJJXPo6LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NTU4YjUwZWYtMmZjZi00NjQ3LWIxODQtYTc1N2Y2OWFlODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8oZSGjVFTBkcZ6UEYMvkaF04ajU3Oz81isG +lez2nylcb8u01A7vhmiBP5jEyUWsbHnMZa4CtD7eHdKUfCfJ1ywpT9Eum1JADWr cU57+35LfPlhJK8WDHNkBTxIqQnmYAucyoEfxHwK4fzSTqqM1CFYYO/sxvNPwFlC M7upwbdzsX7MgVP1706k67c1+RmDe+tcWERbgUPoLpCs7FDNDcyf3cQ2BUniITen B/fwjM6NCGocYQrtCcQhKAMat1HI4TYAlzonBNbUWcUmRjjwB/atOehOrgdywmV7 rxN+PiYWnSy2F3MFNTqNS2uiwQeSwNHSyHpSkyYyptfMtec+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCKP4eRFtqRWUg6qcP2M7NBmFidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJkMjBlMDctOWFmMC0z NWNhLWEwMTctZTI1MTZiYmEyNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElruPwxazl0iYqIvgkm4RrYO6dWZmpCNpXXJClh1pU3yh5j5Ly2B3ca WMarS+AiLn+0YqXhaktQZeFrzxMkMiDjav2q9OvLQkSuqtsnFgB8b/OcsvESaq6q lgZJE8xtJNdJaFq9DM5abxEP/Da5D21v63AtFozN42h3hyHpBbOTigi+ZKqQ0gvN XeAOWhN+h4i6sqEe5fRCKkilfluycKFWXwQtI/ovYfJpyhVL9GhdUqcJ5hnsbX7D ejOfuYMCxqiuaduXdokwthUJIo4vjvfhBej1vaC9FR/sWcQ6Ola3n+O/Yn7EMmbA QF1ixl9Cv9sUsxNL7qlFHnCwDZNdZAc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:53:18 2025 by rpki-client