$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa File: 2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa (raw, json) Hash identifier: 1vP+fGQkT4up7yTScMpaeoDMFrvymRjulTuUjY3DwlU= Subject key identifier: 97:D0:B4:31:D8:3D:44:C1:58:F2:FE:D4:87:8A:C1:6B:97:08:00:5C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5B935D11C601EF66CB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397234 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5b:93:5d:11:c6:01:ef:66:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=ff8038a2-44df-43eb-bef1-b4d270dd5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:18:21:85:e6:f0:c6:7e:d3:1a:82:dc:23: dc:df:32:f5:9a:24:c9:c1:41:52:f7:b6:c7:ca:6d: 5a:be:0b:69:5d:64:30:a6:10:10:52:a3:05:8c:7b: 4a:08:27:64:6d:fb:36:da:e9:7e:76:78:3d:41:75: 45:da:80:18:10:33:7f:95:18:a4:e8:91:37:e9:31: b7:15:dd:8f:a8:90:e6:97:f1:12:52:c5:cd:94:b3: 02:c5:44:83:57:82:33:d8:38:20:4d:1c:81:8d:73: f5:4e:3c:41:5f:d3:9e:da:02:7e:cc:f5:62:2f:94: 88:5f:46:d4:d4:97:ab:f2:d0:c1:a1:d4:35:84:76: 89:09:b9:a9:45:af:2d:99:ba:fc:c7:fa:39:40:cc: 95:33:1b:64:42:0f:e2:4c:bb:67:cf:a6:2b:a8:ce: ba:9a:21:cb:74:59:41:c1:8b:8c:60:36:c2:5b:77: fc:c7:33:3e:97:ff:aa:2a:b5:be:a0:b0:3f:1f:ff: 91:10:71:71:cd:09:43:d3:c4:53:bb:60:b8:6d:c2: e9:f5:a7:71:6e:ca:0f:98:7e:d4:66:1e:83:98:97: 01:15:a4:bb:07:67:13:19:cb:a0:52:0d:20:39:f7: b0:90:23:05:3b:43:9d:29:66:08:99:64:e9:c6:68: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D0:B4:31:D8:3D:44:C1:58:F2:FE:D4:87:8A:C1:6B:97:08:00:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c0:19:ff:35:d2:2c:4e:1f:d3:10:e0:aa:0c:93:d3:35:59: b0:a1:28:91:17:a3:76:3e:d6:e7:d0:fe:d1:12:0f:62:92:49: c3:ab:5d:aa:73:af:4d:d6:95:5c:f7:99:73:de:4d:15:88:78: 21:a0:a0:b1:9e:b7:eb:9c:8d:1b:5a:b2:95:9a:cd:18:1f:99: 0e:f2:9f:ed:20:c5:8e:bf:98:70:59:ea:ea:4b:40:24:d2:6f: fa:e4:71:fb:86:03:88:04:c7:b3:17:56:bf:16:c2:cc:31:90: 0d:0c:d0:33:8f:38:0e:56:56:4f:87:fb:a4:39:56:ac:4e:fa: 88:8a:b6:d3:14:f0:0a:25:3f:77:a6:29:8d:f8:56:6b:d8:f4: e7:53:aa:f5:87:eb:ba:14:0b:09:40:79:48:f0:a2:7b:90:c7: c9:99:9e:6d:8b:8e:eb:3d:5a:e2:0a:3b:e4:de:62:77:1c:85: 86:89:82:c5:d4:15:c9:b7:90:a0:ed:a5:ba:4d:65:1e:60:31: d8:f7:d4:8e:2a:93:c3:53:64:89:55:17:c7:74:cb:c2:57:9e: b1:e5:d7:a1:dc:42:ff:00:65:32:6a:7a:f2:56:8f:a6:34:c9: 77:24:33:52:92:5e:93:6b:12:ad:07:2d:35:ef:d1:41:9a:46: ee:e1:30:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1uTXRHGAe9mywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZmY4MDM4YTItNDRkZi00M2ViLWJlZjEtYjRkMjcwZGQ1YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiScYIYXm8MZ+0xqC3CPc3zL1miTJwUFS97bH ym1avgtpXWQwphAQUqMFjHtKCCdkbfs22ul+dng9QXVF2oAYEDN/lRik6JE36TG3 Fd2PqJDml/ESUsXNlLMCxUSDV4Iz2DggTRyBjXP1TjxBX9Oe2gJ+zPViL5SIX0bU 1Jer8tDBodQ1hHaJCbmpRa8tmbr8x/o5QMyVMxtkQg/iTLtnz6YrqM66miHLdFlB wYuMYDbCW3f8xzM+l/+qKrW+oLA/H/+REHFxzQlD08RTu2C4bcLp9adxbsoPmH7U Zh6DmJcBFaS7B2cTGcugUg0gOfewkCMFO0OdKWYImWTpxmgBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfQtDHYPUTBWPL+1IeKwWuXCABcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmU1ZTVkNWQtOTVkNi0z MGFlLTk2MjItODhmZTMyZTI5MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPAGf810ixOH9MQ4KoMk9M1WbChKJEXo3Y+1ufQ/tESD2KSScOrXapz r03WlVz3mXPeTRWIeCGgoLGet+ucjRtaspWazRgfmQ7yn+0gxY6/mHBZ6upLQCTS b/rkcfuGA4gEx7MXVr8WwswxkA0M0DOPOA5WVk+H+6Q5VqxO+oiKttMU8AolP3em KY34VmvY9OdTqvWH67oUCwlAeUjwonuQx8mZnm2Ljus9WuIKO+TeYncchYaJgsXU Fcm3kKDtpbpNZR5gMdj31I4qk8NTZIlVF8d0y8JXnrHl16HcQv8AZTJqevJWj6Y0 yXckM1KSXpNrEq0HLTXv0UGaRu7hMJI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:13 2025 by rpki-client