$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa File: 325dc012-39aa-3c49-baab-0ada77a47052.roa (raw, json) Hash identifier: Gg7LBG3pgOUgzimByhfCNsLms45cF72y+qYCGmy7iYY= Subject key identifier: 96:6A:CE:2D:BD:86:67:68:65:09:94:C5:3A:BD:03:E3:D1:D8:D6:1D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FE3456778C01920C725C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397216 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e3:45:67:78:c0:19:20:c7:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1852b1fa-dbd2-430b-80e8-e6abca21ae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:6d:20:85:14:b1:e5:bf:fa:da:fd:58:04: a3:8f:6d:20:47:ca:23:ef:27:df:2e:11:b5:d9:2d: 30:98:1a:58:0a:87:53:52:60:19:84:9e:1d:50:4c: 6f:bb:af:3c:00:db:2b:67:9c:54:76:5e:0d:4e:e6: fd:98:8e:33:4c:f1:44:67:73:37:06:3c:3d:93:e1: 92:12:59:7b:cd:05:e7:ff:a8:4e:93:1a:be:89:1e: b2:fd:03:d4:b4:ba:4f:8e:36:f3:aa:e0:f4:86:c1: d2:e5:8f:69:76:bb:73:bb:9f:29:fa:93:5f:d7:67: b1:9c:59:0c:a9:c8:ae:2f:99:b9:87:78:67:16:b5: 31:68:5e:8a:1a:97:77:88:7e:43:df:98:7f:fd:f5: 20:34:69:3b:98:81:f1:75:bb:e9:21:f1:5e:c9:1a: 06:0b:8f:8d:1f:42:e1:f4:dc:39:34:78:20:24:07: 07:d7:56:18:ea:9b:40:21:a1:30:f2:71:c8:8b:30: 67:cc:b3:be:31:f7:4d:dc:cc:59:50:bd:6b:37:69: 7a:37:2b:57:00:c5:29:a9:1d:b7:6c:35:c3:e6:c6: a7:2a:56:f0:e3:de:25:b1:42:12:16:4f:39:f1:fe: 30:c4:90:17:41:4e:70:63:61:38:b0:00:35:f4:ec: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:CE:2D:BD:86:67:68:65:09:94:C5:3A:BD:03:E3:D1:D8:D6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:f6:ea:18:64:30:b7:4c:ea:b0:02:38:a5:5c:90:40:d7: 42:95:ea:74:bd:06:82:ec:e8:4a:d1:7c:93:90:53:71:68:17: 82:0e:d1:c6:83:ed:a0:2d:dc:7e:88:f7:05:42:ad:05:bf:dd: 0c:cd:3c:35:5b:a5:74:6a:c9:60:90:e8:21:8f:23:b9:08:6e: 8a:a0:95:24:33:5d:f2:2e:2b:f2:01:f2:b2:c4:ff:d8:36:16: 09:b8:0c:06:e8:d0:71:aa:c2:cc:c5:7c:a8:60:62:4e:1f:28: be:68:22:17:fb:4e:2e:db:7a:7f:c3:dc:f7:7f:03:83:b8:9a: 59:0b:8f:8f:39:5f:33:ec:a0:a6:ef:d0:43:b5:55:5d:24:f5: 3a:6e:70:93:69:bb:6b:a0:23:95:bd:e3:79:05:ff:95:ad:f6: 34:fb:87:ad:26:6b:b9:dc:4e:51:7f:2a:80:d8:17:25:cc:58: dd:6a:db:87:54:98:d0:2f:4d:a1:fd:bc:cc:bf:33:76:9e:d6: f6:ab:15:84:cf:37:3e:1c:72:a3:cf:3e:26:8c:50:3d:32:94: c4:8d:08:84:aa:96:b6:d5:39:61:4b:34:6b:cd:88:ff:0f:b4: fc:32:29:0d:1a:be:d1:af:b3:b7:8c:79:4b:04:b7:9b:53:ea: fb:4e:94:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+NFZ3jAGSDHJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MTg1MmIxZmEtZGJkMi00MzBiLTgwZTgtZTZhYmNhMjFhZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ5tIIUUseW/+tr9WASjj20gR8oj7yffLhG1 2S0wmBpYCodTUmAZhJ4dUExvu688ANsrZ5xUdl4NTub9mI4zTPFEZ3M3Bjw9k+GS Ell7zQXn/6hOkxq+iR6y/QPUtLpPjjbzquD0hsHS5Y9pdrtzu58p+pNf12exnFkM qciuL5m5h3hnFrUxaF6KGpd3iH5D35h//fUgNGk7mIHxdbvpIfFeyRoGC4+NH0Lh 9Nw5NHggJAcH11YY6ptAIaEw8nHIizBnzLO+MfdN3MxZUL1rN2l6NytXAMUpqR23 bDXD5sanKlbw494lsUISFk858f4wxJAXQU5wY2E4sAA19OyJxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZqzi29hmdoZQmUxTq9A+PR2NYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzI1ZGMwMTItMzlhYS0z YzQ5LWJhYWItMGFkYTc3YTQ3MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnO9uoYZDC3TOqwAjilXJBA10KV6nS9BoLs6ErRfJOQU3FoF4IO0caD 7aAt3H6I9wVCrQW/3QzNPDVbpXRqyWCQ6CGPI7kIboqglSQzXfIuK/IB8rLE/9g2 Fgm4DAbo0HGqwszFfKhgYk4fKL5oIhf7Ti7ben/D3Pd/A4O4mlkLj485XzPsoKbv 0EO1VV0k9TpucJNpu2ugI5W943kF/5Wt9jT7h60ma7ncTlF/KoDYFyXMWN1q24dU mNAvTaH9vMy/M3ae1varFYTPNz4ccqPPPiaMUD0ylMSNCISqlrbVOWFLNGvNiP8P tPwyKQ0avtGvs7eMeUsEt5tT6vtOlIk= -----END CERTIFICATE-----Generated at Mon Jun 16 08:53:34 2025 by rpki-client