$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3678e560-2df9-3c3f-aa5c-d76787c771f0.roa File: 3678e560-2df9-3c3f-aa5c-d76787c771f0.roa (raw, json) Hash identifier: xN5k27GZKTOIkAALzIsk0CauVW+MbyctK8RXnVOkd/I= Subject key identifier: 68:E6:E4:31:55:78:B1:F6:6A:13:86:02:55:9F:74:59:FC:A8:8B:4E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3F96EE785DC26ED39A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3678e560-2df9-3c3f-aa5c-d76787c771f0.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397228 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3f:96:ee:78:5d:c2:6e:d3:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bba4bbb9-1634-49b2-bca8-1802aad50b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bb:37:93:48:87:b3:e1:85:02:52:7a:ad:9d: b6:aa:20:17:2d:6d:5e:3b:46:cf:d4:f8:fa:0e:a8: 76:d6:1a:1e:9f:b4:13:2a:86:bb:c7:ff:90:dd:12: 36:d7:d6:19:5e:75:06:7a:e1:f4:b3:c7:dd:37:af: 35:0f:0f:9b:a5:3b:c9:4b:5f:55:6e:ab:2d:55:4d: 89:e5:3d:a9:dd:36:93:7f:e6:08:53:be:b2:52:ab: 3b:6d:f6:e7:1d:09:63:47:77:9c:40:3b:60:44:6b: 68:07:84:70:b0:79:f2:6d:ed:97:f5:17:6d:5a:42: 46:02:b3:66:50:40:b0:c8:14:96:f8:88:21:51:87: 75:90:e2:9f:a0:74:df:84:62:f9:39:54:f2:df:94: 75:18:1e:f6:88:84:49:97:bc:b5:9d:c6:d3:d4:16: f9:f9:02:0f:e9:11:11:b1:79:10:65:23:b4:7f:9a: 9f:3a:9d:7d:b3:21:e0:ca:54:15:a4:37:25:d6:3f: 56:5e:8b:da:57:c0:4a:f1:e2:d2:6d:97:7a:e4:70: ac:99:36:77:f2:56:98:76:92:84:08:04:3f:7f:40: a7:64:9d:b9:60:d9:e0:7a:db:7e:38:83:3a:4f:46: cb:6f:8e:87:0f:64:7b:be:aa:05:e8:f7:85:2b:da: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E6:E4:31:55:78:B1:F6:6A:13:86:02:55:9F:74:59:FC:A8:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3678e560-2df9-3c3f-aa5c-d76787c771f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:73:40:9c:8e:59:fe:70:cf:18:e3:74:bc:4b:c8:5b:b8:c4: 9e:21:79:88:0a:f8:08:51:7f:40:85:20:ec:ee:17:31:6a:86: 4b:07:cc:ac:ff:37:20:5f:2a:87:05:25:e0:96:05:99:a1:42: d4:2d:66:69:9b:c9:cd:ef:a1:8d:de:f8:fd:fe:52:8c:5b:63: bc:67:63:74:88:9d:de:87:ca:0a:b8:0a:39:ba:7d:be:ee:fc: fa:86:72:d5:d3:08:d7:65:9e:8d:a4:0c:37:d0:55:27:c9:e4: 7c:4a:3b:b3:05:5f:31:56:79:dc:e6:7b:b6:bb:e8:cb:ee:46: 72:b4:51:8e:8e:d2:ba:86:13:55:66:70:0b:f7:3e:67:7f:66: 63:c4:07:43:5d:18:5f:4d:69:52:06:3b:90:77:55:9d:e8:19: 24:9c:c6:fa:83:cb:20:a2:3f:31:f7:b8:ed:ee:2a:86:83:65: 96:df:99:2f:76:b6:b0:bd:38:3b:1e:02:3a:e6:e8:e1:21:cd: 3c:97:40:c1:5f:57:09:d2:a3:20:68:c9:8d:c2:39:1a:01:8b: ff:1c:fe:bb:61:bd:ea:34:e5:9f:da:52:79:81:cc:6d:1f:7d: 24:1b:b0:92:1d:f4:f1:8b:73:8e:5f:bf:b3:e3:b9:a6:06:03: c0:39:f6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz+W7nhdwm7TmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmJhNGJiYjktMTYzNC00OWIyLWJjYTgtMTgwMmFhZDUwYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ls3k0iHs+GFAlJ6rZ22qiAXLW1eO0bP1Pj6 Dqh21hoen7QTKoa7x/+Q3RI219YZXnUGeuH0s8fdN681Dw+bpTvJS19VbqstVU2J 5T2p3TaTf+YIU76yUqs7bfbnHQljR3ecQDtgRGtoB4RwsHnybe2X9RdtWkJGArNm UECwyBSW+IghUYd1kOKfoHTfhGL5OVTy35R1GB72iIRJl7y1ncbT1Bb5+QIP6RER sXkQZSO0f5qfOp19syHgylQVpDcl1j9WXovaV8BK8eLSbZd65HCsmTZ38laYdpKE CAQ/f0CnZJ25YNngett+OIM6T0bLb46HD2R7vqoF6PeFK9qBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjm5DFVeLH2ahOGAlWfdFn8qItOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzY3OGU1NjAtMmRmOS0z YzNmLWFhNWMtZDc2Nzg3Yzc3MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNzQJyOWf5wzxjjdLxLyFu4xJ4heYgK+AhRf0CFIOzuFzFqhksHzKz/ NyBfKocFJeCWBZmhQtQtZmmbyc3voY3e+P3+UoxbY7xnY3SInd6Hygq4Cjm6fb7u /PqGctXTCNdlno2kDDfQVSfJ5HxKO7MFXzFWedzme7a76MvuRnK0UY6O0rqGE1Vm cAv3Pmd/ZmPEB0NdGF9NaVIGO5B3VZ3oGSScxvqDyyCiPzH3uO3uKoaDZZbfmS92 trC9ODseAjrm6OEhzTyXQMFfVwnSoyBoyY3CORoBi/8c/rthveo05Z/aUnmBzG0f fSQbsJId9PGLc45fv7PjuaYGA8A59qM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:40 2025 by rpki-client