$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json) Hash identifier: 6BdtuYY4Dk2ZXpqGYj1knjyIeHbIz+4NEexcmiDoMuc= Subject key identifier: 9A:8A:C4:4A:09:60:30:50:E6:9A:92:D3:4F:E9:B8:DE:38:6F:A2:F2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FFD6CEAA077659BFF5E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397232 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:fd:6c:ea:a0:77:65:9b:ff:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=55cc1503-bd55-4b99-811e-dd9fe077e573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:17:c9:fa:da:5a:1f:dc:50:fb:07:88:5f: 39:a5:62:56:2c:8e:68:b8:df:3c:78:69:70:ab:cc: 4e:1b:42:bf:99:44:20:21:df:bf:bf:1f:af:eb:15: d0:eb:c9:b3:22:a6:92:6f:a1:6d:13:4b:df:13:94: e2:d7:29:f8:d6:2e:2e:cd:a0:3a:b4:28:44:d0:5e: c6:54:9d:1b:89:d7:0e:df:e3:33:4e:6e:e3:d3:ad: 56:fe:03:0d:50:af:8d:8c:34:37:30:90:fd:fc:31: 68:a8:b7:d6:38:bf:59:c1:25:49:bb:b7:1b:e8:94: 4e:95:d4:fe:7b:dd:22:8d:35:b2:da:99:d5:7a:6e: 47:a5:c4:fa:93:14:d9:9a:ee:fa:94:35:07:31:b7: a6:e3:68:23:8f:ad:96:ce:30:f5:76:da:bd:07:13: b2:b9:1d:3c:63:7f:62:6c:62:18:dc:29:5e:d7:9e: 6f:3e:ce:15:29:fa:cb:3c:95:56:92:5f:4f:b8:2b: ec:c9:3a:66:8d:ea:0a:06:56:25:9e:73:b4:c8:9a: 09:9e:c5:6f:7e:75:27:03:c5:06:75:29:61:fe:75: 87:b8:80:e0:1e:57:b1:36:d5:c1:6c:81:4b:8a:d8: 02:4b:a8:5e:27:04:4d:fc:91:b8:8a:14:83:12:c2: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8A:C4:4A:09:60:30:50:E6:9A:92:D3:4F:E9:B8:DE:38:6F:A2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e4:07:88:17:b5:fb:5e:76:40:0f:67:7d:44:78:95:98:e1: 52:d8:d5:f1:d0:c9:7b:05:34:55:d4:2b:c1:f8:80:06:ac:da: 85:b0:05:09:33:3d:b3:11:93:43:d6:89:ee:f1:3d:72:73:8c: 82:f3:75:c1:b4:43:63:20:84:37:fc:b8:8a:36:37:d3:b9:2f: ab:a4:b1:76:61:f6:ad:9b:97:0a:6b:bb:5d:d3:a6:f3:cf:a8: 37:85:f5:a3:fe:7d:f6:3d:e6:cc:9a:45:a3:53:f4:fc:ce:64: 8a:a5:fa:09:b9:83:8e:22:6b:f8:33:ca:86:e0:f0:f9:76:33: fd:13:0f:26:d5:2e:c2:1f:a9:6a:ce:5f:af:da:be:9c:b1:35: 7a:31:e8:e1:85:99:13:3a:ae:2c:83:bd:89:d6:d2:f0:2c:ec: 24:ec:e5:5a:59:6b:13:ef:04:f7:78:df:3c:34:9e:ff:cf:32: 13:c9:0d:da:1c:c9:75:10:27:75:95:f3:53:83:c0:2f:80:f1: 96:d2:8f:70:23:e0:17:49:48:3a:c3:42:ad:23:78:bb:57:67: 1f:6e:14:1d:b6:68:7e:70:f6:6e:af:bb:62:1a:dd:be:36:78: cc:de:ee:63:f4:76:1d:54:f9:90:f1:70:1e:54:b5:af:b7:f7: 61:95:cf:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/1s6qB3ZZv/XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTVjYzE1MDMtYmQ1NS00Yjk5LTgxMWUtZGQ5ZmUwNzdlNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfYXyfraWh/cUPsHiF85pWJWLI5ouN88eGlw q8xOG0K/mUQgId+/vx+v6xXQ68mzIqaSb6FtE0vfE5Ti1yn41i4uzaA6tChE0F7G VJ0bidcO3+MzTm7j061W/gMNUK+NjDQ3MJD9/DFoqLfWOL9ZwSVJu7cb6JROldT+ e90ijTWy2pnVem5HpcT6kxTZmu76lDUHMbem42gjj62WzjD1dtq9BxOyuR08Y39i bGIY3Cle155vPs4VKfrLPJVWkl9PuCvsyTpmjeoKBlYlnnO0yJoJnsVvfnUnA8UG dSlh/nWHuIDgHlexNtXBbIFLitgCS6heJwRN/JG4ihSDEsL2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqKxEoJYDBQ5pqS00/puN44b6LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FlNjBlNzAtZTVmZS0z ODAyLWFlNTUtZjY4ZTIzYTE5NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHkB4gXtftedkAPZ31EeJWY4VLY1fHQyXsFNFXUK8H4gAas2oWwBQkz PbMRk0PWie7xPXJzjILzdcG0Q2MghDf8uIo2N9O5L6uksXZh9q2blwpru13TpvPP qDeF9aP+ffY95syaRaNT9PzOZIql+gm5g44ia/gzyobg8Pl2M/0TDybVLsIfqWrO X6/avpyxNXox6OGFmRM6riyDvYnW0vAs7CTs5VpZaxPvBPd43zw0nv/PMhPJDdoc yXUQJ3WV81ODwC+A8ZbSj3Aj4BdJSDrDQq0jeLtXZx9uFB22aH5w9m6vu2Ia3b42 eMze7mP0dh1U+ZDxcB5Uta+392GVz8s= -----END CERTIFICATE-----Generated at Mon Jun 16 15:47:05 2025 by rpki-client