$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa File: 3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa (raw, json) Hash identifier: L5JrtL4y9eI3msDZYYZi6p1io3camWEgFckz8utFbFE= Subject key identifier: 57:A6:2D:E1:72:C1:D2:CD:6E:99:1B:A5:07:64:B1:FE:9D:BC:53:63 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF6148DC700BB347D29800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397241 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:61:48:dc:70:0b:b3:47:d2:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=678e91e7-8a58-438b-84c3-c0f50f38a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:36:24:c9:ee:35:7b:ca:5e:6a:dd:96:8c: 48:4f:3a:a3:03:c3:ef:86:14:bf:d5:42:b3:99:0c: 46:c6:b0:a5:54:8d:32:7d:5b:67:d8:60:21:13:e3: da:45:aa:d5:20:8a:c3:fc:3c:df:52:2b:3f:f1:dd: eb:eb:8f:6f:ec:72:77:67:46:2c:24:04:d2:f1:a6: 8e:63:e1:2b:c4:6c:ab:12:0d:6f:22:5d:35:e9:70: 85:09:9b:87:1c:ab:f7:af:9f:a7:05:8d:d6:cb:58: e3:ed:91:36:db:b9:9b:88:14:c7:aa:0d:32:51:b0: d6:9b:a6:cc:6e:e6:25:22:29:e9:dc:a8:95:69:e8: ea:ba:52:08:9a:13:33:37:9c:a8:61:90:ef:e6:3f: 58:dd:59:53:7d:37:6e:62:6d:32:0c:74:30:06:01: 33:98:73:62:bd:bd:90:c2:58:0c:4b:62:0a:61:55: f3:93:93:13:d2:5a:71:9e:f4:44:6a:3f:75:86:9b: 6a:91:5b:11:ef:11:35:e8:6c:4d:3a:b0:54:89:a3: ea:0a:e2:99:58:01:ec:3b:5a:39:3f:dd:a7:17:01: e6:c2:c6:2f:45:47:e1:df:f6:a5:15:53:27:78:45: ed:c8:d3:12:39:ac:5e:ab:ce:0c:fe:0a:42:4f:1f: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:2D:E1:72:C1:D2:CD:6E:99:1B:A5:07:64:B1:FE:9D:BC:53:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:98:15:29:a5:92:42:73:bf:b7:18:ee:be:19:a7:f9:c5:14: fd:67:26:65:cf:c6:f6:05:b7:3d:08:37:63:61:84:d6:4d:44: 6c:ee:2e:c1:a5:e4:3f:a3:e1:d9:a2:38:43:24:9e:67:b1:ff: 1a:be:df:4d:95:8d:00:f2:55:87:67:cc:a6:62:fc:84:66:3e: 2e:97:ce:49:da:0a:7d:92:ac:eb:6a:a8:97:88:a5:b7:2c:a7: 11:79:d5:3f:44:82:ce:1f:cf:c6:a1:b2:34:6b:a0:b7:e3:e2: 7f:11:f1:ef:8f:1d:e8:9e:b3:d0:de:b1:bd:24:0a:ff:a9:50: 38:bd:db:ed:96:ed:f2:4a:64:43:61:9d:53:03:96:dd:15:b8: ac:65:89:d6:be:79:db:19:41:48:a0:14:ba:c6:18:1a:e3:ee: 3d:94:e6:6f:75:3e:b2:b9:94:52:da:00:eb:c1:64:bb:29:db: 6a:9b:3f:ea:34:a6:50:a2:2e:cf:0f:8a:32:16:37:73:e6:04: d1:0e:13:c6:53:2b:19:33:22:2a:c2:10:ef:f2:45:09:ca:bf: b4:91:cf:e5:14:22:af:83:c6:96:f6:c2:40:ba:3c:8e:14:17: d0:dd:f6:ed:f6:6e:22:48:86:42:d9:9e:79:e1:33:39:3a:03: 20:4a:0b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2FI3HALs0fSmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Njc4ZTkxZTctOGE1OC00MzhiLTg0YzMtYzBmNTBmMzhhN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+g2JMnuNXvKXmrdloxITzqjA8PvhhS/1UKz mQxGxrClVI0yfVtn2GAhE+PaRarVIIrD/DzfUis/8d3r649v7HJ3Z0YsJATS8aaO Y+ErxGyrEg1vIl016XCFCZuHHKv3r5+nBY3Wy1jj7ZE227mbiBTHqg0yUbDWm6bM buYlIinp3KiVaejqulIImhMzN5yoYZDv5j9Y3VlTfTduYm0yDHQwBgEzmHNivb2Q wlgMS2IKYVXzk5MT0lpxnvREaj91hptqkVsR7xE16GxNOrBUiaPqCuKZWAHsO1o5 P92nFwHmwsYvRUfh3/alFVMneEXtyNMSOaxeq84M/gpCTx9LSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFemLeFywdLNbpkbpQdksf6dvFNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2U5ZDc2NGUtNWJmMy0z ZWQzLWE1OTAtNWRlYjZkNDdlNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWYFSmlkkJzv7cY7r4Zp/nFFP1nJmXPxvYFtz0IN2NhhNZNRGzuLsGl 5D+j4dmiOEMknmex/xq+302VjQDyVYdnzKZi/IRmPi6XzknaCn2SrOtqqJeIpbcs pxF51T9Egs4fz8ahsjRroLfj4n8R8e+PHeies9Desb0kCv+pUDi92+2W7fJKZENh nVMDlt0VuKxlida+edsZQUigFLrGGBrj7j2U5m91PrK5lFLaAOvBZLsp22qbP+o0 plCiLs8PijIWN3PmBNEOE8ZTKxkzIirCEO/yRQnKv7SRz+UUIq+Dxpb2wkC6PI4U F9Dd9u32biJIhkLZnnnhMzk6AyBKC30= -----END CERTIFICATE-----Generated at Sat Apr 26 19:22:42 2025 by rpki-client