$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/412750eb-922e-33cb-8630-d3ed6e68d4aa.roa File: 412750eb-922e-33cb-8630-d3ed6e68d4aa.roa (raw, json) Hash identifier: +nDXRYWKxin6RK+UTheg2N12M0+oMee2jkCdbx7gjEA= Subject key identifier: 1C:66:37:63:51:76:1E:83:0C:AC:70:86:CE:9A:58:72:F9:0E:E8:90 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59ED97F37738AF05C24700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/412750eb-922e-33cb-8630-d3ed6e68d4aa.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397228 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:ed:97:f3:77:38:af:05:c2:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=c1487e50-9a48-4709-bd6b-9fce28571b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:51:ba:6b:ea:8c:7e:c0:4b:bb:3a:6b:e9: db:cd:e6:f6:bf:21:7d:76:59:87:85:15:63:1f:53: 64:8d:15:90:d2:9d:b5:da:10:d4:f5:59:6c:fe:93: cb:fc:df:57:49:17:90:d2:36:56:c4:b2:a4:ce:09: 77:0a:8d:f0:d1:8a:82:9c:81:32:db:14:3d:a2:28: b8:56:b9:5a:ef:71:a4:c6:b2:c9:f6:55:a4:55:6c: a5:0d:3e:d1:80:0c:47:79:48:dc:07:cb:c8:90:92: 92:a9:95:e4:93:f0:65:cf:4e:f4:9c:71:d6:a0:26: a4:71:fd:c0:80:55:dc:19:88:66:e1:a5:ef:8f:e5: 74:4e:50:08:cb:3a:4c:6b:26:8a:4a:9b:4b:cb:e2: 23:f3:fc:e4:ef:1b:4b:f7:ee:41:05:f9:68:81:d9: fe:2a:d6:2a:4f:27:be:9f:7b:bb:1f:46:5d:ac:18: 70:05:e5:c4:8a:31:0a:49:a0:5f:66:57:0b:d7:28: 98:b1:27:0d:cf:a8:2a:72:96:a2:0e:80:03:5b:8d: 83:29:63:d0:81:84:8e:64:db:81:14:06:2b:d1:3d: 85:31:fc:40:a5:e5:6d:89:84:47:37:4f:8f:13:ef: 17:56:a2:e4:82:87:20:6c:fe:28:e5:a5:cc:31:f7: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:66:37:63:51:76:1E:83:0C:AC:70:86:CE:9A:58:72:F9:0E:E8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/412750eb-922e-33cb-8630-d3ed6e68d4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d9:ef:dd:ae:34:4e:07:df:c6:09:f4:d0:fe:ea:6b:b2:6c: 54:8f:61:59:9c:e1:29:16:0b:e7:19:ff:3a:94:74:e5:6c:52: 7a:d9:2e:5e:cf:81:c3:70:b7:b1:88:c2:4c:de:78:c8:a0:a7: ec:a9:4d:38:dc:02:87:e1:13:ba:c0:00:bb:f2:e3:fc:88:8e: f0:ed:4b:6b:3d:d1:4b:d5:e0:cc:c0:25:a2:52:fd:dd:da:07: d1:92:e5:58:05:e5:6b:db:a4:93:a8:33:22:f0:76:2a:69:43: 73:9b:e4:c5:36:1a:83:ad:d2:6d:78:5b:9a:42:a6:bf:c5:54: 5f:4a:aa:45:a4:21:ac:69:36:bb:00:d6:b3:57:64:e5:7c:a1: e3:e2:6d:52:fd:cd:4a:1b:b5:06:a8:a1:ca:5a:cf:cd:0c:54: 7f:ce:26:c2:c6:1a:7f:a8:42:4b:7e:b7:90:a0:e5:b2:02:44: b8:df:0d:41:83:fe:5c:f6:19:4f:c5:5d:ef:87:3c:08:19:9f: b7:49:98:7a:e1:48:6c:ac:7e:12:a1:9b:b3:c0:c8:37:1f:dc: 23:04:7f:2b:70:8a:3e:a2:4a:95:36:8d:3e:60:fe:24:e9:12: 96:51:6d:b0:c3:4c:79:75:e2:4e:d7:93:3c:24:81:d1:77:78: 7d:02:a8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWe2X83c4rwXCRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YzE0ODdlNTAtOWE0OC00NzA5LWJkNmItOWZjZTI4NTcxYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgZRumvqjH7AS7s6a+nbzeb2vyF9dlmHhRVj H1NkjRWQ0p212hDU9Vls/pPL/N9XSReQ0jZWxLKkzgl3Co3w0YqCnIEy2xQ9oii4 Vrla73GkxrLJ9lWkVWylDT7RgAxHeUjcB8vIkJKSqZXkk/Blz070nHHWoCakcf3A gFXcGYhm4aXvj+V0TlAIyzpMayaKSptLy+Ij8/zk7xtL9+5BBflogdn+KtYqTye+ n3u7H0ZdrBhwBeXEijEKSaBfZlcL1yiYsScNz6gqcpaiDoADW42DKWPQgYSOZNuB FAYr0T2FMfxApeVtiYRHN0+PE+8XVqLkgocgbP4o5aXMMffCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxmN2NRdh6DDKxwhs6aWHL5DuiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDEyNzUwZWItOTIyZS0z M2NiLTg2MzAtZDNlZDZlNjhkNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7Z792uNE4H38YJ9ND+6muybFSPYVmc4SkWC+cZ/zqUdOVsUnrZLl7P gcNwt7GIwkzeeMigp+ypTTjcAofhE7rAALvy4/yIjvDtS2s90UvV4MzAJaJS/d3a B9GS5VgF5WvbpJOoMyLwdippQ3Ob5MU2GoOt0m14W5pCpr/FVF9KqkWkIaxpNrsA 1rNXZOV8oePibVL9zUobtQaoocpaz80MVH/OJsLGGn+oQkt+t5Cg5bICRLjfDUGD /lz2GU/FXe+HPAgZn7dJmHrhSGysfhKhm7PAyDcf3CMEfytwij6iSpU2jT5g/iTp EpZRbbDDTHl14k7XkzwkgdF3eH0CqMs= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:24 2025 by rpki-client