$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a1bf60c-7aaf-3c0e-8b2d-c2dbcdbb9713.roa File: 4a1bf60c-7aaf-3c0e-8b2d-c2dbcdbb9713.roa (raw, json) Hash identifier: dQs6p9K+H6e89X2+BptRdldeW2aifFfOIqYq2kmweIA= Subject key identifier: D9:2D:8A:CD:D5:02:BA:B0:2F:D9:F6:C8:33:88:B9:63:09:D8:61:F2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3DDFDA840F3C16254C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a1bf60c-7aaf-3c0e-8b2d-c2dbcdbb9713.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397232 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3d:df:da:84:0f:3c:16:25:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=f5da6b05-bad0-4079-9fd6-1126af889de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:6a:ba:b2:e4:c4:ec:4b:0f:e0:a6:46:e0: b0:0c:27:34:35:9b:ca:24:64:4e:19:4d:a2:45:aa: b6:71:89:ec:f7:cb:27:b3:bc:3c:94:1f:42:f8:70: 6c:05:ae:0a:d6:0b:f7:d2:1c:d1:18:64:0a:54:db: e1:1c:65:86:7f:dc:fd:ec:27:0c:d8:9c:13:38:fb: d3:ad:8f:9f:bd:1a:52:3f:2d:95:7b:e5:de:9d:aa: d1:83:6a:67:4f:44:3b:b5:19:cc:ea:d3:38:f7:99: 14:08:aa:86:b7:dd:ec:65:3e:c3:86:e7:a1:a5:2a: 7d:e8:d7:4d:ac:8a:b9:21:ac:6b:90:fc:ed:8d:b2: 7a:05:a2:1e:a0:e8:36:28:e9:fd:d1:77:05:ef:4b: 44:cd:9c:55:26:c9:e7:ac:f4:5d:72:b1:a9:c5:32: 4d:21:51:76:98:3d:81:7d:e6:75:16:f3:f6:dc:8b: 2c:25:03:3b:73:52:99:04:89:e0:95:b9:27:b0:04: e7:d8:00:8e:73:29:27:07:07:21:bf:ec:b8:39:97: d8:22:40:d3:6d:5a:c3:95:ed:f9:41:cc:96:f7:9f: b3:41:06:b9:4b:b4:32:19:36:71:7d:20:6e:50:24: 17:14:21:b5:26:0d:8d:ea:3c:e2:86:63:d5:d8:32: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2D:8A:CD:D5:02:BA:B0:2F:D9:F6:C8:33:88:B9:63:09:D8:61:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a1bf60c-7aaf-3c0e-8b2d-c2dbcdbb9713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:59:5e:7c:5d:99:84:77:31:2c:d2:8d:1b:98:bf:2e:bc:c1: 60:e2:68:63:43:e6:44:7b:27:e5:d9:22:8a:40:34:4c:b9:ae: 41:a2:c1:a6:ad:8d:de:94:1e:6f:b9:09:a5:3c:1e:7a:f7:32: c6:4a:23:43:f6:1e:36:44:e2:fb:6d:2c:69:37:64:ee:d1:49: eb:1b:df:f1:d8:15:b5:93:4b:25:5d:b7:84:d8:41:7c:c5:de: c6:a3:6f:43:e8:e2:be:5b:5e:c1:24:93:4f:83:5b:c0:44:4b: fe:f0:e5:5e:bd:f9:99:72:74:5d:04:f2:a6:87:7a:7b:6e:44: 38:98:e7:a7:25:17:c5:8d:d4:fe:b7:3e:09:b3:40:be:21:c2: 5f:83:5c:7f:18:e5:5e:c7:e0:cc:e7:97:63:2c:c9:5e:7d:03: 64:2a:92:24:fd:09:bd:66:85:60:e1:ee:c2:69:a5:0b:b8:c5: 1d:1b:b8:aa:51:76:1a:d0:c9:71:18:d6:9b:e3:49:0a:c6:e7: 67:e0:bc:3a:68:dc:24:4c:07:1e:d4:e9:d1:11:bd:1e:bf:89: de:11:7a:c5:44:02:70:0c:3d:15:db:ee:8f:a5:64:6a:f5:15: 44:ee:3d:30:b2:35:05:3a:94:09:f3:cb:4a:ea:a3:65:84:cb: 21:9a:09:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz3f2oQPPBYlTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZjVkYTZiMDUtYmFkMC00MDc5LTlmZDYtMTEyNmFmODg5ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWpqurLkxOxLD+CmRuCwDCc0NZvKJGROGU2i Raq2cYns98sns7w8lB9C+HBsBa4K1gv30hzRGGQKVNvhHGWGf9z97CcM2JwTOPvT rY+fvRpSPy2Ve+XenarRg2pnT0Q7tRnM6tM495kUCKqGt93sZT7DhuehpSp96NdN rIq5IaxrkPztjbJ6BaIeoOg2KOn90XcF70tEzZxVJsnnrPRdcrGpxTJNIVF2mD2B feZ1FvP23IssJQM7c1KZBInglbknsATn2ACOcyknBwchv+y4OZfYIkDTbVrDle35 QcyW95+zQQa5S7QyGTZxfSBuUCQXFCG1Jg2N6jzihmPV2DIO4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNktis3VArqwL9n2yDOIuWMJ2GHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGExYmY2MGMtN2FhZi0z YzBlLThiMmQtYzJkYmNkYmI5NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdZXnxdmYR3MSzSjRuYvy68wWDiaGND5kR7J+XZIopANEy5rkGiwaat jd6UHm+5CaU8Hnr3MsZKI0P2HjZE4vttLGk3ZO7RSesb3/HYFbWTSyVdt4TYQXzF 3sajb0Po4r5bXsEkk0+DW8BES/7w5V69+ZlydF0E8qaHentuRDiY56clF8WN1P63 PgmzQL4hwl+DXH8Y5V7H4Mznl2MsyV59A2QqkiT9Cb1mhWDh7sJppQu4xR0buKpR dhrQyXEY1pvjSQrG52fgvDpo3CRMBx7U6dERvR6/id4ResVEAnAMPRXb7o+lZGr1 FUTuPTCyNQU6lAnzy0rqo2WEyyGaCXE= -----END CERTIFICATE-----Generated at Sun Apr 27 09:31:31 2025 by rpki-client