$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4bc1996f-dbf5-3c25-9d2c-60d731fc5fea.roa File: 4bc1996f-dbf5-3c25-9d2c-60d731fc5fea.roa (raw, json) Hash identifier: ssxgIrpCZoiW3BvBu80sbMkVS8slCv5njLyI+U3ebq4= Subject key identifier: B1:32:03:28:75:33:E8:2A:EB:C2:D9:6F:1A:30:1A:58:1E:04:2C:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A06DE713FE1BC525845F0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4bc1996f-dbf5-3c25-9d2c-60d731fc5fea.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397232 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:06:de:71:3f:e1:bc:52:58:45:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=af771f59-1b71-4dbe-b289-58c0177661e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:72:32:db:34:3e:da:6b:1e:e5:46:a9:13: 0e:db:13:90:f2:f0:9d:fd:f8:7c:0b:7e:52:24:a6: c5:c8:fa:37:e2:db:ef:de:d0:41:46:d9:06:f5:9e: d1:6d:d2:3f:4a:65:ae:3a:f4:c3:c3:62:c8:84:6c: fe:1e:eb:8c:01:c9:12:d0:24:b7:89:26:ae:2f:b9: 06:b8:ad:eb:ca:3a:4b:13:34:90:ff:c0:80:2d:71: 69:09:0e:63:03:b3:34:c8:cc:14:32:38:38:38:69: 4c:d8:a6:18:4d:75:73:45:90:e7:f2:fc:9f:60:51: 12:39:ac:ac:2b:d0:46:56:90:89:1d:4d:87:2c:41: 7a:16:b4:97:76:8c:65:4a:b6:68:3b:10:e3:6b:a2: 98:d9:2b:c3:84:12:36:74:a7:39:a1:de:78:34:8b: e8:40:e6:24:55:8b:e4:85:79:a9:70:85:2e:e3:07: 90:3e:47:7a:59:ed:a8:e3:2e:4e:cf:d7:c7:67:61: c6:de:01:be:67:87:f9:f6:e7:71:59:ec:14:33:29: 4e:fb:c5:e6:5f:f5:10:a8:90:e8:cc:2c:75:8f:4b: cb:13:ba:f0:72:e0:d9:a6:68:12:ea:9e:51:9e:40: d9:35:e5:68:2f:65:46:6c:b1:4b:6e:83:7f:26:c0: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:03:28:75:33:E8:2A:EB:C2:D9:6F:1A:30:1A:58:1E:04:2C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4bc1996f-dbf5-3c25-9d2c-60d731fc5fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:27:5e:9a:ba:af:e7:11:69:b1:5a:1c:b3:09:56:e6:99:1e: 48:c6:80:23:da:db:0b:80:6a:39:e6:d4:e5:75:52:7e:4c:2d: a3:77:bb:db:8e:52:95:38:17:f6:24:cf:5f:70:8d:a8:ee:df: a4:2d:4e:4b:3f:e4:02:1e:41:8c:90:65:9d:a0:42:70:e0:6f: 91:40:ba:8a:93:da:5f:2c:f9:42:95:54:f6:5b:3d:8a:f9:ca: c3:b4:24:09:65:5a:89:2f:4b:d1:e7:0e:a2:b7:e2:af:6b:0a: e5:4d:6d:7e:c4:48:b9:3b:bf:cd:66:3e:70:d2:79:bf:41:eb: 67:72:67:c9:51:2e:3f:ba:1d:e7:78:38:2f:5a:ea:36:b5:a6: 42:9a:cf:a9:d6:92:91:7c:e6:04:e2:59:39:05:2d:ec:4f:c4: e3:5f:e6:02:99:35:82:05:6b:5e:92:5d:e6:a7:01:11:31:55: e4:ad:e2:ec:24:b3:75:ea:82:60:27:18:96:f7:b7:77:c3:98: b2:14:88:3e:1b:04:84:2b:50:1e:83:0f:71:81:a5:d0:fd:ea: ab:03:45:b8:46:4b:fc:90:a6:8b:2c:24:9c:be:4e:d0:f5:92: 44:67:80:0a:13:e7:06:57:91:df:a3:49:69:97:82:3c:26:73: 04:c5:82:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgbecT/hvFJYRfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YWY3NzFmNTktMWI3MS00ZGJlLWIyODktNThjMDE3NzY2MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMdyMts0PtprHuVGqRMO2xOQ8vCd/fh8C35S JKbFyPo34tvv3tBBRtkG9Z7RbdI/SmWuOvTDw2LIhGz+HuuMAckS0CS3iSauL7kG uK3ryjpLEzSQ/8CALXFpCQ5jA7M0yMwUMjg4OGlM2KYYTXVzRZDn8vyfYFESOays K9BGVpCJHU2HLEF6FrSXdoxlSrZoOxDja6KY2SvDhBI2dKc5od54NIvoQOYkVYvk hXmpcIUu4weQPkd6We2o4y5Oz9fHZ2HG3gG+Z4f59udxWewUMylO+8XmX/UQqJDo zCx1j0vLE7rwcuDZpmgS6p5RnkDZNeVoL2VGbLFLboN/JsCZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEyAyh1M+gq68LZbxowGlgeBCwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGJjMTk5NmYtZGJmNS0z YzI1LTlkMmMtNjBkNzMxZmM1ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEnXpq6r+cRabFaHLMJVuaZHkjGgCPa2wuAajnm1OV1Un5MLaN3u9uO UpU4F/Ykz19wjaju36QtTks/5AIeQYyQZZ2gQnDgb5FAuoqT2l8s+UKVVPZbPYr5 ysO0JAllWokvS9HnDqK34q9rCuVNbX7ESLk7v81mPnDSeb9B62dyZ8lRLj+6Hed4 OC9a6ja1pkKaz6nWkpF85gTiWTkFLexPxONf5gKZNYIFa16SXeanARExVeSt4uwk s3XqgmAnGJb3t3fDmLIUiD4bBIQrUB6DD3GBpdD96qsDRbhGS/yQpossJJy+TtD1 kkRngAoT5wZXkd+jSWmXgjwmcwTFgg0= -----END CERTIFICATE-----Generated at Sun Apr 27 06:09:50 2025 by rpki-client