$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa File: 4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa (raw, json) Hash identifier: 2gLIbsyQdm7FYjjEBEt6lCAuPR0Eh/hN3tKuAb9bqMo= Subject key identifier: 23:4F:0F:03:ED:01:73:54:B7:6B:5F:D2:3E:30:CE:A1:4B:12:02:57 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5D6FDDEEF891AE080280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397236 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5d:6f:dd:ee:f8:91:ae:08:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7174d6ac-a14d-42dd-8d43-01c113b340e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:51:3b:71:26:53:40:5f:11:60:7e:cf:b2: ff:9b:de:ac:02:8f:9f:b5:81:65:07:50:72:1b:99: bb:3d:38:68:e8:b2:58:eb:e4:0d:db:6b:99:a9:4a: 60:fd:09:6f:d0:bd:b3:7a:67:da:c8:bf:49:30:a4: 27:a0:bb:8c:c6:9b:11:aa:f5:27:49:3f:24:c0:d3: a0:bc:7b:24:69:59:89:a9:68:74:f5:da:f1:78:3e: 12:d7:60:36:7b:83:dc:c4:55:5c:a8:cb:b9:4d:83: e9:f0:a3:fb:6c:d2:8e:b9:71:b9:64:25:22:13:33: 7f:94:d4:3d:47:31:f2:c7:a8:75:20:e0:9b:38:25: b3:bf:d4:38:5b:ce:15:12:59:77:cd:b2:6d:42:a3: 50:1c:5f:9b:5b:4f:c4:40:7c:e1:f3:b5:1c:07:9a: 04:b8:8b:40:49:08:71:50:65:81:fe:71:d2:e9:79: d1:ba:c4:0e:e2:74:78:a4:d7:28:14:31:af:dc:b7: ca:33:1f:08:99:a1:9a:a0:ac:0f:20:b9:f3:4d:de: 61:cb:51:46:a6:5b:bc:2f:17:d9:d1:91:08:12:b6: 91:58:d9:a6:4c:a9:be:10:ba:6d:17:e9:a8:de:ca: 7f:73:63:c9:da:ff:38:19:75:2a:12:08:3c:46:fb: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:0F:03:ED:01:73:54:B7:6B:5F:D2:3E:30:CE:A1:4B:12:02:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e19939e-cf7a-3228-8e1a-c414e45a68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f5:1f:36:2a:ac:88:fa:7a:17:60:60:4e:4f:41:6f:b6:af: 38:0f:d0:21:e4:70:a4:09:98:1c:6c:e3:ee:c6:60:13:d3:23: 6f:d3:03:67:45:b3:6a:7c:2e:b8:a5:d4:19:ef:3e:64:77:6e: 4e:aa:3e:2a:d9:37:d2:36:51:23:15:60:9f:fa:81:34:71:c6: ae:d4:94:cb:07:41:cd:f9:b9:45:7c:9f:75:55:ae:8f:42:39: 02:08:10:1c:80:43:53:5a:75:d5:08:31:20:ce:39:cb:7a:0e: e9:0c:77:9b:2d:5f:b9:aa:5b:57:86:20:dd:de:bb:f0:73:f8: 87:49:65:5f:69:9f:8e:f6:7e:f2:76:af:c0:60:20:a2:c4:63: 8e:d0:2d:4c:05:23:8a:ae:d5:b7:3f:92:83:bf:8e:7c:e2:ab: 4e:47:39:26:8f:a4:7a:de:6c:f5:4d:b7:44:cd:56:7b:77:2d: 59:7b:84:4f:80:d0:16:fb:bd:dc:4c:58:81:b3:19:bc:d6:d8: d5:d2:ff:a4:42:c2:a3:12:28:94:69:42:97:42:90:2b:e9:c6: f0:d8:f3:d0:02:6d:71:a3:81:cd:3a:59:af:f8:c6:f4:80:a3: 7e:5a:21:5a:aa:77:17:3d:20:aa:d7:61:63:2c:75:54:cf:ed: e5:19:f3:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz11v3e74ka4IAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NzE3NGQ2YWMtYTE0ZC00MmRkLThkNDMtMDFjMTEzYjM0MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xdRO3EmU0BfEWB+z7L/m96sAo+ftYFlB1By G5m7PTho6LJY6+QN22uZqUpg/Qlv0L2zemfayL9JMKQnoLuMxpsRqvUnST8kwNOg vHskaVmJqWh09drxeD4S12A2e4PcxFVcqMu5TYPp8KP7bNKOuXG5ZCUiEzN/lNQ9 RzHyx6h1IOCbOCWzv9Q4W84VEll3zbJtQqNQHF+bW0/EQHzh87UcB5oEuItASQhx UGWB/nHS6XnRusQO4nR4pNcoFDGv3LfKMx8ImaGaoKwPILnzTd5hy1FGplu8LxfZ 0ZEIEraRWNmmTKm+ELptF+mo3sp/c2PJ2v84GXUqEgg8Rvt0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNPDwPtAXNUt2tf0j4wzqFLEgJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGUxOTkzOWUtY2Y3YS0z MjI4LThlMWEtYzQxNGU0NWE2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL1HzYqrIj6ehdgYE5PQW+2rzgP0CHkcKQJmBxs4+7GYBPTI2/TA2dF s2p8Lril1BnvPmR3bk6qPirZN9I2USMVYJ/6gTRxxq7UlMsHQc35uUV8n3VVro9C OQIIEByAQ1NaddUIMSDOOct6DukMd5stX7mqW1eGIN3eu/Bz+IdJZV9pn472fvJ2 r8BgIKLEY47QLUwFI4qu1bc/koO/jnziq05HOSaPpHrebPVNt0TNVnt3LVl7hE+A 0Bb7vdxMWIGzGbzW2NXS/6RCwqMSKJRpQpdCkCvpxvDY89ACbXGjgc06Wa/4xvSA o35aIVqqdxc9IKrXYWMsdVTP7eUZ86M= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:47 2025 by rpki-client