$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa File: 4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa (raw, json) Hash identifier: sqIv46gxMCOHyaviBGD9uOXrhkm4FRtv99vk1DhhAno= Subject key identifier: 9C:AE:A7:6D:28:FC:E3:56:B6:B8:48:C9:69:3A:FD:A9:5D:24:21:31 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DE647EFD8F30F95A9AC8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397243 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:64:7e:fd:8f:30:f9:5a:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=42ea6579-9736-4ba1-9e09-f773887d3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:0d:eb:3a:52:88:33:97:65:5b:57:01:4c: 86:8a:2c:ab:fd:1b:76:8d:b6:ef:7e:42:c5:d3:e5: 1d:b0:46:cf:d8:69:7c:45:68:bf:68:b1:00:ba:58: 09:8f:d4:cf:93:f7:cb:e9:57:a3:64:aa:c6:a8:79: a9:37:41:ae:67:d3:49:98:34:6b:9d:34:09:68:d8: 58:23:20:20:18:73:9f:9a:33:c1:1a:28:42:12:eb: 89:df:1e:da:b9:5a:83:00:c2:00:0f:d7:82:b9:7d: f0:09:8a:44:b1:f8:4d:01:71:1a:7d:1d:06:b2:0f: 2d:20:ff:e7:80:ec:a4:df:c0:b1:09:77:b5:05:d3: 1b:2e:24:6e:2c:b2:0d:a9:bb:b9:bd:48:4a:69:aa: 64:cc:c3:2a:83:8e:a2:a6:98:78:b9:c2:be:80:91: 4d:54:ee:fb:46:1c:93:3d:95:38:92:ea:83:05:2b: 90:89:bc:fc:ec:b0:27:92:3a:2a:9b:e9:0d:f9:14: 84:47:37:db:32:db:a7:79:4e:19:4f:cf:04:37:d5: cd:0c:c1:12:cc:b5:4b:9f:c3:f6:63:c5:d1:5c:64: 61:98:08:a5:c5:c4:c4:0a:d7:54:b7:d2:7d:09:ed: fd:f2:58:72:2b:ed:33:58:76:99:18:83:63:cf:ec: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:A7:6D:28:FC:E3:56:B6:B8:48:C9:69:3A:FD:A9:5D:24:21:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:38:2d:38:2d:d9:df:f2:8d:92:0d:94:cf:e0:e1:9f:bc:70: 86:43:a4:e9:25:a5:57:c2:fd:4e:51:c3:87:82:5e:6f:90:af: aa:be:52:57:91:7d:c5:c9:17:d0:7c:13:87:c2:d3:bc:f5:75: 94:76:fd:61:85:81:7a:6f:10:93:17:2b:13:cb:af:89:44:26: 49:5b:00:dc:9d:6b:85:32:3d:c1:72:25:dd:ac:f8:14:25:39: 8f:d4:b8:f7:c7:4e:4c:ac:76:32:ee:53:61:7b:80:80:2c:db: 23:ae:41:d0:61:b5:92:53:60:db:ba:6d:a7:d2:1f:e3:4a:16: a1:eb:32:41:db:ed:ce:3c:ca:7a:8a:98:e6:ee:f4:a0:4e:06: c2:6a:a9:b5:c2:3d:1b:7c:6c:c2:d0:ab:7e:49:c0:1b:23:31: b1:b3:74:bf:27:af:aa:8f:70:0f:d5:b5:bb:f1:22:ed:bb:67: 3c:f9:d4:41:5d:67:b6:04:1d:1b:9f:e1:82:18:27:71:d1:d7: 62:87:5a:10:78:92:cf:47:8f:91:da:cd:33:bd:68:8a:91:9a: ff:51:0b:06:0e:a0:ab:be:03:fa:f0:d0:76:2b:36:52:98:dc: 05:97:71:18:29:5c:88:62:08:e7:a8:04:f1:be:04:2b:15:8a: 63:18:6b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt5kfv2PMPlamsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDJlYTY1NzktOTczNi00YmExLTllMDktZjc3Mzg4N2QzYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQgN6zpSiDOXZVtXAUyGiiyr/Rt2jbbvfkLF 0+UdsEbP2Gl8RWi/aLEAulgJj9TPk/fL6VejZKrGqHmpN0GuZ9NJmDRrnTQJaNhY IyAgGHOfmjPBGihCEuuJ3x7auVqDAMIAD9eCuX3wCYpEsfhNAXEafR0Gsg8tIP/n gOyk38CxCXe1BdMbLiRuLLINqbu5vUhKaapkzMMqg46ipph4ucK+gJFNVO77RhyT PZU4kuqDBSuQibz87LAnkjoqm+kN+RSERzfbMtuneU4ZT88EN9XNDMESzLVLn8P2 Y8XRXGRhmAilxcTECtdUt9J9Ce398lhyK+0zWHaZGINjz+wYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyup20o/ONWtrhIyWk6/aldJCExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGViYzU5NDAtYTU2YS0z ZTc2LWFhM2UtNTQyZTQzNDJjYWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI4LTgt2d/yjZINlM/g4Z+8cIZDpOklpVfC/U5Rw4eCXm+Qr6q+UleR fcXJF9B8E4fC07z1dZR2/WGFgXpvEJMXKxPLr4lEJklbANyda4UyPcFyJd2s+BQl OY/UuPfHTkysdjLuU2F7gIAs2yOuQdBhtZJTYNu6bafSH+NKFqHrMkHb7c48ynqK mObu9KBOBsJqqbXCPRt8bMLQq35JwBsjMbGzdL8nr6qPcA/VtbvxIu27Zzz51EFd Z7YEHRuf4YIYJ3HR12KHWhB4ks9Hj5HazTO9aIqRmv9RCwYOoKu+A/rw0HYrNlKY 3AWXcRgpXIhiCOeoBPG+BCsVimMYa/g= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:19 2025 by rpki-client