$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f1d53-d5f7-3be8-b8cb-7a2996b7c383.roa File: 625f1d53-d5f7-3be8-b8cb-7a2996b7c383.roa (raw, json) Hash identifier: BLLbQo+GS4gr5YrKvFK0TapFibuH3y/PXcb0jMVrgUc= Subject key identifier: 85:BC:0B:6C:20:1F:98:33:06:03:51:2E:6F:8D:9F:2D:7F:E0:03:C9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59F074DD22A67EAFD3B580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f1d53-d5f7-3be8-b8cb-7a2996b7c383.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397238 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:f0:74:dd:22:a6:7e:af:d3:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=d57b6a96-115f-4952-86a0-7d05167b1651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:a5:f7:4f:53:53:c4:9b:0b:7f:9e:b5:e3: c9:cf:53:5f:cb:67:f3:87:55:21:8b:b6:28:b9:58: 00:09:71:0d:80:59:0b:07:3a:c8:53:35:dc:31:b7: 50:7e:6e:09:c7:6e:71:25:90:49:f8:6b:22:4a:36: 3f:30:fa:94:68:50:c9:67:7a:13:46:88:c3:ed:8f: 3e:9b:58:ad:e7:6c:3c:c4:9c:95:7b:78:41:d3:fa: 23:4b:02:c3:24:6a:ff:bc:56:6d:f2:14:21:b0:20: 62:73:2f:1c:29:61:3b:5d:68:f9:1f:2c:86:7a:38: 68:96:32:87:2e:79:a8:f5:cf:8f:83:57:c9:20:5b: 68:13:94:7f:15:44:98:aa:eb:7a:50:1e:76:0e:03: 39:67:df:bd:4c:0d:51:0d:4e:cc:d4:85:45:9b:72: 3d:da:14:51:b5:03:fb:18:63:39:43:33:aa:ab:15: f6:24:76:f4:f7:ca:08:20:19:37:f9:d8:f5:e8:b6: a2:db:7d:04:9e:10:c7:ab:86:8b:e6:f3:16:6e:01: e2:e3:49:3e:cf:4a:19:93:a1:5b:f9:c1:0f:5a:82: a9:62:98:b9:d2:e9:84:f3:78:23:86:4e:cb:7f:93: 25:a8:a1:e5:8b:70:7a:43:17:dd:3a:fe:2a:12:da: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:0B:6C:20:1F:98:33:06:03:51:2E:6F:8D:9F:2D:7F:E0:03:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f1d53-d5f7-3be8-b8cb-7a2996b7c383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:67:bd:96:1b:11:a6:d6:12:2b:b5:2f:a1:fe:67:9e:b7:71: 71:4a:6c:9d:4d:d7:4f:fa:69:1a:d1:f2:e1:53:50:de:97:ff: ae:0e:1d:e1:e2:19:2f:3a:58:d3:9d:ed:83:3d:58:a1:54:a2: 2f:aa:cf:44:da:b9:13:75:4e:34:be:48:a2:36:f3:ef:d8:f1: a2:83:c9:3e:81:32:13:64:7d:9d:6d:0f:c2:01:55:8a:a1:23: 42:ca:11:f8:c2:00:40:62:5c:75:23:dd:bc:eb:aa:99:22:cf: 02:3a:24:d0:6d:70:06:96:78:39:f8:95:fa:14:70:2c:a6:75: 36:0a:b5:77:44:db:3d:b0:97:bb:cd:8e:4d:c7:e6:d8:e0:d9: 4e:18:18:87:0f:79:60:0e:3f:b8:e3:4f:de:83:f8:c4:0a:be: c6:68:01:01:39:3c:5c:be:37:54:52:6c:f4:00:cf:8c:aa:24: 4f:40:f1:c7:e8:78:46:e6:58:84:e8:90:07:ef:6e:f7:d5:f9: ec:5f:26:16:c1:03:3f:e6:0d:7e:3e:a1:65:11:7f:60:b1:ea: 2f:8e:41:af:5c:69:a7:2e:42:10:e3:64:d0:c0:ac:a0:72:7b: 79:00:7b:bf:d8:67:31:03:3e:ba:9b:9c:e4:1e:55:b8:c7:66: be:88:c7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfB03SKmfq/TtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZDU3YjZhOTYtMTE1Zi00OTUyLTg2YTAtN2QwNTE2N2IxNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAyl909TU8SbC3+etePJz1Nfy2fzh1Uhi7Yo uVgACXENgFkLBzrIUzXcMbdQfm4Jx25xJZBJ+GsiSjY/MPqUaFDJZ3oTRojD7Y8+ m1it52w8xJyVe3hB0/ojSwLDJGr/vFZt8hQhsCBicy8cKWE7XWj5HyyGejholjKH Lnmo9c+Pg1fJIFtoE5R/FUSYqut6UB52DgM5Z9+9TA1RDU7M1IVFm3I92hRRtQP7 GGM5QzOqqxX2JHb098oIIBk3+dj16Lai230EnhDHq4aL5vMWbgHi40k+z0oZk6Fb +cEPWoKpYpi50umE83gjhk7Lf5MlqKHli3B6QxfdOv4qEto76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW8C2wgH5gzBgNRLm+Nny1/4APJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjI1ZjFkNTMtZDVmNy0z YmU4LWI4Y2ItN2EyOTk2YjdjMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9nvZYbEabWEiu1L6H+Z563cXFKbJ1N10/6aRrR8uFTUN6X/64OHeHi GS86WNOd7YM9WKFUoi+qz0TauRN1TjS+SKI28+/Y8aKDyT6BMhNkfZ1tD8IBVYqh I0LKEfjCAEBiXHUj3bzrqpkizwI6JNBtcAaWeDn4lfoUcCymdTYKtXdE2z2wl7vN jk3H5tjg2U4YGIcPeWAOP7jjT96D+MQKvsZoAQE5PFy+N1RSbPQAz4yqJE9A8cfo eEbmWITokAfvbvfV+exfJhbBAz/mDX4+oWURf2Cx6i+OQa9caacuQhDjZNDArKBy e3kAe7/YZzEDPrqbnOQeVbjHZr6IxyQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:11 2025 by rpki-client