$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64c854ab-215c-3f37-807a-05fb97f6cc0d.roa File: 64c854ab-215c-3f37-807a-05fb97f6cc0d.roa (raw, json) Hash identifier: LSFJf6BjICjo9lh/C0DY9eX/P6koZkwd1mB8qCK42yg= Subject key identifier: 0E:B7:44:69:56:A1:39:E0:F2:9E:9F:E8:60:8A:3B:C3:BB:54:27:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF39958C39B7E74E950100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64c854ab-215c-3f37-807a-05fb97f6cc0d.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397229 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:39:95:8c:39:b7:e7:4e:95:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=f3183783-6b69-4f2e-b3e9-3b2c64731d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:03:ac:21:7a:2c:66:f9:7a:38:75:fd:60: 90:e3:d8:f5:ad:b8:18:86:ca:66:96:21:4a:1d:73: 77:02:cf:0b:cf:b0:60:99:e9:d5:3f:1d:42:15:02: ee:7c:18:1c:6a:40:e1:27:d5:a8:7d:10:1c:b7:bb: d7:b8:ba:90:a0:6a:70:ef:f2:e5:16:88:e9:c6:de: 2d:9e:13:9a:a0:30:b4:a1:d4:74:42:5a:69:0a:70: 9f:4e:78:fc:18:36:df:d1:8f:73:45:69:6d:ca:0b: 4b:29:32:e3:23:b1:e3:2c:76:f3:99:71:3e:54:8c: 63:66:ab:6b:67:b3:58:63:8d:d8:84:5a:cc:bd:9f: 45:c6:5a:3c:1c:20:7d:ff:fb:c7:e2:01:6a:7f:b6: f3:21:df:ce:90:15:ba:cd:a4:61:2e:20:0c:6c:b2: 93:2f:76:0e:d2:47:c4:e2:08:ab:35:a2:b4:3a:ed: 58:b0:9d:71:32:7e:ba:f8:5b:a5:28:e9:94:6c:87: 70:f6:98:ec:f9:98:48:f9:05:5d:12:93:94:ed:70: e1:04:f7:93:8d:b1:c1:18:e2:5c:35:d9:b4:bf:47: 71:f1:91:b9:6c:89:4b:a5:2c:a1:15:05:50:7b:b4: f1:49:c6:8c:23:f6:5a:8e:34:46:7d:68:bf:4a:7b: 1e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:44:69:56:A1:39:E0:F2:9E:9F:E8:60:8A:3B:C3:BB:54:27:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64c854ab-215c-3f37-807a-05fb97f6cc0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8a:8f:f7:02:97:b8:dc:18:77:54:18:d5:67:f9:9d:28:e7: 15:c7:6f:70:80:5f:df:60:8c:f5:71:ab:30:74:87:0d:10:01: 1a:6d:5f:60:98:eb:b6:02:f2:03:aa:32:71:51:83:d0:82:9b: 33:81:7e:b3:da:03:90:ca:59:a9:82:ee:f8:af:99:76:c3:80: 2c:ac:cd:16:12:e7:cc:b8:d5:68:65:d3:b4:72:b7:60:2f:bf: 33:d4:c1:45:cb:91:3c:6e:42:b7:a8:ef:b8:57:ed:51:6e:f3: db:87:26:08:e8:0b:08:7f:81:37:01:db:a3:90:d9:03:c1:e1: 32:84:e9:e0:ee:79:2d:91:2b:06:a5:93:48:c7:80:9f:87:df: 75:37:f6:a6:95:d0:6f:2e:fe:f4:ff:db:9b:b6:33:0a:05:7b: e4:1a:a1:b9:e2:7a:ba:b2:9f:08:8f:00:7a:59:b5:e2:75:3f: 9c:b0:76:f9:cc:34:52:0b:cb:75:94:d9:bb:7c:21:a6:24:44: b8:18:b7:3f:48:e9:31:b3:09:79:36:16:22:90:46:46:48:0b: b8:eb:fe:83:0e:a1:14:d4:ec:f5:76:e3:1f:01:4b:f6:54:16: e5:de:f0:89:43:07:49:83:f5:5c:db:cd:ca:a6:0a:32:c6:c0: fd:34:1b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzmVjDm3506VAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZjMxODM3ODMtNmI2OS00ZjJlLWIzZTktM2IyYzY0NzMxZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/wDrCF6LGb5ejh1/WCQ49j1rbgYhspmliFK HXN3As8Lz7BgmenVPx1CFQLufBgcakDhJ9WofRAct7vXuLqQoGpw7/LlFojpxt4t nhOaoDC0odR0QlppCnCfTnj8GDbf0Y9zRWltygtLKTLjI7HjLHbzmXE+VIxjZqtr Z7NYY43YhFrMvZ9Fxlo8HCB9//vH4gFqf7bzId/OkBW6zaRhLiAMbLKTL3YO0kfE 4girNaK0Ou1YsJ1xMn66+FulKOmUbIdw9pjs+ZhI+QVdEpOU7XDhBPeTjbHBGOJc Ndm0v0dx8ZG5bIlLpSyhFQVQe7TxScaMI/ZajjRGfWi/SnseeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA63RGlWoTng8p6f6GCKO8O7VCcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjRjODU0YWItMjE1Yy0z ZjM3LTgwN2EtMDVmYjk3ZjZjYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqKj/cCl7jcGHdUGNVn+Z0o5xXHb3CAX99gjPVxqzB0hw0QARptX2CY 67YC8gOqMnFRg9CCmzOBfrPaA5DKWamC7vivmXbDgCyszRYS58y41Whl07Ryt2Av vzPUwUXLkTxuQreo77hX7VFu89uHJgjoCwh/gTcB26OQ2QPB4TKE6eDueS2RKwal k0jHgJ+H33U39qaV0G8u/vT/25u2MwoFe+QaobnierqynwiPAHpZteJ1P5ywdvnM NFILy3WU2bt8IaYkRLgYtz9I6TGzCXk2FiKQRkZIC7jr/oMOoRTU7PV24x8BS/ZU FuXe8IlDB0mD9VzbzcqmCjLGwP00G3c= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:43 2025 by rpki-client