$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa File: 72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa (raw, json) Hash identifier: qVfiZguUoHSmrPWoj2n39FdbnedhLtkcYhntXtKg7Cs= Subject key identifier: D1:82:8C:30:E2:13:F3:D4:50:73:E5:09:73:22:F3:C7:7C:13:71:07 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A043F5CA3785BACCEDA00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397215 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:04:3f:5c:a3:78:5b:ac:ce:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=3e65e1eb-1234-48c6-b84f-572fc3d5a3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:89:ff:94:af:ef:7f:70:ca:fa:36:2a:1c: 64:79:e2:ca:b4:46:69:33:78:ca:9b:c7:5b:32:7e: e6:f8:84:bc:42:07:34:fa:92:4a:52:0f:6e:de:6b: b9:d1:5e:f7:00:e7:2e:23:6a:33:f3:d5:b0:4e:ba: 22:52:96:b3:a6:7e:44:32:f4:90:f9:21:28:51:a8: b0:ef:e2:8b:7e:5a:d8:e9:3c:c8:68:b1:5b:a4:cc: 9d:ac:fd:15:53:25:de:af:0d:a7:96:9e:d1:7e:36: 12:d0:ff:03:a9:ca:14:28:3f:e5:10:c7:ea:41:72: 6a:2d:3b:31:d2:f5:f2:a2:e9:d9:83:6e:9f:11:81: 32:f6:22:92:6b:aa:1d:5d:63:33:9a:e8:db:87:03: 32:29:94:ad:5c:4a:21:b6:e1:ab:14:4b:b3:1a:2d: c7:e1:38:2b:2f:9c:97:60:0f:cf:2f:de:3d:6a:4f: 52:f7:45:99:a0:9f:09:2e:7f:db:1e:67:b0:d3:d9: ad:a5:72:d6:a7:9a:ec:4b:e0:13:ee:c1:b8:d7:ac: 0d:ea:a1:72:71:87:ac:d1:28:86:b0:00:aa:3b:5e: eb:13:2a:d2:67:1c:2e:cd:8e:55:e0:37:81:58:0a: 6b:c8:e5:b9:21:20:98:49:92:d7:82:6f:f6:45:58: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:8C:30:E2:13:F3:D4:50:73:E5:09:73:22:F3:C7:7C:13:71:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fa:07:09:28:6a:67:20:21:40:f7:2f:23:1c:e3:10:36:6f: 72:a2:41:d0:ee:99:72:7c:2e:db:a5:bb:28:67:5b:42:78:5e: 65:71:4a:38:d9:a4:80:ab:01:fe:81:9a:6e:48:47:56:c3:a7: 5c:71:2c:7f:5b:84:e2:69:be:1b:8d:89:8b:bd:fc:37:c1:91: 40:97:92:7b:7d:48:f8:af:1a:2e:ff:a1:a0:8b:13:5e:4a:8f: 98:86:31:ad:28:8b:96:48:bd:8a:5c:9e:95:cf:c0:70:1a:dc: 60:dc:8b:4d:e1:73:bf:de:dd:32:df:03:a0:86:d9:16:48:4c: 41:15:9f:a9:01:fe:d2:cc:b9:c3:98:64:a1:0a:4d:ba:6b:2e: 07:61:0b:74:0c:12:0a:d9:b4:12:26:8b:94:e1:27:74:23:f4: be:19:53:78:4c:11:ba:48:85:7b:f9:c9:47:44:2e:fe:e3:6e: 72:d8:42:38:7f:7a:9c:cd:da:72:c1:13:79:32:7b:ee:15:0b: 05:6a:44:24:54:7e:2f:16:51:aa:1e:d6:10:e2:41:ce:7b:bf: bd:6f:0a:7d:45:29:37:90:c2:a5:da:47:c2:56:69:cb:97:94: 1f:3e:8a:c6:87:51:ba:bf:b4:7a:de:d1:8a:d8:30:16:2b:79: 8b:c6:ed:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgQ/XKN4W6zO2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk M2U2NWUxZWItMTIzNC00OGM2LWI4NGYtNTcyZmMzZDVhM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWeJ/5Sv739wyvo2KhxkeeLKtEZpM3jKm8db Mn7m+IS8Qgc0+pJKUg9u3mu50V73AOcuI2oz89WwTroiUpazpn5EMvSQ+SEoUaiw 7+KLflrY6TzIaLFbpMydrP0VUyXerw2nlp7RfjYS0P8DqcoUKD/lEMfqQXJqLTsx 0vXyounZg26fEYEy9iKSa6odXWMzmujbhwMyKZStXEohtuGrFEuzGi3H4TgrL5yX YA/PL949ak9S90WZoJ8JLn/bHmew09mtpXLWp5rsS+AT7sG416wN6qFycYes0SiG sACqO17rEyrSZxwuzY5V4DeBWApryOW5ISCYSZLXgm/2RVipYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGCjDDiE/PUUHPlCXMi88d8E3EHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzIwNDg0NzEtMmQ5ZS0z N2E5LTg1ZDYtNGIwYWJlNWU1YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL6BwkoamcgIUD3LyMc4xA2b3KiQdDumXJ8LtuluyhnW0J4XmVxSjjZ pICrAf6Bmm5IR1bDp1xxLH9bhOJpvhuNiYu9/DfBkUCXknt9SPivGi7/oaCLE15K j5iGMa0oi5ZIvYpcnpXPwHAa3GDci03hc7/e3TLfA6CG2RZITEEVn6kB/tLMucOY ZKEKTbprLgdhC3QMEgrZtBImi5ThJ3Qj9L4ZU3hMEbpIhXv5yUdELv7jbnLYQjh/ epzN2nLBE3kye+4VCwVqRCRUfi8WUaoe1hDiQc57v71vCn1FKTeQwqXaR8JWacuX lB8+isaHUbq/tHre0YrYMBYreYvG7aw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:38 2025 by rpki-client