$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/87cebe1c-d3e3-3172-8456-efeec38f1fd2.roa File: 87cebe1c-d3e3-3172-8456-efeec38f1fd2.roa (raw, json) Hash identifier: K9UZdbFKKoDjp4bSacSMWwA7G6xGz6YXso+Ck1SUM8M= Subject key identifier: D7:53:FF:91:28:15:FF:03:83:05:7C:51:74:F1:7B:0B:3C:C9:A8:7C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3A9930811FC58B6C28C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/87cebe1c-d3e3-3172-8456-efeec38f1fd2.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397213 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3a:99:30:81:1f:c5:8b:6c:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bb57840b-a1d6-46a0-b050-a971ac36aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:22:78:c2:4d:2d:f9:a0:2d:a4:ee:b2:8a: c0:c8:33:2a:42:50:8b:23:28:20:04:0f:74:ee:ff: 09:d3:60:39:3d:27:78:4e:9d:74:6a:29:5f:c2:6d: ea:4f:d0:db:54:1a:40:4e:4d:e8:8a:69:47:ec:3e: 8a:2b:35:e2:0d:ba:cb:96:ff:44:9a:4a:43:b1:64: fd:6b:40:22:f7:88:93:77:5a:e2:14:d8:2c:3a:d3: c5:99:90:4c:ef:63:e7:35:c3:b2:e4:24:99:c2:5a: 23:70:fe:a1:aa:65:ce:22:00:68:c4:bd:9a:06:6e: 1a:f6:f4:31:36:f5:de:74:48:12:db:49:09:1f:5c: b4:32:64:64:39:d4:75:0d:01:f7:47:1b:52:a0:39: 59:3b:25:01:18:86:84:7a:46:42:db:8e:72:bf:40: f8:db:ec:5a:8a:66:3e:24:f2:f6:fa:55:3d:6b:48: 15:cb:76:86:70:28:df:bb:41:65:f9:f2:d4:10:65: ba:f9:ed:eb:1c:9d:49:7a:3b:05:55:12:92:0e:bb: 25:18:f6:49:79:5c:ec:ae:19:4b:33:60:16:96:91: d3:15:0a:0e:67:d3:90:83:56:57:28:54:27:44:9b: a2:6e:bf:d5:bd:bb:55:0d:1d:be:2c:a4:50:2a:4a: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:FF:91:28:15:FF:03:83:05:7C:51:74:F1:7B:0B:3C:C9:A8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/87cebe1c-d3e3-3172-8456-efeec38f1fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0d:74:40:41:63:a4:8c:69:71:dc:8a:91:4a:87:95:03:e1: 22:f8:90:2e:18:53:d8:dd:98:f2:3b:4d:13:e7:d5:ae:5d:95: da:a0:ba:de:34:8a:89:85:7c:75:fa:1a:99:e6:40:4d:8b:84: ae:c4:b5:2d:34:0d:16:46:39:83:3b:b4:c9:82:d6:f8:23:9f: 7d:03:c6:bb:9d:f4:31:16:12:b2:4b:f3:86:8a:e3:26:5a:b9: f4:61:11:33:79:dc:b7:d9:03:20:aa:80:fe:f6:f9:d4:95:3f: f5:b5:f3:c7:6a:89:1a:15:0a:5b:91:c7:c4:b2:81:69:27:f2: f4:e0:51:fe:d7:7a:8c:2e:ba:46:cd:ee:f7:1a:80:4f:7a:eb: 48:cd:bc:73:19:a7:63:8d:cb:76:e0:a7:14:dd:46:91:ea:33: 6a:e3:e6:ad:b6:51:e2:8c:a1:0a:50:9f:96:33:a9:69:d1:83: 45:9c:d0:a1:d1:81:b8:60:ed:62:91:e3:33:69:84:9d:20:2a: 75:92:3a:57:1e:c7:3f:12:01:8a:0f:03:b2:f7:e1:3d:3b:8c: 5c:ae:4d:c6:d7:c8:3d:94:d5:4b:f0:f6:ae:bf:1a:6d:de:8b: 24:6f:c3:ed:b6:53:db:fc:5d:f5:58:d0:86:c6:a4:16:e2:dc: 79:76:86:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzqZMIEfxYtsKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmI1Nzg0MGItYTFkNi00NmEwLWIwNTAtYTk3MWFjMzZhZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQieMJNLfmgLaTusorAyDMqQlCLIyggBA90 7v8J02A5PSd4Tp10ailfwm3qT9DbVBpATk3oimlH7D6KKzXiDbrLlv9EmkpDsWT9 a0Ai94iTd1riFNgsOtPFmZBM72PnNcOy5CSZwlojcP6hqmXOIgBoxL2aBm4a9vQx NvXedEgS20kJH1y0MmRkOdR1DQH3RxtSoDlZOyUBGIaEekZC245yv0D42+xaimY+ JPL2+lU9a0gVy3aGcCjfu0Fl+fLUEGW6+e3rHJ1JejsFVRKSDrslGPZJeVzsrhlL M2AWlpHTFQoOZ9OQg1ZXKFQnRJuibr/VvbtVDR2+LKRQKkqNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdT/5EoFf8DgwV8UXTxews8yah8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODdjZWJlMWMtZDNlMy0z MTcyLTg0NTYtZWZlZWMzOGYxZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkNdEBBY6SMaXHcipFKh5UD4SL4kC4YU9jdmPI7TRPn1a5dldqgut40 iomFfHX6GpnmQE2LhK7EtS00DRZGOYM7tMmC1vgjn30Dxrud9DEWErJL84aK4yZa ufRhETN53LfZAyCqgP72+dSVP/W188dqiRoVCluRx8SygWkn8vTgUf7XeowuukbN 7vcagE9660jNvHMZp2ONy3bgpxTdRpHqM2rj5q22UeKMoQpQn5YzqWnRg0Wc0KHR gbhg7WKR4zNphJ0gKnWSOlcexz8SAYoPA7L34T07jFyuTcbXyD2U1Uvw9q6/Gm3e iyRvw+22U9v8XfVY0IbGpBbi3Hl2htA= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:35 2025 by rpki-client