$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa File: 8a0e1bff-f033-3495-a807-25f1c3db0753.roa (raw, json) Hash identifier: 6Cnc5Cxo3gpflGK3Qc3yjAAYeZZRpvU7EAdbMkjcVac= Subject key identifier: 78:6D:4B:8C:A6:8F:E5:03:89:42:1B:04:21:C2:98:E3:92:C7:14:63 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF61A0A7915E77CAE34080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397214 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:61:a0:a7:91:5e:77:ca:e3:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=9e546972-bec6-4391-9c85-0107cf39b502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:9a:92:8b:5f:72:61:27:3d:58:dd:9b:46: ea:6a:58:f8:e9:e5:c6:0e:3c:a2:63:71:cc:98:30: e4:0d:db:10:5f:5d:47:31:80:1f:83:23:b0:68:bb: 50:7c:d8:0f:68:9c:bc:10:9d:d4:cb:1a:74:75:e6: 5c:0d:5f:1d:7f:46:4e:39:f1:07:40:65:7c:2c:74: 2b:5c:7c:26:4b:5d:24:2c:9c:9e:a9:a1:f6:18:72: a2:ff:24:6c:04:71:cb:6b:38:f5:f1:f2:c0:18:12: c9:9c:30:d2:e7:67:aa:3f:f8:4b:22:42:73:e3:f4: 4b:ce:e7:ca:40:82:cc:67:7a:07:6f:50:20:81:65: 4b:86:85:41:df:79:07:f5:fc:70:70:86:43:6c:b1: 75:3b:9c:25:f5:0c:5a:06:64:f4:d5:b6:e0:33:3c: 3a:b4:26:22:db:16:1b:ab:37:7f:3f:d1:cb:03:e0: 39:5d:16:43:43:84:21:92:85:cb:8e:a8:68:b3:80: 02:39:02:f0:b0:85:4d:f1:b1:0b:f5:fa:c2:cf:a1: 86:67:c4:1b:4e:3a:eb:bb:a1:0d:5f:ec:fb:70:6f: d8:33:c3:0f:e2:81:68:7f:8f:49:20:10:69:ed:f7: df:12:8b:f5:b5:3c:97:98:40:d1:63:06:09:21:f4: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6D:4B:8C:A6:8F:E5:03:89:42:1B:04:21:C2:98:E3:92:C7:14:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e4:49:32:3b:11:66:3b:c7:d8:8a:83:6e:73:e0:74:46:be: 86:cb:73:49:44:ef:f2:78:a8:02:91:02:c3:b7:cf:25:ca:c9: df:19:e3:54:85:d3:57:21:90:00:06:68:ee:a0:b5:d9:3d:39: 66:ae:62:29:8e:c0:bc:75:57:e5:7c:70:fa:82:a8:67:bf:cd: 5e:02:9f:9c:3a:9f:79:34:e3:29:bc:50:42:e7:d5:66:6d:00: 94:49:ca:1f:29:88:33:d0:7d:c6:7a:1b:76:eb:02:bf:0b:64: 9c:1c:9e:af:e2:6e:31:5d:f4:92:25:a4:58:0d:04:46:f3:a5: ae:20:59:d8:54:d1:35:f6:7d:92:ba:0b:29:6d:ba:33:77:76: cf:37:1e:47:cb:f0:53:10:52:36:0e:57:09:da:94:cc:c3:94: a1:a0:55:30:cd:d3:be:07:91:2e:f4:d1:55:96:b1:8a:f1:ca: 03:5f:2a:fd:29:a4:93:34:76:52:66:62:ea:6b:83:02:44:14: 5a:19:5c:1c:7b:06:c8:e8:2d:ac:1b:2d:b3:49:73:28:c3:04: 5f:ca:73:ee:92:42:f5:00:7f:52:a8:40:2d:93:5d:22:cf:56: d2:10:a7:62:8a:9a:98:65:23:0b:c9:d0:51:25:38:b2:c0:29: e1:6a:6e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2Ggp5Fed8rjQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OWU1NDY5NzItYmVjNi00MzkxLTljODUtMDEwN2NmMzliNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprOakotfcmEnPVjdm0bqalj46eXGDjyiY3HM mDDkDdsQX11HMYAfgyOwaLtQfNgPaJy8EJ3Uyxp0deZcDV8df0ZOOfEHQGV8LHQr XHwmS10kLJyeqaH2GHKi/yRsBHHLazj18fLAGBLJnDDS52eqP/hLIkJz4/RLzufK QILMZ3oHb1AggWVLhoVB33kH9fxwcIZDbLF1O5wl9QxaBmT01bbgMzw6tCYi2xYb qzd/P9HLA+A5XRZDQ4QhkoXLjqhos4ACOQLwsIVN8bEL9frCz6GGZ8QbTjrru6EN X+z7cG/YM8MP4oFof49JIBBp7fffEov1tTyXmEDRYwYJIfSLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhtS4ymj+UDiUIbBCHCmOOSxxRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGEwZTFiZmYtZjAzMy0z NDk1LWE4MDctMjVmMWMzZGIwNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvkSTI7EWY7x9iKg25z4HRGvobLc0lE7/J4qAKRAsO3zyXKyd8Z41SF 01chkAAGaO6gtdk9OWauYimOwLx1V+V8cPqCqGe/zV4Cn5w6n3k04ym8UELn1WZt AJRJyh8piDPQfcZ6G3brAr8LZJwcnq/ibjFd9JIlpFgNBEbzpa4gWdhU0TX2fZK6 CyltujN3ds83HkfL8FMQUjYOVwnalMzDlKGgVTDN074HkS700VWWsYrxygNfKv0p pJM0dlJmYuprgwJEFFoZXBx7BsjoLawbLbNJcyjDBF/Kc+6SQvUAf1KoQC2TXSLP VtIQp2KKmphlIwvJ0FElOLLAKeFqbgc= -----END CERTIFICATE-----Generated at Sun Apr 27 03:35:09 2025 by rpki-client