$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c66ffde-4ff0-303e-ae16-e335737eff36.roa File: 8c66ffde-4ff0-303e-ae16-e335737eff36.roa (raw, json) Hash identifier: JRQPQBmw8Vg3VkwcbUGUkdpiSzTV/c61GZFD1MLF1sc= Subject key identifier: 98:A0:DC:93:24:82:5F:8E:73:CE:10:4A:E7:DE:6A:30:B6:27:E1:AD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A09CD4095F9CEBFECFF20 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c66ffde-4ff0-303e-ae16-e335737eff36.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397219 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:09:cd:40:95:f9:ce:bf:ec:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=a4a9ea2b-2b42-4459-9c5f-ee1ecad7d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:dc:2c:3f:85:df:09:18:fc:ca:d7:59:d6: c7:8e:d9:f8:0e:ce:2a:3b:a5:9e:38:29:d9:00:61: 39:32:e0:73:46:66:57:64:46:e0:00:25:86:24:be: d7:10:c4:93:46:17:7a:03:1e:8b:1c:d2:20:69:73: 84:49:4f:40:6b:48:6a:25:9f:47:b0:7f:83:24:b3: 13:03:0a:95:0e:6d:51:88:18:85:ed:b1:96:7f:07: cf:2f:ef:26:38:db:56:3c:70:1c:cf:e1:ea:a1:28: 95:e2:0a:1d:55:9e:b7:68:cc:2f:8f:94:29:bf:ee: c8:7a:c5:7b:fb:b6:5e:d6:b1:21:a1:d9:35:20:2a: 7f:1a:57:e1:81:0a:d1:6e:2c:ac:f5:dd:51:31:b1: 8b:36:33:df:39:51:10:c1:25:9f:27:06:f5:5d:1b: f6:8c:1a:d8:8d:0b:7f:27:a1:27:a2:28:db:c9:e1: dc:23:9b:41:dd:dc:eb:ce:82:80:b8:cb:3a:3a:d8: 75:2e:f1:ae:e3:c2:c4:51:e1:45:e9:de:16:4c:64: f2:95:f9:b0:9a:37:0a:1a:c6:7e:38:1d:81:e6:d9: 93:8b:9c:16:54:b6:f3:bc:69:a9:82:60:92:d7:af: 9e:b7:30:c0:38:ff:4e:b2:15:98:e6:65:87:0e:58: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A0:DC:93:24:82:5F:8E:73:CE:10:4A:E7:DE:6A:30:B6:27:E1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c66ffde-4ff0-303e-ae16-e335737eff36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:78:e9:bf:ec:e2:af:00:e4:40:45:9b:5a:54:c8:31:96:c0: 84:0c:a8:60:8d:ec:b4:56:40:7d:3b:7d:ab:98:6e:27:1b:ab: 57:ba:e1:22:fe:40:a6:74:52:37:1f:7a:5e:24:1c:40:1c:d8: a9:f9:47:8c:56:a2:5e:3c:dc:bb:c3:53:01:ab:28:17:f7:06: 1c:4c:93:d1:ae:cd:bc:eb:d1:81:3c:53:79:83:41:e7:4a:ee: cb:22:1f:c7:b3:8c:ee:0d:3e:f8:3d:54:fa:7b:9a:c2:71:6a: 4b:6d:11:d0:71:9a:1d:a2:b1:63:d4:3f:79:20:c0:48:19:5a: a5:f8:0a:f7:20:1e:30:7a:68:a9:5b:51:5a:32:c0:ca:5a:47: 8e:10:9c:17:3a:01:c7:ba:7a:4b:ac:4d:78:78:8f:6d:cc:06: 7e:a1:c1:7a:fd:ab:4c:d9:b2:fe:4b:cd:81:0b:c7:99:03:da: 5f:08:df:1b:4e:47:ed:67:68:d5:e7:3d:d0:bc:ee:3f:53:c0: f9:31:a1:87:3f:d4:da:5b:62:b9:ec:6d:34:be:56:fe:31:39: 06:ba:cc:b2:b8:3f:2a:9c:66:37:51:97:c1:04:74:cf:73:36: d0:a6:56:20:ed:4c:ab:e7:9f:76:4c:2e:18:36:57:6a:03:a2: 5a:f9:69:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgnNQJX5zr/s/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YTRhOWVhMmItMmI0Mi00NDU5LTljNWYtZWUxZWNhZDdkMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD7cLD+F3wkY/MrXWdbHjtn4Ds4qO6WeOCnZ AGE5MuBzRmZXZEbgACWGJL7XEMSTRhd6Ax6LHNIgaXOESU9Aa0hqJZ9HsH+DJLMT AwqVDm1RiBiF7bGWfwfPL+8mONtWPHAcz+HqoSiV4godVZ63aMwvj5Qpv+7IesV7 +7Ze1rEhodk1ICp/GlfhgQrRbiys9d1RMbGLNjPfOVEQwSWfJwb1XRv2jBrYjQt/ J6EnoijbyeHcI5tB3dzrzoKAuMs6Oth1LvGu48LEUeFF6d4WTGTylfmwmjcKGsZ+ OB2B5tmTi5wWVLbzvGmpgmCS16+etzDAOP9OshWY5mWHDlhfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJig3JMkgl+Oc84QSufeajC2J+GtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGM2NmZmZGUtNGZmMC0z MDNlLWFlMTYtZTMzNTczN2VmZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE546b/s4q8A5EBFm1pUyDGWwIQMqGCN7LRWQH07fauYbicbq1e64SL+ QKZ0Ujcfel4kHEAc2Kn5R4xWol483LvDUwGrKBf3BhxMk9Guzbzr0YE8U3mDQedK 7ssiH8ezjO4NPvg9VPp7msJxakttEdBxmh2isWPUP3kgwEgZWqX4CvcgHjB6aKlb UVoywMpaR44QnBc6Ace6ekusTXh4j23MBn6hwXr9q0zZsv5LzYELx5kD2l8I3xtO R+1naNXnPdC87j9TwPkxoYc/1NpbYrnsbTS+Vv4xOQa6zLK4PyqcZjdRl8EEdM9z NtCmViDtTKvnn3ZMLhg2V2oDolr5adQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:46 2025 by rpki-client