$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa File: 8caa3533-568e-3083-8e82-b5801a23a746.roa (raw, json) Hash identifier: WBXhTRLlktXMaX6AJ8681rL/c/1ISIvl4ISiVJgBN28= Subject key identifier: 85:AF:A4:42:B2:C7:9A:AA:F9:FC:A4:4C:03:96:CE:09:25:80:A7:53 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FFAD3C5A6987B4B197300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397220 IP address blocks: 156.154.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:fa:d3:c5:a6:98:7b:4b:19:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2c96c8a9-a1b2-4002-a77c-fba977fbc96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:a9:bd:25:41:46:d0:1b:3f:0d:c6:cc:26: 83:d6:df:c3:98:5b:1b:d1:d9:b7:42:97:05:33:f3: 33:ed:13:45:b3:0f:5a:ce:7d:3a:0a:5b:fd:04:c7: eb:ec:18:bf:0c:06:5d:40:2a:ef:68:8b:05:51:59: 90:3b:88:98:6e:85:21:87:44:01:99:bc:cd:f3:f7: 47:df:a9:68:52:ab:3f:98:da:dd:c9:0b:51:47:82: f5:c4:28:cf:82:48:2f:f3:bc:0b:b2:ac:8a:54:6f: 34:93:d3:6e:6b:95:47:ec:63:52:2d:2a:6a:83:48: 77:ee:34:75:66:d1:ca:01:f0:28:7e:28:85:15:4f: 8f:40:90:57:ae:63:cf:f3:38:a3:0f:89:0f:9e:ab: fc:0a:9c:c0:27:34:e2:14:e1:a7:a3:8f:28:a5:44: bd:20:9c:1b:77:59:b6:94:aa:e1:3c:ab:99:01:65: 1b:a6:0d:9c:d9:e2:df:fb:7d:7e:d5:4e:db:b5:77: 41:2b:74:0c:48:43:7b:90:7a:65:99:c0:01:b6:ea: ef:ff:aa:02:17:e8:cd:83:52:3a:be:95:70:0d:19: 30:8e:b9:1a:23:df:a4:7b:d6:8d:e0:2c:d6:fa:55: 54:76:fa:1e:54:80:05:54:56:5b:d8:77:cc:dc:49: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AF:A4:42:B2:C7:9A:AA:F9:FC:A4:4C:03:96:CE:09:25:80:A7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a6:01:b5:79:92:ac:95:b0:cb:11:fe:66:95:9a:73:1e:cb: aa:92:71:ba:2a:51:06:f4:aa:fb:b7:67:72:eb:82:da:5b:7a: 11:cd:dd:cc:43:5b:0b:e9:1a:45:fe:4a:15:92:65:0a:19:9b: 05:18:d3:c5:4b:ce:3c:55:92:d4:11:1c:90:2a:c4:04:31:b1: ea:e2:c3:6d:78:13:24:d8:c0:b4:6d:aa:4c:b9:9d:42:f5:2f: d2:4a:21:36:95:0e:2a:e6:16:14:9d:b8:41:e6:22:20:de:dc: 0b:de:8f:40:ea:8c:7a:dd:76:ab:15:ce:61:7e:df:3d:74:a4: 3f:f6:12:63:4d:21:0d:f6:7e:a5:60:e0:8f:1d:d1:27:34:ab: 29:1a:9a:e3:f2:e0:f4:66:4c:c0:85:c5:ea:d8:40:55:04:34: 16:fd:ca:b8:ed:a6:29:ee:a4:af:9c:8c:76:9b:22:08:98:e2: 65:a2:d0:b1:0a:a0:93:fd:d4:b8:98:34:4b:eb:90:d8:ab:a2: 9c:4b:6c:6d:bb:13:80:b3:9f:61:5c:6e:f4:e8:c9:8d:ad:7b: 29:67:92:c3:37:af:8f:19:18:e8:90:9b:50:63:da:72:33:82: 29:16:38:06:67:e9:04:48:31:7f:e6:7f:1d:b3:44:8d:31:d5: d8:c5:80:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/rTxaaYe0sZcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmM5NmM4YTktYTFiMi00MDAyLWE3N2MtZmJhOTc3ZmJjOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkypvSVBRtAbPw3GzCaD1t/DmFsb0dm3QpcF M/Mz7RNFsw9azn06Clv9BMfr7Bi/DAZdQCrvaIsFUVmQO4iYboUhh0QBmbzN8/dH 36loUqs/mNrdyQtRR4L1xCjPgkgv87wLsqyKVG80k9Nua5VH7GNSLSpqg0h37jR1 ZtHKAfAofiiFFU+PQJBXrmPP8zijD4kPnqv8CpzAJzTiFOGno48opUS9IJwbd1m2 lKrhPKuZAWUbpg2c2eLf+31+1U7btXdBK3QMSEN7kHplmcABturv/6oCF+jNg1I6 vpVwDRkwjrkaI9+ke9aN4CzW+lVUdvoeVIAFVFZb2HfM3EluRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWvpEKyx5qq+fykTAOWzgklgKdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGNhYTM1MzMtNTY4ZS0z MDgzLThlODItYjU4MDFhMjNhNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6mAbV5kqyVsMsR/maVmnMey6qScboqUQb0qvu3Z3LrgtpbehHN3cxD WwvpGkX+ShWSZQoZmwUY08VLzjxVktQRHJAqxAQxseriw214EyTYwLRtqky5nUL1 L9JKITaVDirmFhSduEHmIiDe3Avej0DqjHrddqsVzmF+3z10pD/2EmNNIQ32fqVg 4I8d0Sc0qykamuPy4PRmTMCFxerYQFUENBb9yrjtpinupK+cjHabIgiY4mWi0LEK oJP91LiYNEvrkNiropxLbG27E4Czn2FcbvToyY2teylnksM3r48ZGOiQm1Bj2nIz gikWOAZn6QRIMX/mfx2zRI0x1djFgGg= -----END CERTIFICATE-----Generated at Mon Jun 16 04:06:25 2025 by rpki-client