$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9131f848-81a0-360a-bde2-a329a8cd5c73.roa File: 9131f848-81a0-360a-bde2-a329a8cd5c73.roa (raw, json) Hash identifier: yj5EH85hkAwXyuIuenY/YMGHWRQcYOPtmw3HXpub+tw= Subject key identifier: 88:C9:C6:11:D7:3F:6F:55:B8:38:30:4E:89:AD:66:40:75:9C:4E:F4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FEBBD452744351DADE820 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9131f848-81a0-360a-bde2-a329a8cd5c73.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397228 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:eb:bd:45:27:44:35:1d:ad:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=a7d2d60b-83a6-4d65-a1d6-25b97a5bae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d8:33:fc:fe:18:73:6f:85:12:1b:95:8e:f7: 40:60:81:c4:2d:42:15:44:9d:ea:72:c8:06:6d:e2: 0b:2c:37:a8:6b:22:44:78:b4:4a:f9:be:d0:66:4a: d5:86:5d:d4:9e:9c:92:a1:77:89:08:af:c3:44:a2: a2:b1:b2:42:57:30:73:8a:25:b7:73:56:07:2c:82: 59:71:80:e0:d8:cc:03:a0:ca:40:e6:01:7b:7a:1b: 41:a0:d8:bf:01:03:36:05:9f:68:57:c1:8d:56:e8: d7:6f:ab:19:46:cb:d2:94:76:b8:46:f1:61:00:1c: 18:8a:b5:19:47:8b:53:df:1f:8e:0e:95:d4:f5:cd: 59:53:68:ee:5c:cb:f9:8e:44:2c:91:f0:da:06:61: 9f:ad:f5:7b:4d:d8:fa:08:1d:09:20:ca:d8:ca:ef: 85:42:bb:90:0f:fb:a1:db:de:52:da:35:0c:ef:74: 86:ed:c1:74:75:a0:23:80:b3:70:1b:2f:38:9a:65: b6:77:5b:61:8e:92:bf:bb:38:78:64:91:b4:e1:fe: 22:cc:a4:96:b1:3d:82:aa:f9:18:db:cf:6b:11:80: cf:cf:f3:c2:a5:b3:94:bb:f5:d6:a9:c6:ea:23:7c: f7:51:fc:a9:f7:48:bf:bd:ba:12:3b:fd:6f:95:f9: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:C6:11:D7:3F:6F:55:B8:38:30:4E:89:AD:66:40:75:9C:4E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9131f848-81a0-360a-bde2-a329a8cd5c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:21:e7:9d:4a:c1:07:8c:91:e0:ed:d2:9a:06:a8:72:20:0a: b1:db:ec:69:1a:a9:a8:46:50:a6:f0:10:15:11:d6:8e:09:60: 10:92:64:66:16:93:93:a8:fd:24:1f:dd:23:cc:92:35:77:e6: 33:e5:a7:a0:31:83:a0:8c:fd:2b:73:98:47:0f:44:3d:df:2a: 8d:a8:d2:cb:11:b3:2d:78:28:a3:08:a8:6f:35:5d:01:1f:ff: 5a:c7:10:c3:21:43:70:99:25:44:45:1e:1d:a3:2c:01:fd:b1: c5:f2:7f:71:ed:44:04:ab:4f:22:f8:fc:7c:36:e9:33:cc:5f: a6:46:7b:22:de:4b:fa:c1:05:c6:cd:61:f1:30:26:31:98:56: cc:d1:97:35:7e:16:15:f4:06:6c:0a:35:07:48:0d:0c:22:70: 5b:bd:c8:6f:f8:43:62:84:72:cf:7e:c5:1f:3e:7c:ca:1d:bf: 81:c1:54:89:20:a6:ba:88:0f:69:6c:80:11:4b:08:d1:69:e1: e1:be:0a:6e:96:8c:00:2f:06:0a:ca:bb:5d:68:ae:a7:de:be: d6:81:ea:78:dd:aa:ae:5b:fe:95:85:c3:22:ad:82:92:ed:19: 60:f7:af:8e:9f:79:2e:f9:94:5f:41:75:94:cd:47:f0:4d:2b: 43:3e:79:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+u9RSdENR2t6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTdkMmQ2MGItODNhNi00ZDY1LWExZDYtMjViOTdhNWJhZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNgz/P4Yc2+FEhuVjvdAYIHELUIVRJ3qcsgG beILLDeoayJEeLRK+b7QZkrVhl3UnpySoXeJCK/DRKKisbJCVzBziiW3c1YHLIJZ cYDg2MwDoMpA5gF7ehtBoNi/AQM2BZ9oV8GNVujXb6sZRsvSlHa4RvFhABwYirUZ R4tT3x+ODpXU9c1ZU2juXMv5jkQskfDaBmGfrfV7Tdj6CB0JIMrYyu+FQruQD/uh 295S2jUM73SG7cF0daAjgLNwGy84mmW2d1thjpK/uzh4ZJG04f4izKSWsT2CqvkY 289rEYDPz/PCpbOUu/XWqcbqI3z3Ufyp90i/vboSO/1vlfkV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjJxhHXP29VuDgwTomtZkB1nE70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTEzMWY4NDgtODFhMC0z NjBhLWJkZTItYTMyOWE4Y2Q1YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUh551KwQeMkeDt0poGqHIgCrHb7GkaqahGUKbwEBUR1o4JYBCSZGYW k5Oo/SQf3SPMkjV35jPlp6Axg6CM/StzmEcPRD3fKo2o0ssRsy14KKMIqG81XQEf /1rHEMMhQ3CZJURFHh2jLAH9scXyf3HtRASrTyL4/Hw26TPMX6ZGeyLeS/rBBcbN YfEwJjGYVszRlzV+FhX0BmwKNQdIDQwicFu9yG/4Q2KEcs9+xR8+fModv4HBVIkg prqID2lsgBFLCNFp4eG+Cm6WjAAvBgrKu11orqfevtaB6njdqq5b/pWFwyKtgpLt GWD3r46feS75lF9BdZTNR/BNK0M+eac= -----END CERTIFICATE-----Generated at Mon Jun 16 02:17:43 2025 by rpki-client