$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96af9ab9-2f3b-3c08-9e51-f75ad7968720.roa File: 96af9ab9-2f3b-3c08-9e51-f75ad7968720.roa (raw, json) Hash identifier: nRNSNT7eBvVNeziA9Cog2/pPCSAxpaMUBLYYOLLxQys= Subject key identifier: 81:89:B1:75:20:27:AE:BF:BA:D7:18:9E:9F:F4:9C:8C:06:CD:42:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0582FF503715EA51CC80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96af9ab9-2f3b-3c08-9e51-f75ad7968720.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397238 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:05:82:ff:50:37:15:ea:51:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=df70b99e-34ce-430c-b66e-ef8d52c0c128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:4c:06:db:e7:8b:0e:c0:2f:c2:cf:9d:1f: 86:36:21:1d:4b:d3:7d:58:1a:ea:91:4e:7f:53:98: 80:80:2d:85:50:74:f0:7d:6c:49:cc:c0:2c:f1:db: ba:c9:85:28:49:67:b0:9e:92:25:65:70:ca:70:3f: fe:4e:71:33:2f:47:33:14:d5:b5:ea:cb:5b:ae:40: 8c:47:de:91:15:fb:e8:67:8a:bf:8f:3c:3d:16:f1: 5f:ae:65:eb:11:97:66:c6:20:12:55:86:60:be:5c: 15:f1:39:00:12:e6:e7:09:7b:9b:b1:73:63:fd:8f: 63:1b:dc:ab:84:c3:94:37:e3:87:7f:18:d1:9f:2f: ce:92:ae:aa:90:2c:55:a4:66:5a:48:03:58:1d:de: 0b:4c:9f:57:73:2f:cb:c2:e3:48:da:55:84:2b:91: c6:82:8f:4b:38:cc:a4:4c:2c:08:2a:ee:4a:4b:53: ca:f5:51:81:7e:85:9d:71:d6:eb:b3:a3:b2:bf:43: ab:b0:28:96:98:5f:da:fa:45:85:8a:a5:d2:55:29: fb:c8:20:20:86:85:19:4d:30:12:a1:b5:8e:e2:0e: 41:41:a5:e4:4d:93:3f:67:d9:de:5d:98:d1:dc:31: 60:d2:cb:0a:1d:bc:91:c9:ca:57:7e:d0:a4:c3:c4: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:B1:75:20:27:AE:BF:BA:D7:18:9E:9F:F4:9C:8C:06:CD:42:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96af9ab9-2f3b-3c08-9e51-f75ad7968720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e2:b5:b0:8e:4c:83:ed:7b:95:05:f2:b0:00:ec:74:97:61: 12:cd:84:31:0b:6a:e7:eb:59:71:a0:b4:a7:2e:48:6b:e5:42: 3c:19:f0:b7:c1:c9:ad:92:fa:be:bf:f4:38:10:2d:5e:2d:5f: b3:4d:66:58:ba:f6:22:7c:15:87:ae:9e:69:4b:ac:a0:f1:4f: 70:d6:07:f3:5a:16:65:68:4f:8b:ab:73:0a:de:05:6f:5e:c0: df:4c:f3:70:b1:85:a3:40:d9:ae:22:00:0d:d9:30:58:32:f7: 82:31:a6:b6:06:fa:59:b1:10:a8:41:17:4e:1c:71:75:07:af: f9:f6:86:cc:e4:ba:e0:b3:f5:da:53:a6:85:83:6a:1e:ba:78: 70:53:62:83:9f:ec:6d:2d:0a:01:5f:89:aa:16:74:9c:c6:e6: 3d:bb:d6:f3:bd:ed:fb:37:f4:6a:a3:90:cb:6b:49:b6:2d:92: 39:e1:9e:4b:49:31:dc:d8:0e:ad:da:cf:9e:d2:73:35:5a:39: 6f:70:a5:2e:e7:05:bd:de:cb:fd:e6:83:1e:30:c4:2b:30:1d: d1:f2:b9:3c:4a:c9:b3:40:39:fd:c4:27:30:a4:18:c1:95:06: 7e:3e:f6:a2:c7:71:86:da:42:34:7a:21:da:51:bd:a3:61:5a: c1:8e:41:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgWC/1A3FepRzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZGY3MGI5OWUtMzRjZS00MzBjLWI2NmUtZWY4ZDUyYzBjMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2dMBtvniw7AL8LPnR+GNiEdS9N9WBrqkU5/ U5iAgC2FUHTwfWxJzMAs8du6yYUoSWewnpIlZXDKcD/+TnEzL0czFNW16stbrkCM R96RFfvoZ4q/jzw9FvFfrmXrEZdmxiASVYZgvlwV8TkAEubnCXubsXNj/Y9jG9yr hMOUN+OHfxjRny/Okq6qkCxVpGZaSANYHd4LTJ9Xcy/LwuNI2lWEK5HGgo9LOMyk TCwIKu5KS1PK9VGBfoWdcdbrs6Oyv0OrsCiWmF/a+kWFiqXSVSn7yCAghoUZTTAS obWO4g5BQaXkTZM/Z9neXZjR3DFg0ssKHbyRycpXftCkw8Rr1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGJsXUgJ66/utcYnp/0nIwGzUKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTZhZjlhYjktMmYzYi0z YzA4LTllNTEtZjc1YWQ3OTY4NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXitbCOTIPte5UF8rAA7HSXYRLNhDELaufrWXGgtKcuSGvlQjwZ8LfB ya2S+r6/9DgQLV4tX7NNZli69iJ8FYeunmlLrKDxT3DWB/NaFmVoT4urcwreBW9e wN9M83CxhaNA2a4iAA3ZMFgy94IxprYG+lmxEKhBF04ccXUHr/n2hszkuuCz9dpT poWDah66eHBTYoOf7G0tCgFfiaoWdJzG5j271vO97fs39GqjkMtrSbYtkjnhnktJ MdzYDq3az57SczVaOW9wpS7nBb3ey/3mgx4wxCswHdHyuTxKybNAOf3EJzCkGMGV Bn4+9qLHcYbaQjR6IdpRvaNhWsGOQQA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:36 2025 by rpki-client