$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa File: a446430b-de4d-35ec-aebe-6e6358a16f7a.roa (raw, json) Hash identifier: ELKxAP0Ozx25lE5NzsNTTkBBE7BGNpaH/IXo3uz3gRk= Subject key identifier: 7B:54:6C:15:58:E8:12:DD:86:07:C5:C2:66:29:92:95:73:AF:F0:EF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5E667F5899A179611520 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397223 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5e:66:7f:58:99:a1:79:61:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=241fa509-d90a-4ea6-9aba-77a15437e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:e4:80:fa:7f:74:7b:fa:f1:d7:00:5b:ac: be:19:b4:8d:ae:e5:17:80:f5:bc:d9:1c:af:e3:ee: f2:ea:a8:65:2d:fb:5d:f3:6e:1c:85:80:60:a9:4b: eb:39:f0:b6:b6:77:ae:e9:10:ba:b3:fb:26:69:02: c5:d5:74:34:f3:28:03:a1:6a:8e:04:b9:cb:65:25: 75:9b:42:aa:93:e9:89:18:92:f8:bb:6e:80:90:09: cf:1d:f4:ca:4d:13:fb:e9:32:fa:63:1d:19:ae:28: 7a:b6:94:71:3c:35:9d:78:19:76:33:46:22:d3:e5: 2a:35:57:57:3d:f8:c2:45:80:df:0c:32:52:59:f3: 47:10:3d:70:6b:01:3d:78:e2:08:62:86:8e:b2:4f: 30:aa:f4:3d:59:81:98:06:c8:0f:30:fc:c4:36:e6: e2:90:7c:dc:9b:ff:72:ca:66:f9:1a:59:b6:bd:9c: e4:1f:42:47:4d:ea:03:06:44:67:81:20:12:97:af: 41:49:04:31:dd:85:9c:8b:2e:a8:da:a9:3d:87:01: 99:d3:16:06:6f:97:39:86:f5:8c:88:26:a4:a0:13: 43:97:d3:1c:5d:d3:c0:51:31:82:ed:e9:36:9a:90: 07:09:59:48:83:d5:42:75:80:78:90:16:0b:a4:72: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:54:6C:15:58:E8:12:DD:86:07:C5:C2:66:29:92:95:73:AF:F0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:de:2f:75:f9:65:9b:87:2b:42:4d:31:bc:6c:62:e4:3c:4b: 2e:cb:30:48:52:2e:3c:68:44:5f:bc:54:37:4d:20:97:45:7f: b5:6f:7b:f3:83:18:22:7c:dc:7c:b4:d3:25:81:d9:e0:bd:06: 76:b1:24:42:5e:89:fb:d7:7d:b8:8e:f1:e1:f8:6f:ae:58:86: 93:96:64:f2:72:9c:37:43:da:3c:b0:9e:2f:bd:7b:ea:2c:20: 18:00:83:0d:89:8c:da:40:f2:a3:47:78:6f:4c:de:97:d9:ff: c1:2f:cf:d0:a0:40:66:29:22:d1:7f:9b:a5:57:85:02:ce:c8: c5:88:b5:68:f7:25:cc:4c:77:0a:31:39:a0:4e:f3:16:03:16: f0:66:b9:79:9a:64:70:8c:7f:5e:f5:3e:e4:a3:26:ef:b7:47: 1a:a1:43:05:71:b0:d0:7d:b0:d8:66:19:05:95:1a:0a:f8:6f: d2:94:af:01:3e:32:05:b5:af:1d:89:2b:f8:55:02:be:6e:39: 5e:47:28:56:7b:53:63:9c:37:a7:65:d6:36:86:ea:00:82:39: 27:03:25:65:f6:fa:62:2e:0f:86:9d:06:11:71:5c:db:bb:f2: 8a:bc:fc:af:1a:73:49:05:48:1d:e6:e3:c2:91:2d:cf:56:0f: b0:dd:b8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz15mf1iZoXlhFSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjQxZmE1MDktZDkwYS00ZWE2LTlhYmEtNzdhMTU0MzdlMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7kgPp/dHv68dcAW6y+GbSNruUXgPW82Ryv 4+7y6qhlLftd824chYBgqUvrOfC2tneu6RC6s/smaQLF1XQ08ygDoWqOBLnLZSV1 m0Kqk+mJGJL4u26AkAnPHfTKTRP76TL6Yx0Zrih6tpRxPDWdeBl2M0Yi0+UqNVdX PfjCRYDfDDJSWfNHED1wawE9eOIIYoaOsk8wqvQ9WYGYBsgPMPzENubikHzcm/9y ymb5Glm2vZzkH0JHTeoDBkRngSASl69BSQQx3YWciy6o2qk9hwGZ0xYGb5c5hvWM iCakoBNDl9McXdPAUTGC7ek2mpAHCVlIg9VCdYB4kBYLpHJ1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtUbBVY6BLdhgfFwmYpkpVzr/DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ0NjQzMGItZGU0ZC0z NWVjLWFlYmUtNmU2MzU4YTE2ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPeL3X5ZZuHK0JNMbxsYuQ8Sy7LMEhSLjxoRF+8VDdNIJdFf7Vve/OD GCJ83Hy00yWB2eC9BnaxJEJeifvXfbiO8eH4b65YhpOWZPJynDdD2jywni+9e+os IBgAgw2JjNpA8qNHeG9M3pfZ/8Evz9CgQGYpItF/m6VXhQLOyMWItWj3JcxMdwox OaBO8xYDFvBmuXmaZHCMf171PuSjJu+3RxqhQwVxsNB9sNhmGQWVGgr4b9KUrwE+ MgW1rx2JK/hVAr5uOV5HKFZ7U2OcN6dl1jaG6gCCOScDJWX2+mIuD4adBhFxXNu7 8oq8/K8ac0kFSB3m48KRLc9WD7DduIk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:08 2025 by rpki-client