$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa File: a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa (raw, json) Hash identifier: +dkXmLyxqeV0MWx3b0+YLUBXajHS5MrenFuoSH50SgE= Subject key identifier: A4:80:52:25:7A:11:EB:EE:37:D7:CB:AD:99:C3:02:82:9D:25:F3:C8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59F262B695A331F7ABA340 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397236 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:f2:62:b6:95:a3:31:f7:ab:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=c7c63424-b2e6-4e39-bad2-51d2c1c72937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:d5:04:3f:5c:91:0a:8d:d5:1d:9f:08:db: af:79:9f:af:64:ea:c8:e5:fa:83:49:ad:9f:c6:54: ef:85:1c:2b:a3:fa:3d:e5:55:95:40:db:95:02:66: 45:75:e8:b0:1f:e8:5a:9d:5b:bf:f6:bc:4f:b6:d7: ad:44:e7:35:82:90:a6:54:c9:1d:1d:5e:87:ec:61: f4:c0:be:bc:29:76:03:ee:15:14:9d:ba:90:09:d0: e9:28:db:aa:b2:79:c1:a0:e1:7c:fd:5a:bb:b0:cb: 93:88:68:86:91:61:79:ab:76:78:b8:ec:62:89:d3: 65:fb:dd:ab:94:0e:9c:a9:2a:4f:60:80:0a:bf:29: e8:6d:0c:ec:1c:3b:dc:bd:1b:4e:e3:b8:13:46:0b: e2:57:e6:62:91:65:9f:34:fc:f7:27:c9:e3:00:58: bb:5a:7e:07:cf:65:38:c0:dc:db:46:cd:aa:bf:ad: 56:ca:a9:82:5b:a8:be:84:3d:79:78:f4:7d:40:da: c7:85:08:b1:f2:38:3e:66:c6:1c:6b:00:b4:31:90: 4e:5d:db:07:9d:13:8b:63:97:8e:87:5d:1f:9f:eb: 53:c2:90:65:64:21:93:d8:73:c1:0c:57:e0:c4:a8: 3b:ae:3f:13:2d:80:53:04:4e:7e:cb:29:e5:47:67: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:52:25:7A:11:EB:EE:37:D7:CB:AD:99:C3:02:82:9D:25:F3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c7:c6:3b:82:16:21:97:64:50:00:75:dc:9f:1c:13:fa:ab: cd:74:cc:26:d9:53:c6:5c:b0:de:ef:20:f9:12:31:b5:c8:3b: 95:b6:21:35:e2:d6:b1:bc:36:e0:ee:eb:1c:a5:c3:3c:0d:30: 04:79:da:2e:6b:73:de:3d:16:1e:43:bb:61:84:65:9a:c2:14: 56:6b:be:d9:16:57:b3:6c:50:9e:cb:e5:e5:1a:4e:34:ad:8e: b1:4d:66:5c:9f:88:46:ee:73:1e:47:4c:21:08:9f:b8:b2:af: 2b:f8:a6:8f:3d:fe:16:66:04:48:37:5f:b6:44:4e:08:32:32: bd:a2:fa:b2:db:46:d2:7e:55:a8:87:b1:4d:ac:eb:34:88:84: f6:a5:9e:d2:fb:c7:0f:72:66:9e:2d:cc:57:1d:9f:2c:45:f6: 2a:59:fd:08:5c:b9:06:22:ec:0d:52:8d:c4:30:f9:d7:dd:a0: 47:d0:bd:a7:f1:b5:f0:9b:3e:87:49:a6:52:5b:42:25:97:35: 77:73:09:96:05:f5:ea:5b:46:92:d0:21:97:4d:ef:fd:e3:e8: bd:a4:ce:f2:37:f8:fb:f7:d0:8f:c3:aa:ca:69:fd:33:e8:ad: 37:bd:a7:67:b9:62:02:9c:4f:5d:0a:a5:24:9b:0a:89:09:ee: cf:9c:8e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfJitpWjMfero0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YzdjNjM0MjQtYjJlNi00ZTM5LWJhZDItNTFkMmMxYzcyOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1DVBD9ckQqN1R2fCNuveZ+vZOrI5fqDSa2f xlTvhRwro/o95VWVQNuVAmZFdeiwH+hanVu/9rxPttetROc1gpCmVMkdHV6H7GH0 wL68KXYD7hUUnbqQCdDpKNuqsnnBoOF8/Vq7sMuTiGiGkWF5q3Z4uOxiidNl+92r lA6cqSpPYIAKvynobQzsHDvcvRtO47gTRgviV+ZikWWfNPz3J8njAFi7Wn4Hz2U4 wNzbRs2qv61WyqmCW6i+hD15ePR9QNrHhQix8jg+ZsYcawC0MZBOXdsHnROLY5eO h10fn+tTwpBlZCGT2HPBDFfgxKg7rj8TLYBTBE5+yynlR2dBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSAUiV6EevuN9fLrZnDAoKdJfPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ4Zjc4YTAtOWE5YS0z YWEyLWE4MzctYmFjODQyZTZlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7HxjuCFiGXZFAAddyfHBP6q810zCbZU8ZcsN7vIPkSMbXIO5W2ITXi 1rG8NuDu6xylwzwNMAR52i5rc949Fh5Du2GEZZrCFFZrvtkWV7NsUJ7L5eUaTjSt jrFNZlyfiEbucx5HTCEIn7iyryv4po89/hZmBEg3X7ZETggyMr2i+rLbRtJ+VaiH sU2s6zSIhPalntL7xw9yZp4tzFcdnyxF9ipZ/QhcuQYi7A1SjcQw+dfdoEfQvafx tfCbPodJplJbQiWXNXdzCZYF9epbRpLQIZdN7/3j6L2kzvI3+Pv30I/Dqspp/TPo rTe9p2e5YgKcT10KpSSbCokJ7s+cjg0= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:51 2025 by rpki-client