$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b145a0f6-4705-3426-9ae8-2909fc110739.roa File: b145a0f6-4705-3426-9ae8-2909fc110739.roa (raw, json) Hash identifier: m6bktVDGPQsCHG5L0viBzmCi4xxIoAMYCwUg/TCPyyU= Subject key identifier: 78:B3:0E:9F:CE:8E:09:C0:73:91:61:C2:F3:F7:2D:B7:A3:08:74:A0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A00FB65C6D171B8B01120 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b145a0f6-4705-3426-9ae8-2909fc110739.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397220 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:00:fb:65:c6:d1:71:b8:b0:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=14f0b1fa-b9b7-4cee-b586-b52955ce0040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:ca:99:c5:70:bb:f8:db:bb:bc:c2:bf:f6: 21:5d:65:a7:12:e4:fe:a2:b7:75:97:5b:4a:6c:73: e3:f8:16:52:99:9f:3d:22:ad:5b:cf:a8:f9:f0:9d: 70:ee:2c:9c:f0:f1:05:0f:b1:85:5c:18:9e:4d:da: 15:57:2d:d2:8f:fa:a8:be:41:91:ee:bb:e9:78:95: a6:d3:73:a8:dd:50:5d:e0:84:7b:ea:b6:ae:c2:c1: 24:5d:1d:d9:82:c1:32:e5:36:4e:72:49:36:ed:68: 90:cd:ed:5e:92:2a:79:f8:5b:9b:bc:e2:cb:c5:a5: 3d:6d:f2:f7:9f:15:e5:16:c1:3f:62:04:66:9a:e0: 2d:0a:e0:80:51:fd:ea:2d:16:5b:38:94:5a:81:e2: 6f:b8:c3:24:0b:3d:80:3d:c3:c2:3b:aa:a6:68:aa: c6:71:9f:39:e0:76:90:7b:f5:ad:bf:4e:77:5a:01: d9:ff:5d:cc:22:21:93:54:a9:6d:0c:44:1d:77:50: 9c:3a:c0:81:0e:4d:aa:dc:23:42:60:45:f2:8b:ce: a3:17:38:64:66:16:dc:08:c8:36:13:6d:0e:e3:6d: b9:2b:32:34:cd:f5:40:63:54:b5:2e:b9:e1:33:0b: ee:e0:7a:5d:58:1d:fe:73:ae:f7:33:20:6c:0d:b3: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B3:0E:9F:CE:8E:09:C0:73:91:61:C2:F3:F7:2D:B7:A3:08:74:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b145a0f6-4705-3426-9ae8-2909fc110739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5c:8a:f1:45:88:af:53:8c:d2:ac:72:02:6b:fb:17:6e:88: 18:4f:da:80:1b:b5:95:fa:0b:57:58:9c:94:87:97:d8:f3:58: 77:72:b7:4a:91:de:e4:d4:12:90:22:b0:dd:47:d0:82:98:ee: 1d:f5:fd:28:5d:80:c3:50:4a:c9:43:b1:98:1d:17:9f:48:4c: e4:26:96:b9:23:55:be:d2:fe:76:5e:36:16:bc:1f:a9:08:ce: a1:dd:cd:57:c7:98:52:c5:47:aa:4e:48:c4:7b:b8:ce:16:a8: 74:31:83:8a:4f:9e:ea:45:c7:07:16:d0:d1:8c:05:4d:47:78: a5:d2:5c:08:63:8a:45:fe:a6:6d:14:79:8c:be:ad:3b:be:2e: 41:82:98:19:a0:3f:23:97:09:d6:99:38:a3:2b:f1:5e:b2:88: 48:95:32:c4:4b:68:8c:17:2e:25:a9:51:19:79:0a:32:bf:2e: 91:3c:f8:5f:db:de:53:53:01:b7:13:5b:2d:98:f2:40:0d:17: c2:56:dc:38:3f:d0:00:db:ca:15:38:85:e0:e8:ca:ef:60:7c: f7:d1:92:c2:61:47:32:f0:26:f5:f6:51:3a:05:56:53:4e:14: 26:90:d2:79:b2:2a:d8:cd:bb:17:0b:4b:43:09:d1:d3:e8:d7: cb:7e:1d:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgD7ZcbRcbiwESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MTRmMGIxZmEtYjliNy00Y2VlLWI1ODYtYjUyOTU1Y2UwMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3nKmcVwu/jbu7zCv/YhXWWnEuT+ord1l1tK bHPj+BZSmZ89Iq1bz6j58J1w7iyc8PEFD7GFXBieTdoVVy3Sj/qovkGR7rvpeJWm 03Oo3VBd4IR76rauwsEkXR3ZgsEy5TZOckk27WiQze1ekip5+FubvOLLxaU9bfL3 nxXlFsE/YgRmmuAtCuCAUf3qLRZbOJRageJvuMMkCz2APcPCO6qmaKrGcZ854HaQ e/Wtv053WgHZ/13MIiGTVKltDEQdd1CcOsCBDk2q3CNCYEXyi86jFzhkZhbcCMg2 E20O4225KzI0zfVAY1S1LrnhMwvu4HpdWB3+c673MyBsDbNIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHizDp/OjgnAc5FhwvP3LbejCHSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjE0NWEwZjYtNDcwNS0z NDI2LTlhZTgtMjkwOWZjMTEwNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFcivFFiK9TjNKscgJr+xduiBhP2oAbtZX6C1dYnJSHl9jzWHdyt0qR 3uTUEpAisN1H0IKY7h31/ShdgMNQSslDsZgdF59ITOQmlrkjVb7S/nZeNha8H6kI zqHdzVfHmFLFR6pOSMR7uM4WqHQxg4pPnupFxwcW0NGMBU1HeKXSXAhjikX+pm0U eYy+rTu+LkGCmBmgPyOXCdaZOKMr8V6yiEiVMsRLaIwXLiWpURl5CjK/LpE8+F/b 3lNTAbcTWy2Y8kANF8JW3Dg/0ADbyhU4heDoyu9gfPfRksJhRzLwJvX2UToFVlNO FCaQ0nmyKtjNuxcLS0MJ0dPo18t+HZs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:47 2025 by rpki-client