$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa File: bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa (raw, json) Hash identifier: nqG8BKT4ZxvtWDaDzc1cY8M6kedadz8p1f36YUI+2H8= Subject key identifier: 2B:4C:55:99:4A:AB:CF:34:22:70:4F:5C:6C:74:98:8D:E9:CE:90:FE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF6255BB101DF0D0227900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397226 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:62:55:bb:10:1d:f0:d0:22:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=071c234e-019e-4139-90fc-63e08bf9917e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:c0:10:33:dd:b3:5e:08:02:7e:f8:75:43: 27:35:4d:58:d4:f9:7b:f1:61:20:82:3a:c6:79:09: 56:fd:7d:6f:18:43:26:23:75:75:6f:2d:78:62:8a: 4f:05:95:b8:e8:0b:ec:5a:cf:a0:b5:b3:ad:b3:3c: d3:a2:b1:06:e1:f2:70:90:d9:6f:32:6e:94:87:cf: d7:41:90:8d:08:69:6e:93:48:72:de:28:f2:c8:f5: c5:42:5e:7a:9d:13:8b:79:81:30:0f:07:da:99:c9: ec:52:1a:97:d5:48:2d:40:93:ce:17:f4:91:3d:5a: 0f:f1:11:df:d3:3f:0e:91:e5:b5:67:11:a0:1c:5c: c4:81:0c:62:f3:a2:38:28:9d:21:cc:36:a5:51:1e: dc:88:45:91:6b:c4:48:f8:f9:05:88:59:36:ec:0f: c7:35:ba:c7:64:f6:0c:ef:99:cc:05:79:19:f1:d9: 82:73:ca:87:62:05:4a:a6:d2:a6:68:54:fc:d0:1f: 18:81:c4:35:05:55:90:46:5a:db:a1:76:d0:b9:85: 40:95:39:c7:89:c9:98:1b:6f:5a:43:52:20:ec:77: 60:aa:6a:d6:6c:1a:73:01:dc:82:cc:3b:3a:6c:cf: e7:93:ad:2c:db:30:9e:ec:5e:7b:2e:46:2c:60:b2: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:55:99:4A:AB:CF:34:22:70:4F:5C:6C:74:98:8D:E9:CE:90:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:75:d2:38:eb:25:29:0c:51:15:37:59:9d:2d:b9:b3:4e: e5:5a:13:a9:6c:34:58:ec:89:b7:f3:bc:6b:dd:e8:12:e9:a6: 84:e9:69:65:d4:a7:59:fe:c5:12:f5:09:8e:ed:39:0a:20:16: 4d:dd:8e:ff:18:39:31:0c:6a:cc:bf:c5:82:17:0b:bb:e0:08: 2a:b6:4e:3e:b8:52:db:7a:56:66:e1:5b:77:2a:89:3a:b4:d3: 47:2c:46:1a:b0:5d:04:8e:f6:d1:24:04:16:95:cd:32:74:38: 1f:7f:7a:73:a9:40:d5:6a:07:76:7c:0a:03:a9:b7:34:2a:08: 05:cc:8b:3d:4d:e5:e8:ec:72:57:a8:7c:c3:3b:31:df:5a:04: f7:b1:28:64:64:58:18:a0:4f:32:62:38:20:af:03:01:0c:46: 70:8d:4b:15:a5:f1:f3:21:0b:ef:b1:81:2a:43:ff:3b:7a:c7: 84:f9:81:44:e3:32:41:0b:a7:30:78:62:99:1b:64:ad:2d:56: b1:89:57:ee:72:ae:1b:4b:c6:5c:c7:98:2b:a0:47:36:7e:79: 05:23:34:17:1c:ad:be:25:77:c5:4e:82:ce:13:bb:95:48:c8: fc:e1:f0:fd:ff:4b:f9:f2:37:e1:4d:0f:22:a7:f1:8c:87:15: 41:89:c7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2JVuxAd8NAieQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDcxYzIzNGUtMDE5ZS00MTM5LTkwZmMtNjNlMDhiZjk5MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTzAEDPds14IAn74dUMnNU1Y1Pl78WEggjrG eQlW/X1vGEMmI3V1by14YopPBZW46AvsWs+gtbOtszzTorEG4fJwkNlvMm6Uh8/X QZCNCGluk0hy3ijyyPXFQl56nROLeYEwDwfamcnsUhqX1UgtQJPOF/SRPVoP8RHf 0z8OkeW1ZxGgHFzEgQxi86I4KJ0hzDalUR7ciEWRa8RI+PkFiFk27A/HNbrHZPYM 75nMBXkZ8dmCc8qHYgVKptKmaFT80B8YgcQ1BVWQRlrboXbQuYVAlTnHicmYG29a Q1Ig7HdgqmrWbBpzAdyCzDs6bM/nk60s2zCe7F57LkYsYLLuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtMVZlKq880InBPXGx0mI3pzpD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmYxZjhjNTEtNWY5ZS0z NmNjLTk4ODAtNGJjZDU2OWFkMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqFddI46yUpDFEVN1mdLbmzTuVaE6lsNFjsibfzvGvd6BLppoTpaWXU p1n+xRL1CY7tOQogFk3djv8YOTEMasy/xYIXC7vgCCq2Tj64Utt6VmbhW3cqiTq0 00csRhqwXQSO9tEkBBaVzTJ0OB9/enOpQNVqB3Z8CgOptzQqCAXMiz1N5ejscleo fMM7Md9aBPexKGRkWBigTzJiOCCvAwEMRnCNSxWl8fMhC++xgSpD/zt6x4T5gUTj MkELpzB4YpkbZK0tVrGJV+5yrhtLxlzHmCugRzZ+eQUjNBccrb4ld8VOgs4Tu5VI yPzh8P3/S/nyN+FNDyKn8YyHFUGJx1U= -----END CERTIFICATE-----Generated at Sat Apr 26 22:37:50 2025 by rpki-client