$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c344ead8-00d4-3a66-9279-213e2429e7e2.roa File: c344ead8-00d4-3a66-9279-213e2429e7e2.roa (raw, json) Hash identifier: nYG7LEza9E/r+a7z2NfOFYxmureOnm4o6eCssqRiS7w= Subject key identifier: A0:19:44:A9:32:E0:0E:31:2E:E7:A1:62:73:DE:82:B5:6E:6A:DA:A9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858496FAF1EF7F421ED17D167C580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c344ead8-00d4-3a66-9279-213e2429e7e2.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397242 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:1e:f7:f4:21:ed:17:d1:67:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=6d89d3c6-ec1d-401e-aa98-b303be564c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:b6:7f:14:28:05:8b:f4:24:4e:37:34:97: 2a:e3:fe:71:98:76:be:3c:ca:b2:98:a2:ea:cb:c8: 2e:ee:1f:c7:33:56:23:35:d9:db:c3:18:d2:80:92: bc:5c:e3:f2:83:aa:88:88:27:96:c6:df:0b:5a:59: 88:3a:aa:ff:fc:0c:47:a7:b5:a9:f3:3c:a4:7a:84: cb:9c:d1:6f:ed:eb:e7:a2:ad:ea:85:83:46:9f:46: 48:b0:55:e7:bd:49:a0:27:9a:c4:42:45:03:22:f4: 22:93:23:ec:1f:1f:ac:a4:bc:f7:74:02:9f:6c:41: 09:41:d8:67:e4:15:5f:8f:da:a6:42:70:f2:4b:9e: 92:49:9d:8e:a4:b2:a2:03:70:0d:7b:67:6e:56:ad: bd:df:50:cc:da:a5:e5:78:e0:fd:0e:ad:bb:f9:5e: a9:2b:6f:78:26:c9:50:d7:c7:9d:2a:44:4c:b9:d9: ad:f3:10:fb:65:22:6f:49:7a:34:33:1d:33:b7:fa: 0a:02:62:44:c4:15:15:e2:d3:4b:43:b2:8d:26:fa: 69:fa:92:05:5d:19:1e:94:fe:58:42:2a:35:30:bd: 11:01:7f:50:3a:dc:92:12:1b:8e:98:cc:83:89:b4: 3d:12:79:d6:e8:6e:23:4e:43:86:d0:8e:6f:c4:50: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:44:A9:32:E0:0E:31:2E:E7:A1:62:73:DE:82:B5:6E:6A:DA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c344ead8-00d4-3a66-9279-213e2429e7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:87:99:26:34:4b:2b:97:b8:d3:99:49:ee:ef:cb:16:28:2c: f7:03:cd:0e:3d:ce:57:34:dd:dc:58:68:3c:a7:28:7f:c9:8f: ff:ba:b7:51:1d:f1:4e:51:04:37:c3:97:4b:3d:d5:7a:f8:89: 2f:ca:c5:21:63:b2:7f:0a:3b:da:f4:ae:bc:94:9d:4f:bf:6c: 72:cc:e0:7c:ad:0b:2a:c2:43:05:29:85:b6:05:d1:d6:6e:bd: 14:ae:6c:d1:bd:72:63:6b:2f:d2:82:88:0d:de:22:31:bb:1c: 46:f6:de:0e:90:20:31:98:ec:5d:70:1b:24:8e:74:46:be:d6: f9:a7:77:41:4a:1b:aa:48:23:f8:da:f3:4e:c7:09:ea:bc:db: f1:54:14:2a:5b:82:6b:2b:41:e2:49:3f:d1:6f:17:69:06:5a: f6:cc:35:ad:d6:d6:7e:c4:11:6d:36:f4:97:be:17:63:a7:f1: 53:48:56:bb:4b:00:b2:39:cc:65:e8:13:c9:7a:ad:2c:c0:31: 45:f8:32:05:b0:11:43:fd:08:a8:b6:80:1a:e4:8c:d3:c4:29: d6:ef:8e:0e:2b:3e:2d:86:73:3b:30:13:f3:ac:c2:e9:3a:a8: 1e:a8:ae:05:60:f3:ed:23:f6:f1:cb:4d:40:3c:05:8d:0d:6c: 4c:e3:6a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrx739CHtF9FnxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NmQ4OWQzYzYtZWMxZC00MDFlLWFhOTgtYjMwM2JlNTY0YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwW2fxQoBYv0JE43NJcq4/5xmHa+PMqymKLq y8gu7h/HM1YjNdnbwxjSgJK8XOPyg6qIiCeWxt8LWlmIOqr//AxHp7Wp8zykeoTL nNFv7evnoq3qhYNGn0ZIsFXnvUmgJ5rEQkUDIvQikyPsHx+spLz3dAKfbEEJQdhn 5BVfj9qmQnDyS56SSZ2OpLKiA3ANe2duVq2931DM2qXleOD9Dq27+V6pK294JslQ 18edKkRMudmt8xD7ZSJvSXo0Mx0zt/oKAmJExBUV4tNLQ7KNJvpp+pIFXRkelP5Y Qio1ML0RAX9QOtySEhuOmMyDibQ9EnnW6G4jTkOG0I5vxFBnLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAZRKky4A4xLuehYnPegrVuatqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzM0NGVhZDgtMDBkNC0z YTY2LTkyNzktMjEzZTI0MjllN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6HmSY0SyuXuNOZSe7vyxYoLPcDzQ49zlc03dxYaDynKH/Jj/+6t1Ed 8U5RBDfDl0s91Xr4iS/KxSFjsn8KO9r0rryUnU+/bHLM4HytCyrCQwUphbYF0dZu vRSubNG9cmNrL9KCiA3eIjG7HEb23g6QIDGY7F1wGySOdEa+1vmnd0FKG6pII/ja 807HCeq82/FUFCpbgmsrQeJJP9FvF2kGWvbMNa3W1n7EEW029Je+F2On8VNIVrtL ALI5zGXoE8l6rSzAMUX4MgWwEUP9CKi2gBrkjNPEKdbvjg4rPi2GczswE/Oswuk6 qB6orgVg8+0j9vHLTUA8BY0NbEzjakM= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:53 2025 by rpki-client