$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa File: c54232c1-2794-3896-a1dd-d80b71265aa1.roa (raw, json) Hash identifier: bCudclzR7c8amIlV0WXKak123aw2FaeJUx4Il8EK71Y= Subject key identifier: 56:FD:23:C0:E0:EA:99:C3:AF:55:AB:F3:68:87:32:79:FF:20:D0:3F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FFCA56484E2B65267329C Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397218 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:fc:a5:64:84:e2:b6:52:67:32:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=401cc0e2-2d7b-4be3-b23e-9e62557e659a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:99:0a:5f:8f:15:d6:1f:56:e4:6e:84:ed: fd:ee:fd:33:fe:e2:da:1f:c7:07:46:66:d3:20:34: c2:c3:fe:11:08:3d:53:5d:aa:96:3b:03:2b:3e:74: 9d:55:88:0e:5a:d6:3b:0a:56:d3:d9:c7:4f:b3:18: d6:f5:54:c8:b4:02:e3:7e:78:d8:e7:09:ef:3b:0b: d8:6f:25:6e:2f:3b:bb:c5:02:ab:d6:8c:76:68:41: 63:80:ed:92:0e:71:78:2f:8b:2c:58:3a:03:a9:f8: 70:ee:27:53:36:d9:b5:58:84:3b:de:4d:24:6c:49: 84:e5:51:f9:81:27:ea:f5:e8:62:7d:ac:9a:8f:39: 9c:96:29:99:70:7a:06:47:0b:fe:e5:40:1c:5c:7a: 38:fd:76:0b:bf:0e:b1:d8:9a:25:98:80:ee:33:f1: c7:5b:c6:e7:a4:50:81:53:c8:6e:7f:32:7d:9a:39: 4a:7c:10:87:d3:c5:ab:d5:65:04:37:83:92:e2:8c: 76:64:f0:03:06:03:a1:00:b1:ae:57:a6:07:4b:8c: b6:b2:b0:23:3c:3a:9b:5e:f2:05:78:e9:76:0d:50: 6f:14:96:9d:0c:34:eb:9f:f1:42:d0:6b:13:51:18: e8:62:9d:05:a7:a2:ea:3f:10:8f:a5:7f:bf:45:52: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FD:23:C0:E0:EA:99:C3:AF:55:AB:F3:68:87:32:79:FF:20:D0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f0:c5:3a:40:5c:10:5f:3f:09:87:5c:7a:fc:c9:df:fb:88: e4:79:17:09:04:b0:ef:05:41:a5:0e:15:44:d0:6a:51:f3:a2: cf:09:f5:98:f8:36:34:a7:a2:98:94:f6:b9:b4:be:f4:8c:3d: 26:50:4b:5e:91:32:c2:16:df:77:2b:14:50:86:e2:ef:8c:44: dd:02:a8:8f:f7:40:5a:c3:ee:f1:ff:74:30:df:2f:a6:b5:d9: 78:e8:ae:33:db:b0:41:f8:b6:c2:a9:74:c8:6d:90:c5:34:26: b4:65:62:17:cf:57:ae:27:6b:cf:03:75:13:db:51:bd:22:10: 67:4c:e2:be:0b:af:b5:c4:df:bd:a1:e8:6c:59:d5:bd:03:1b: bd:4d:a3:a2:9e:b9:34:5a:53:db:45:65:cd:bf:f1:e7:21:d0: a8:2e:16:cb:60:23:53:f8:44:9e:7e:d0:94:7d:3e:33:31:26: 4e:7d:24:f4:16:42:d3:cd:4e:a8:04:37:8c:2a:55:f2:12:11: d6:90:a5:c3:69:30:e7:11:4f:e7:77:d2:30:54:52:03:e9:59: 9d:78:01:33:55:ed:9e:1e:34:91:ab:9b:8b:1d:76:bb:3c:a7: 3a:11:b9:91:6c:f0:d6:48:cf:84:e5:5c:cf:87:26:1d:9e:87: 77:56:07:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/ylZITitlJnMpwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDAxY2MwZTItMmQ3Yi00YmUzLWIyM2UtOWU2MjU1N2U2NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlyZCl+PFdYfVuRuhO397v0z/uLaH8cHRmbT IDTCw/4RCD1TXaqWOwMrPnSdVYgOWtY7ClbT2cdPsxjW9VTItALjfnjY5wnvOwvY byVuLzu7xQKr1ox2aEFjgO2SDnF4L4ssWDoDqfhw7idTNtm1WIQ73k0kbEmE5VH5 gSfq9ehifayajzmclimZcHoGRwv+5UAcXHo4/XYLvw6x2JolmIDuM/HHW8bnpFCB U8hufzJ9mjlKfBCH08Wr1WUEN4OS4ox2ZPADBgOhALGuV6YHS4y2srAjPDqbXvIF eOl2DVBvFJadDDTrn/FC0GsTURjoYp0Fp6LqPxCPpX+/RVIjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb9I8Dg6pnDr1Wr82iHMnn/INA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzU0MjMyYzEtMjc5NC0z ODk2LWExZGQtZDgwYjcxMjY1YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzwxTpAXBBfPwmHXHr8yd/7iOR5FwkEsO8FQaUOFUTQalHzos8J9Zj4 NjSnopiU9rm0vvSMPSZQS16RMsIW33crFFCG4u+MRN0CqI/3QFrD7vH/dDDfL6a1 2XjorjPbsEH4tsKpdMhtkMU0JrRlYhfPV64na88DdRPbUb0iEGdM4r4Lr7XE372h 6GxZ1b0DG71No6KeuTRaU9tFZc2/8ech0KguFstgI1P4RJ5+0JR9PjMxJk59JPQW QtPNTqgEN4wqVfISEdaQpcNpMOcRT+d30jBUUgPpWZ14ATNV7Z4eNJGrm4sddrs8 pzoRuZFs8NZIz4TlXM+HJh2eh3dWB4A= -----END CERTIFICATE-----Generated at Mon Jun 16 02:16:06 2025 by rpki-client