$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c657fde0-f68e-39a0-9900-222ed2d4b899.roa File: c657fde0-f68e-39a0-9900-222ed2d4b899.roa (raw, json) Hash identifier: aNbUb48PtdvwZkxcx9fApU5pu0e6V/Ty5Fkpo3xNGyc= Subject key identifier: D6:2E:D2:E6:53:4C:56:7B:63:2A:43:F1:68:FF:66:18:C2:FF:3A:BC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A1422BBD3227F04E0B400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c657fde0-f68e-39a0-9900-222ed2d4b899.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397229 IP address blocks: 156.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:14:22:bb:d3:22:7f:04:e0:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=f8bdb967-a026-4b08-b6a2-809805dd4b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:fa:6d:a9:4c:7f:c4:fd:65:31:95:85:16: 17:3d:22:65:e5:98:af:c1:72:53:c6:f1:15:3c:f0: bf:32:3c:a7:86:f2:a2:de:cd:15:61:b9:b8:60:64: f3:3f:6a:cf:05:c7:10:35:d9:02:c9:14:2c:dc:d2: b8:0a:9d:23:50:1e:da:cf:b5:bc:ad:0a:4f:03:d1: f5:32:cb:3e:f5:f2:ea:7c:88:c6:24:bc:64:a2:f3: 86:a3:af:28:a0:77:f4:fb:95:18:1b:a3:68:92:d9: 51:99:5c:01:0a:48:92:03:87:29:36:9b:37:3c:69: ba:09:67:8b:f4:bf:6e:e5:51:8b:1a:ec:d2:78:a9: c4:b9:74:0c:36:36:82:35:d9:69:0b:ad:f3:cb:2c: 8d:de:c4:09:9f:36:40:2e:e0:8c:a2:90:03:64:26: 49:76:27:18:20:7e:86:44:6a:02:eb:6b:66:a4:e4: 40:f1:dd:15:e7:1e:9a:ab:0d:70:fd:66:cb:63:0a: b4:b3:2f:80:3f:f4:64:15:7b:43:a0:c3:ef:bb:07: 5f:da:6b:7c:28:b6:90:4e:e7:7d:47:35:b0:3c:6c: 23:16:2f:73:2e:bf:c5:28:ad:1d:36:1e:80:65:7d: b8:25:54:13:b7:87:c8:b7:7e:69:d2:f6:08:e6:22: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:D2:E6:53:4C:56:7B:63:2A:43:F1:68:FF:66:18:C2:FF:3A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c657fde0-f68e-39a0-9900-222ed2d4b899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:10:08:03:6c:6b:09:d4:08:c9:c0:a8:5d:71:91:de:69:c5: 21:65:2e:5e:0c:bb:78:c2:69:2a:0d:d1:13:2f:82:48:1d:c5: 97:d9:c7:72:20:be:13:c7:fa:5b:37:62:be:4a:26:62:ae:f9: 0a:97:8b:bd:a3:27:4b:24:b6:9f:35:25:99:b9:ed:59:b4:85: 33:45:03:e7:0c:0e:1f:f1:6b:7a:0b:a4:c1:53:a5:8e:57:25: 39:67:a6:62:6d:10:6b:7a:54:fd:15:5c:11:2d:47:ac:a6:84: 69:7f:b9:25:77:9d:e3:a9:f2:ce:64:2e:cb:66:14:12:32:31: 47:7a:7a:03:52:19:56:df:84:99:7e:c4:fc:15:67:bc:2b:c9: 0f:96:4a:17:87:b7:85:0d:94:aa:23:02:85:09:f7:82:b1:8d: 4e:7d:18:ab:49:26:01:cb:a5:f3:73:f5:cd:ac:66:83:bf:4b: 01:3d:b8:30:58:19:04:78:13:8b:3f:2d:69:f8:8d:89:de:7a: 07:5e:ad:23:59:d3:78:a3:ae:17:4e:04:54:a7:98:cc:36:2a: e8:55:84:38:79:dd:cd:45:00:ed:30:f7:c6:3e:67:4c:fb:9b: 86:49:a8:92:3f:a1:a0:7d:5d:79:37:d3:5e:e6:8a:39:0a:8c: 52:a4:9a:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhQiu9MifwTgtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZjhiZGI5NjctYTAyNi00YjA4LWI2YTItODA5ODA1ZGQ0YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIH6balMf8T9ZTGVhRYXPSJl5ZivwXJTxvEV PPC/MjynhvKi3s0VYbm4YGTzP2rPBccQNdkCyRQs3NK4Cp0jUB7az7W8rQpPA9H1 Mss+9fLqfIjGJLxkovOGo68ooHf0+5UYG6NoktlRmVwBCkiSA4cpNps3PGm6CWeL 9L9u5VGLGuzSeKnEuXQMNjaCNdlpC63zyyyN3sQJnzZALuCMopADZCZJdicYIH6G RGoC62tmpORA8d0V5x6aqw1w/WbLYwq0sy+AP/RkFXtDoMPvuwdf2mt8KLaQTud9 RzWwPGwjFi9zLr/FKK0dNh6AZX24JVQTt4fIt35p0vYI5iIpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYu0uZTTFZ7YypD8Wj/ZhjC/zq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzY1N2ZkZTAtZjY4ZS0z OWEwLTk5MDAtMjIyZWQyZDRiODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMQCANsawnUCMnAqF1xkd5pxSFlLl4Mu3jCaSoN0RMvgkgdxZfZx3Ig vhPH+ls3Yr5KJmKu+QqXi72jJ0sktp81JZm57Vm0hTNFA+cMDh/xa3oLpMFTpY5X JTlnpmJtEGt6VP0VXBEtR6ymhGl/uSV3neOp8s5kLstmFBIyMUd6egNSGVbfhJl+ xPwVZ7wryQ+WSheHt4UNlKojAoUJ94KxjU59GKtJJgHLpfNz9c2sZoO/SwE9uDBY GQR4E4s/LWn4jYneegderSNZ03ijrhdOBFSnmMw2KuhVhDh53c1FAO0w98Y+Z0z7 m4ZJqJI/oaB9XXk3017mijkKjFKkmo4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:42 2025 by rpki-client