$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4713a-59f7-3e8e-ad46-f192df7f16d7.roa File: c8a4713a-59f7-3e8e-ad46-f192df7f16d7.roa (raw, json) Hash identifier: JBk+I/Rm2tqenMYmmAyn8XQe7y5CrxQN0qTRRlF93Og= Subject key identifier: 85:6C:20:17:AC:C4:3B:4B:E9:5B:C9:65:7C:62:45:C9:9E:C9:60:13 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FF7D53CA20AFDAC07FE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4713a-59f7-3e8e-ad46-f192df7f16d7.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397235 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:f7:d5:3c:a2:0a:fd:ac:07:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1944027e-1d45-4b62-a7cd-fcbd3d62ed71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:3f:c7:80:91:8b:7f:4a:0d:50:49:8a:ba: 7e:8b:e1:31:10:cb:d7:1f:05:e2:88:ab:00:6c:83: 0a:c2:99:63:79:11:5c:bd:89:1e:0a:74:3b:27:5b: db:db:47:1c:76:d2:1a:68:5b:82:db:33:16:fd:48: c9:07:f9:b6:23:32:0e:f9:d1:53:ce:34:d8:bc:0e: b3:34:25:eb:9b:42:ee:77:6a:38:98:37:be:62:f7: fa:96:4f:2a:2c:09:01:20:37:64:61:06:b0:be:72: 69:3a:4a:cd:d4:3e:14:bf:d4:dd:53:91:c3:32:b5: 45:f1:1b:92:9c:ea:b5:bd:ed:80:2b:c3:7f:45:72: 80:d1:08:6c:f3:ee:8f:0e:ed:99:32:6e:61:39:8e: 31:e8:fd:0b:60:01:be:01:b7:c4:70:0c:da:1e:35: 91:0f:cd:cd:88:5c:2b:5e:e1:f1:79:2f:73:59:01: 48:c7:c2:81:b7:0a:29:92:8e:ef:e9:4b:a7:88:fa: 8c:4d:56:c6:6c:13:84:a9:35:0a:c6:6b:2d:56:84: 16:9f:08:1f:53:34:fc:57:41:06:3f:b9:77:94:b6: d2:fa:50:70:e2:c6:b3:d6:f1:81:40:0c:8e:32:1b: b9:6e:68:a0:62:e4:d9:3b:16:ab:87:3b:4c:2c:93: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:20:17:AC:C4:3B:4B:E9:5B:C9:65:7C:62:45:C9:9E:C9:60:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4713a-59f7-3e8e-ad46-f192df7f16d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b6:7e:06:8f:f1:e5:d5:1a:c7:6e:0e:1a:60:11:01:37:fd: 3e:ad:03:7e:ab:89:a1:e7:0e:87:ff:56:f8:59:80:94:c2:b2: 51:97:e1:74:9d:60:0d:d0:55:71:55:7e:82:d8:9c:3a:6d:40: bf:b8:a6:4c:4d:3e:71:1d:2d:e4:3b:bd:8e:62:69:80:81:a0: f4:c1:ed:8a:79:b0:fd:f3:9e:0a:30:0d:01:66:91:bc:f6:0a: e1:97:fd:d9:42:45:b5:6d:f6:6e:83:b5:11:9e:c3:d7:36:8c: c1:41:46:a3:fa:8f:c5:b6:75:ef:ca:76:47:1e:56:54:79:0a: 96:b7:16:85:80:9d:6d:9b:0e:27:e7:5a:fb:c3:92:84:72:49: a1:f0:d5:da:24:dd:98:d8:64:76:33:e8:34:f1:2f:e1:83:44: fb:da:bb:8c:b9:70:3c:a8:47:89:57:31:00:fb:dd:6a:e0:18: b7:b4:0f:2c:18:e6:90:04:de:89:2a:12:5c:44:30:e0:98:ad: 33:6b:60:06:cd:c8:3e:2e:9a:51:3c:b5:13:f4:e5:b1:2b:5d: 6b:8f:70:7a:42:92:8d:9e:67:75:83:b9:3b:c7:d8:21:76:5e: 91:c6:fa:74:04:1f:35:e3:bb:49:e7:b3:d0:61:7e:29:0a:18: 58:4c:53:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/fVPKIK/awH/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MTk0NDAyN2UtMWQ0NS00YjYyLWE3Y2QtZmNiZDNkNjJlZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbs/x4CRi39KDVBJirp+i+ExEMvXHwXiiKsA bIMKwpljeRFcvYkeCnQ7J1vb20ccdtIaaFuC2zMW/UjJB/m2IzIO+dFTzjTYvA6z NCXrm0Lud2o4mDe+Yvf6lk8qLAkBIDdkYQawvnJpOkrN1D4Uv9TdU5HDMrVF8RuS nOq1ve2AK8N/RXKA0Qhs8+6PDu2ZMm5hOY4x6P0LYAG+AbfEcAzaHjWRD83NiFwr XuHxeS9zWQFIx8KBtwopko7v6UuniPqMTVbGbBOEqTUKxmstVoQWnwgfUzT8V0EG P7l3lLbS+lBw4saz1vGBQAyOMhu5bmigYuTZOxarhztMLJPfiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVsIBesxDtL6VvJZXxiRcmeyWATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzhhNDcxM2EtNTlmNy0z ZThlLWFkNDYtZjE5MmRmN2YxNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa2fgaP8eXVGsduDhpgEQE3/T6tA36riaHnDof/VvhZgJTCslGX4XSd YA3QVXFVfoLYnDptQL+4pkxNPnEdLeQ7vY5iaYCBoPTB7Yp5sP3zngowDQFmkbz2 CuGX/dlCRbVt9m6DtRGew9c2jMFBRqP6j8W2de/KdkceVlR5Cpa3FoWAnW2bDifn WvvDkoRySaHw1dok3ZjYZHYz6DTxL+GDRPvau4y5cDyoR4lXMQD73WrgGLe0DywY 5pAE3okqElxEMOCYrTNrYAbNyD4umlE8tRP05bErXWuPcHpCko2eZ3WDuTvH2CF2 XpHG+nQEHzXju0nns9BhfikKGFhMUzA= -----END CERTIFICATE-----Generated at Mon Jun 16 06:17:30 2025 by rpki-client