$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa File: cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa (raw, json) Hash identifier: bqRmDiiwjFwKOk1a0hMrRh8vr9/D8I1BIIsac7fKjnc= Subject key identifier: 4D:87:60:61:DC:A7:49:F6:B5:51:59:9C:11:C5:46:47:AD:B2:63:82 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A2ABAF4CCBDD26FD4C71BEB50 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 397219 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f4:cc:bd:d2:6f:d4:c7:1b:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=40628767-3355-4d3c-a1bb-4bef0075b0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:01:e8:2b:b1:a2:8d:71:c4:69:43:aa:42:c4: 50:cf:90:8f:49:ce:c1:98:ad:7e:32:64:78:14:60: 19:bc:a4:20:4a:06:64:36:11:b7:4d:a7:d0:1e:e3: 0a:44:21:d2:30:31:a7:20:14:a1:26:e1:5f:94:c2: b1:e2:33:23:e5:a2:93:25:81:24:70:18:90:2a:35: 66:a7:db:f0:eb:df:ab:1b:c0:55:cf:33:d4:09:d1: 72:30:5d:c7:2a:82:eb:38:87:b5:06:7e:c6:9f:c7: 47:05:aa:b6:4d:eb:0c:22:b0:2a:ac:10:3d:47:aa: bf:5b:aa:09:83:f0:0c:f2:aa:f8:b3:2a:d8:4b:b5: 9b:db:d9:ab:7d:2a:69:0e:92:f5:ea:46:4a:48:e0: c1:28:34:81:73:26:52:33:23:11:c5:ae:00:40:52: 21:ca:f0:52:95:e5:0f:4a:e8:38:c0:d1:3c:ce:65: d0:a2:3f:7f:1a:31:e5:62:7d:d1:f1:9c:09:6a:d4: bf:61:68:1e:ac:85:d7:1a:06:89:06:73:6a:c6:93: ed:90:ea:93:f4:8f:86:f5:3a:23:e2:0a:cb:8c:64: fc:90:8b:aa:77:09:3f:0f:cd:42:23:e7:fe:e0:49: 6d:c5:77:37:3e:9c:03:c4:78:a7:57:ed:94:e5:5c: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:60:61:DC:A7:49:F6:B5:51:59:9C:11:C5:46:47:AD:B2:63:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f1:71:86:1c:a4:c7:d0:5b:e6:79:69:c2:09:5b:15:dd:f1: 43:fa:49:9e:53:f3:cd:f5:14:07:1b:aa:e2:66:43:75:2d:b8: 75:51:4c:1b:c5:d2:fb:7d:99:19:39:f9:a2:ea:42:62:86:5c: fb:54:7b:59:73:02:b1:32:d9:7f:1e:9b:bc:a6:14:35:98:1f: bd:29:94:87:98:4b:c1:bf:cb:cc:d5:8c:3a:26:da:bd:36:15: 00:f7:e2:a0:2f:43:05:11:60:fa:d7:80:a2:ba:f4:22:c7:45: 6b:9a:64:c2:cd:bd:90:d1:5e:8a:d1:72:ff:27:13:c6:15:a0: 14:d2:e6:ea:9c:43:10:54:c5:dc:0a:7c:ed:8b:61:4e:0e:eb: a9:c0:7a:ea:93:20:6c:c2:8e:7f:75:81:16:34:9c:0c:ca:e9: 16:a7:cb:5f:42:7b:11:82:2b:b8:76:b1:a4:0e:d4:69:f1:e2: 83:6e:2a:eb:ff:77:91:85:70:ab:45:98:84:9e:48:3d:a7:c5: cb:3b:9c:09:02:fb:d2:65:68:f7:a1:f7:55:b6:74:42:e0:81: 31:71:84:2e:6f:10:b8:87:c6:14:be:72:85:46:17:6f:81:bf: a9:7e:8d:cf:01:37:57:d0:1a:b6:c4:cc:91:8a:63:f0:f3:26: c5:5c:68:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvTMvdJv1Mcb61AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NDA2Mjg3NjctMzM1NS00ZDNjLWExYmItNGJlZjAwNzViMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwHoK7GijXHEaUOqQsRQz5CPSc7BmK1+MmR4 FGAZvKQgSgZkNhG3TafQHuMKRCHSMDGnIBShJuFflMKx4jMj5aKTJYEkcBiQKjVm p9vw69+rG8BVzzPUCdFyMF3HKoLrOIe1Bn7Gn8dHBaq2TesMIrAqrBA9R6q/W6oJ g/AM8qr4syrYS7Wb29mrfSppDpL16kZKSODBKDSBcyZSMyMRxa4AQFIhyvBSleUP Sug4wNE8zmXQoj9/GjHlYn3R8ZwJatS/YWgerIXXGgaJBnNqxpPtkOqT9I+G9Toj 4grLjGT8kIuqdwk/D81CI+f+4EltxXc3PpwDxHinV+2U5Vx5wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2HYGHcp0n2tVFZnBHFRketsmOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2FmZDQxYWItYWI0NS0z ZmQyLTk2OTItYjdmMWFiYTRjMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPxcYYcpMfQW+Z5acIJWxXd8UP6SZ5T8831FAcbquJmQ3UtuHVRTBvF 0vt9mRk5+aLqQmKGXPtUe1lzArEy2X8em7ymFDWYH70plIeYS8G/y8zVjDom2r02 FQD34qAvQwURYPrXgKK69CLHRWuaZMLNvZDRXorRcv8nE8YVoBTS5uqcQxBUxdwK fO2LYU4O66nAeuqTIGzCjn91gRY0nAzK6Rany19CexGCK7h2saQO1Gnx4oNuKuv/ d5GFcKtFmISeSD2nxcs7nAkC+9JlaPeh91W2dELggTFxhC5vELiHxhS+coVGF2+B v6l+jc8BN1fQGrbEzJGKY/DzJsVcaGk= -----END CERTIFICATE-----Generated at Mon Jun 16 02:35:58 2025 by rpki-client