$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa File: cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa (raw, json) Hash identifier: Z2tGeM2WiMunVN/q/NvVdojgfBXAe2JJuuMPjy+mBGg= Subject key identifier: A0:EB:3D:07:67:3C:25:0B:9A:AA:B6:0A:1F:E6:89:FD:BD:FA:9D:1D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0BD9763D3707A5C66760 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397221 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0b:d9:76:3d:37:07:a5:c6:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=f4821fc3-0977-4808-bd3c-bf6575e56f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:47:a4:db:36:bd:5b:23:90:77:09:a4:cc: cf:a7:53:4f:04:21:29:de:ef:86:48:6d:d1:30:a5: 38:71:48:db:21:fd:df:11:21:64:75:4f:02:b0:db: b6:35:7d:bd:e4:f1:31:ea:a4:2d:96:0c:46:55:82: 4b:7d:30:17:eb:50:3a:e0:49:27:53:e4:5f:9a:61: b2:4a:c5:67:ca:73:f5:5e:c6:c8:9a:34:2f:5c:af: f6:0a:6b:a7:fa:5c:76:44:61:f2:93:d0:eb:d9:aa: 5f:a1:0d:77:2d:14:14:b3:21:f4:6c:81:de:3f:22: 87:5f:30:02:22:60:6b:dc:e7:27:16:11:8d:cf:92: a3:7a:ee:d8:07:98:9f:68:fc:36:ca:15:c2:14:8d: 23:fd:db:78:98:b3:cd:e6:00:40:e9:48:39:96:dd: b1:74:a5:33:6c:75:fc:46:23:19:4e:3e:09:47:e4: 58:ef:03:ca:70:ee:2d:f0:0b:3a:03:19:02:d0:11: 06:b2:e1:cd:48:11:1a:df:b0:20:86:d5:07:2c:00: 77:92:5e:d3:33:4b:aa:b2:22:22:52:da:9f:90:52: 50:6e:c4:9b:dc:79:f0:85:05:40:39:c7:70:d8:1d: 0a:58:9a:e5:e5:4c:18:64:80:34:31:71:5d:3b:0a: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EB:3D:07:67:3C:25:0B:9A:AA:B6:0A:1F:E6:89:FD:BD:FA:9D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:61:cd:15:26:f3:e0:db:63:d6:63:6f:77:41:76:55:24:b4: 18:96:8f:5a:4d:11:18:9f:dc:09:7f:97:81:61:c0:43:05:3e: af:2c:01:7d:41:0f:9c:79:86:4b:c1:0f:ff:f0:f5:ee:76:bc: fd:6e:04:76:b7:dd:ca:68:18:80:f5:bf:37:66:27:32:56:5f: f0:f3:c0:cc:8d:31:e3:8b:ff:d2:0e:28:f2:88:ca:ef:6b:28: 11:d9:41:5f:25:dc:a5:9d:65:6e:77:16:62:3f:ee:c2:47:e6: 69:e6:c3:2a:d0:56:ec:5a:36:86:f4:91:d6:68:c6:09:52:52: a5:40:df:68:01:63:3a:6c:2a:98:28:fe:3c:cc:e4:ab:39:14: 61:f9:d5:d6:73:07:ab:27:ad:a7:31:06:6e:9d:8e:c4:b0:c2: e5:b3:10:07:cf:66:3e:ae:ca:2c:73:97:a3:7e:5f:a4:c7:77: 9e:17:bd:26:6e:e3:c6:f0:1d:f5:cd:b7:34:c5:96:97:b4:28: fb:a7:d5:04:d9:94:0f:36:bb:15:c9:44:76:25:0a:d7:81:41: cd:31:3b:0f:6f:0e:6c:a4:5b:59:fa:41:14:cb:13:ea:0b:97: ea:2c:c6:36:74:ba:91:af:9e:55:e7:9c:e6:c2:4b:68:6d:48: 3f:1a:8c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgvZdj03B6XGZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ4MjFmYzMtMDk3Ny00ODA4LWJkM2MtYmY2NTc1ZTU2ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuftHpNs2vVsjkHcJpMzPp1NPBCEp3u+GSG3R MKU4cUjbIf3fESFkdU8CsNu2NX295PEx6qQtlgxGVYJLfTAX61A64EknU+RfmmGy SsVnynP1XsbImjQvXK/2Cmun+lx2RGHyk9Dr2apfoQ13LRQUsyH0bIHePyKHXzAC ImBr3OcnFhGNz5Kjeu7YB5ifaPw2yhXCFI0j/dt4mLPN5gBA6Ug5lt2xdKUzbHX8 RiMZTj4JR+RY7wPKcO4t8As6AxkC0BEGsuHNSBEa37AghtUHLAB3kl7TM0uqsiIi UtqfkFJQbsSb3HnwhQVAOcdw2B0KWJrl5UwYZIA0MXFdOwog/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDrPQdnPCULmqq2Ch/mif29+p0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2ZlOTVkN2EtM2U4MC0z Njc3LTkxY2QtOGYzOTI0ZTIyNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABhzRUm8+DbY9Zjb3dBdlUktBiWj1pNERif3Al/l4FhwEMFPq8sAX1B D5x5hkvBD//w9e52vP1uBHa33cpoGID1vzdmJzJWX/DzwMyNMeOL/9IOKPKIyu9r KBHZQV8l3KWdZW53FmI/7sJH5mnmwyrQVuxaNob0kdZoxglSUqVA32gBYzpsKpgo /jzM5Ks5FGH51dZzB6snracxBm6djsSwwuWzEAfPZj6uyixzl6N+X6THd54XvSZu 48bwHfXNtzTFlpe0KPun1QTZlA82uxXJRHYlCteBQc0xOw9vDmykW1n6QRTLE+oL l+osxjZ0upGvnlXnnObCS2htSD8ajO4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:34 2025 by rpki-client