$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa File: d2004358-f1c7-3695-abf0-a29ceb6c2356.roa (raw, json) Hash identifier: 1kdPpTKmkSJK7SDPi2YGnOsRL6rmJ9m12AUy8SFAX4c= Subject key identifier: 64:9A:9B:09:58:1C:E6:B1:06:F2:26:FC:19:84:59:5B:A5:6E:DE:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FE76823F7C5AEF238AEC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397221 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e7:68:23:f7:c5:ae:f2:38:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=49fb86bc-0bf6-4a4f-b353-6ab26ddd18f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:7e:cc:52:aa:ac:42:6a:fa:dc:d8:36:cc: 2e:5d:3e:71:55:5f:7f:e7:d7:82:5b:35:9e:ab:e7: 4e:3c:6a:70:63:60:5c:b4:4d:bf:ec:b8:c0:7b:60: b6:a2:f5:a7:f9:79:f9:7f:39:20:bf:0d:fe:91:f6: 44:b6:21:20:27:52:3f:cd:7f:e1:56:0f:d9:55:40: f4:fa:8a:a4:bb:2c:d1:db:78:c6:13:7e:17:41:ae: 5b:9c:22:2a:8e:ec:2b:4a:4d:cf:69:e9:90:83:89: 8f:ff:3e:4a:ff:66:ee:53:48:21:76:78:cf:15:e2: e1:d4:bd:9a:95:ea:d3:9d:85:73:7c:e4:a1:b2:49: c6:41:ed:dc:24:dd:c6:01:95:8a:0c:1f:b5:5a:82: 0a:f1:a2:c4:88:96:88:ad:df:51:43:f3:03:77:0f: 0e:a4:54:c9:cd:74:88:8c:e6:c3:1f:6d:64:8f:2f: e3:86:41:6a:1b:6a:22:a7:6c:b8:54:8b:9b:39:e8: 0a:0b:35:23:7c:ff:72:c0:c4:ca:38:7c:58:e4:ca: a9:f7:12:77:c0:af:2c:22:e9:b3:3b:ae:f4:52:3b: e7:86:80:94:35:4a:2e:d0:f2:0c:09:e6:3d:c2:cf: fe:7d:36:23:64:fb:6e:c8:62:8a:22:54:24:08:1e: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:9B:09:58:1C:E6:B1:06:F2:26:FC:19:84:59:5B:A5:6E:DE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:99:8b:df:04:42:1b:af:fb:9c:b2:7a:bf:31:64:e3:12:c0: e9:5b:87:49:07:5b:ce:7d:a7:1b:b4:64:50:16:c5:d4:c8:9b: 4e:9e:02:28:1f:4b:4b:d3:91:62:53:74:e0:06:c6:18:63:86: 40:52:78:85:9f:1b:5f:20:3a:3c:b0:1d:2e:34:45:9d:12:c9: 27:5e:5d:a6:90:19:e9:6d:99:e3:a7:9e:d3:ed:e1:f0:cb:6b: 59:c5:6f:b9:db:ad:0a:ec:66:bc:ce:de:81:9c:b3:0d:6f:5f: f6:54:05:e1:f9:bd:d1:74:3c:3a:ad:c7:3e:a5:91:54:46:1a: fa:cf:c8:8c:e0:bb:f3:fe:af:bf:d0:41:20:3c:bb:c1:fa:41: cb:26:89:de:ec:74:0d:5b:00:ee:f5:74:a1:29:83:52:a8:7a: e7:a0:d6:61:d6:fa:eb:24:78:07:54:d3:a4:1d:2b:72:6e:20: 5a:d5:7a:e2:5d:86:00:2a:ea:dc:b0:f7:ee:ad:ca:b1:ac:1f: d6:f8:fe:bf:e4:a1:82:b1:54:6d:db:d6:7d:44:3a:06:8e:af: b8:9a:d9:eb:cf:f2:ab:fc:fa:aa:16:e7:eb:76:34:77:e7:a9: f5:fd:b1:77:d9:65:7f:05:38:9f:f8:64:4d:bd:1c:5b:17:95: 09:e4:23:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+doI/fFrvI4rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDlmYjg2YmMtMGJmNi00YTRmLWIzNTMtNmFiMjZkZGQxOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVp+zFKqrEJq+tzYNswuXT5xVV9/59eCWzWe q+dOPGpwY2BctE2/7LjAe2C2ovWn+Xn5fzkgvw3+kfZEtiEgJ1I/zX/hVg/ZVUD0 +oqkuyzR23jGE34XQa5bnCIqjuwrSk3PaemQg4mP/z5K/2buU0ghdnjPFeLh1L2a lerTnYVzfOShsknGQe3cJN3GAZWKDB+1WoIK8aLEiJaIrd9RQ/MDdw8OpFTJzXSI jObDH21kjy/jhkFqG2oip2y4VIubOegKCzUjfP9ywMTKOHxY5Mqp9xJ3wK8sIumz O670UjvnhoCUNUou0PIMCeY9ws/+fTYjZPtuyGKKIlQkCB4M1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSamwlYHOaxBvIm/BmEWVulbt6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDIwMDQzNTgtZjFjNy0z Njk1LWFiZjAtYTI5Y2ViNmMyMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOZi98EQhuv+5yyer8xZOMSwOlbh0kHW859pxu0ZFAWxdTIm06eAigf S0vTkWJTdOAGxhhjhkBSeIWfG18gOjywHS40RZ0SySdeXaaQGeltmeOnntPt4fDL a1nFb7nbrQrsZrzO3oGcsw1vX/ZUBeH5vdF0PDqtxz6lkVRGGvrPyIzgu/P+r7/Q QSA8u8H6Qcsmid7sdA1bAO71dKEpg1Koeueg1mHW+uskeAdU06QdK3JuIFrVeuJd hgAq6tyw9+6tyrGsH9b4/r/koYKxVG3b1n1EOgaOr7ia2evP8qv8+qoW5+t2NHfn qfX9sXfZZX8FOJ/4ZE29HFsXlQnkI1c= -----END CERTIFICATE-----Generated at Mon Jun 16 02:11:36 2025 by rpki-client