$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa File: d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa (raw, json) Hash identifier: CyZl4FImef2WmgbhvGEZqjZ05WtnJW0T+pr1CDIDkSE= Subject key identifier: 9D:C6:8E:F7:02:D8:A9:10:61:9F:6D:9C:B4:22:BD:01:6C:89:72:0E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A025771B67295FCD43280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 12008 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:02:57:71:b6:72:95:fc:d4:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=e6c46de1-48b9-4e42-a8f8-9bdc6ab33597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:ce:6f:ef:d1:e5:c8:47:10:db:c4:5b:11: bb:7c:40:7a:66:7a:b4:2f:d8:85:5e:05:96:7d:1f: 54:73:46:00:ff:c4:f6:21:9d:48:92:08:5c:d1:d4: a3:08:5b:d5:6f:30:c1:92:20:40:0f:d0:5d:f0:06: 79:ae:33:48:be:92:09:ee:74:57:df:81:5e:c4:90: 92:f3:b3:76:b4:34:7b:6e:57:a3:f0:8a:ac:74:c9: c7:25:60:9d:35:5a:c5:40:54:af:29:e1:6e:cb:85: df:7d:4a:ca:ae:cd:7e:a9:d5:6a:6d:ee:fa:6e:2a: 04:53:29:14:f2:a3:02:df:ff:5d:80:e2:6c:05:10: d3:f6:db:2c:79:5f:76:f0:6e:31:86:b4:24:07:77: 03:3a:4d:6f:18:71:3c:f8:3c:ff:c4:7c:34:ac:54: 99:11:7c:05:54:0c:8e:ff:d9:9d:4a:59:c6:56:db: a5:e8:5e:1e:30:54:2f:e3:23:2e:a4:2f:93:cb:b5: 25:cb:09:62:ba:42:c6:d3:83:60:7f:31:66:34:01: fb:9e:d6:6f:5e:e5:24:94:87:a6:74:87:e3:0e:9b: 4a:f4:fa:b7:d2:c5:49:ad:f2:c9:bd:36:8a:15:43: 0d:02:a2:16:f5:3f:5b:5d:7c:34:6c:b8:48:7e:f7: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:8E:F7:02:D8:A9:10:61:9F:6D:9C:B4:22:BD:01:6C:89:72:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:91:42:77:bd:82:da:50:2f:d9:7b:48:a2:21:4c:93:7d:b7: 1e:46:65:20:1a:ec:b0:be:0f:6f:e2:b5:a1:42:11:b7:30:33: 5f:95:14:8e:57:d6:ed:0a:39:62:8d:bb:e6:4d:e6:60:bf:0c: 0e:19:75:51:04:57:35:9e:99:ce:93:ff:fb:a5:ec:5a:ec:03: a0:bc:5d:25:79:a2:5a:93:46:f0:d7:08:d9:bd:72:16:8c:dd: cd:2b:d7:b8:88:aa:43:b7:5b:cd:ce:72:b3:49:c0:05:9e:06: cd:c1:b8:39:81:9b:42:16:f7:e3:ab:75:a1:d5:01:03:31:3e: 64:a8:2a:2d:7d:03:73:3b:77:8e:8d:38:90:e4:81:48:1b:8e: 99:5f:b9:98:fd:47:3a:6f:20:d8:7f:76:04:17:c4:7c:09:28: 18:2a:d0:21:7c:c6:0d:fc:e0:ad:3c:99:56:1c:02:bb:4c:f4: 03:4a:50:49:93:81:c8:08:fd:fd:b7:f6:e6:08:cd:3e:5c:0c: c2:86:85:dc:93:c0:61:0a:95:ab:9f:97:d5:91:7c:a0:d0:0f: 1a:ea:bc:35:51:de:62:65:98:8e:35:be:4e:14:81:1b:8d:56: 81:ad:79:11:6d:b2:cc:80:20:b0:36:82:a9:f2:73:75:f4:55: 31:bb:ca:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgJXcbZylfzUMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZTZjNDZkZTEtNDhiOS00ZTQyLWE4ZjgtOWJkYzZhYjMzNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/TOb+/R5chHENvEWxG7fEB6Znq0L9iFXgWW fR9Uc0YA/8T2IZ1Ikghc0dSjCFvVbzDBkiBAD9Bd8AZ5rjNIvpIJ7nRX34FexJCS 87N2tDR7blej8IqsdMnHJWCdNVrFQFSvKeFuy4XffUrKrs1+qdVqbe76bioEUykU 8qMC3/9dgOJsBRDT9tsseV928G4xhrQkB3cDOk1vGHE8+Dz/xHw0rFSZEXwFVAyO /9mdSlnGVtul6F4eMFQv4yMupC+Ty7UlywliukLG04NgfzFmNAH7ntZvXuUklIem dIfjDptK9Pq30sVJrfLJvTaKFUMNAqIW9T9bXXw0bLhIfveRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3GjvcC2KkQYZ9tnLQivQFsiXIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDhlYmNhYWYtM2VhNy0z Nzg0LThkZWQtZjllNjgzNTc0ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCRQne9gtpQL9l7SKIhTJN9tx5GZSAa7LC+D2/itaFCEbcwM1+VFI5X 1u0KOWKNu+ZN5mC/DA4ZdVEEVzWemc6T//ul7FrsA6C8XSV5olqTRvDXCNm9chaM 3c0r17iIqkO3W83OcrNJwAWeBs3BuDmBm0IW9+OrdaHVAQMxPmSoKi19A3M7d46N OJDkgUgbjplfuZj9RzpvINh/dgQXxHwJKBgq0CF8xg384K08mVYcArtM9ANKUEmT gcgI/f239uYIzT5cDMKGhdyTwGEKlaufl9WRfKDQDxrqvDVR3mJlmI41vk4UgRuN VoGteRFtssyAILA2gqnyc3X0VTG7ylI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:28 2025 by rpki-client