$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa File: daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa (raw, json) Hash identifier: cUS05+KJse1nFQjQEBYVAX3vDNTjjz0QgBXzYn3glFw= Subject key identifier: 59:9C:E0:AE:D6:59:4B:96:3A:B5:FC:7A:A2:95:D4:68:E5:2A:09:9E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5EDF6246AA672DB3B6E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397232 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5e:df:62:46:aa:67:2d:b3:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7cfa6360-f7e9-4804-9bcb-b33513029539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:b1:88:26:8e:38:ad:42:21:a5:50:43:28: 81:9d:4d:5c:1f:36:da:6a:af:b8:bd:9b:81:ab:ba: 37:e7:4e:09:41:c6:e7:f2:00:d1:c3:3e:1e:13:b7: 87:9f:4b:0f:5e:d9:26:59:39:d4:e8:a9:e3:6f:e0: 13:19:05:b3:3d:e3:fe:67:92:fe:20:bd:f5:bd:73: 86:63:c7:89:45:d4:74:0e:54:19:10:90:83:27:aa: b8:3a:30:12:5b:4b:42:82:e9:9b:5c:0b:28:26:3d: e4:c6:4a:4e:aa:07:bd:dc:85:f4:52:c9:28:d4:cf: 58:fb:f9:4c:45:55:10:20:93:90:3c:4e:1e:3d:f8: 4b:04:ac:9a:2a:d1:7f:53:72:31:2c:05:08:53:7a: bf:75:a2:0f:47:df:5c:fe:bf:43:1e:58:be:3f:9b: 87:e1:a9:b6:08:12:ab:75:21:6e:ea:0f:a2:4d:fb: f4:46:a3:40:79:e0:29:9f:fa:d2:fd:47:35:f8:0a: 3c:0c:eb:4c:97:87:21:71:81:6c:19:57:c1:94:0a: 05:bb:9d:ad:aa:d7:7c:1b:a6:6a:03:d0:1e:3a:b5: 59:ce:d9:a6:9f:66:a0:fe:b2:8a:40:84:d1:23:28: 99:4b:00:4b:2e:e2:83:e1:ba:27:2a:4a:ca:ac:35: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9C:E0:AE:D6:59:4B:96:3A:B5:FC:7A:A2:95:D4:68:E5:2A:09:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b6:c5:9e:58:6e:c4:00:f4:d8:d9:00:31:81:b7:99:45:96: 80:82:0b:bc:02:d9:c1:1d:73:69:fe:d2:72:d1:fb:09:69:9b: 03:0c:4d:9c:3d:ed:2c:05:14:1d:11:32:23:12:77:54:1f:f6: a8:35:b0:f3:d2:56:c3:a6:12:dc:fe:bd:ba:2d:04:dc:14:02: 88:14:e1:6c:73:1f:56:04:b9:cd:b5:6b:ed:59:e7:28:72:87: 5c:e2:45:f6:f7:21:5a:65:5a:6b:ad:b4:84:80:b4:31:79:2d: 92:d2:f6:75:f0:9b:40:e0:57:44:a3:75:0e:d4:e1:7f:95:15: 90:dd:7c:72:d5:7e:6e:fe:35:b9:69:c8:e3:71:43:78:6e:73: c4:de:2a:59:88:64:cc:c7:51:77:ac:eb:75:e7:3c:e1:43:b0: 0a:4c:e1:4d:df:4d:c7:f2:65:7f:37:ef:65:ef:e0:51:27:25: 21:e5:28:3d:ab:49:67:53:30:11:5c:ad:92:fc:c9:15:90:aa: 80:3b:a3:90:bf:5b:a3:7f:1c:f6:b4:51:6d:f3:02:1c:0b:5e: 5a:6d:06:40:89:b2:65:a4:76:71:1b:80:c7:3b:e5:2b:76:1b: 54:7d:3f:96:5e:eb:84:6f:03:1f:4d:3e:a1:4b:fa:c3:bb:2c: bc:d9:a4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz17fYkaqZy2ztuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2NmYTYzNjAtZjdlOS00ODA0LTliY2ItYjMzNTEzMDI5NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i+xiCaOOK1CIaVQQyiBnU1cHzbaaq+4vZuB q7o3504JQcbn8gDRwz4eE7eHn0sPXtkmWTnU6Knjb+ATGQWzPeP+Z5L+IL31vXOG Y8eJRdR0DlQZEJCDJ6q4OjASW0tCgumbXAsoJj3kxkpOqge93IX0Usko1M9Y+/lM RVUQIJOQPE4ePfhLBKyaKtF/U3IxLAUIU3q/daIPR99c/r9DHli+P5uH4am2CBKr dSFu6g+iTfv0RqNAeeApn/rS/Uc1+Ao8DOtMl4chcYFsGVfBlAoFu52tqtd8G6Zq A9AeOrVZztmmn2ag/rKKQITRIyiZSwBLLuKD4bonKkrKrDUwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmc4K7WWUuWOrX8eqKV1GjlKgmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGFhOTBkNmEtZWM4YS0z MmE2LTk0OTAtZDVkYmFjY2NlOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC2xZ5YbsQA9NjZADGBt5lFloCCC7wC2cEdc2n+0nLR+wlpmwMMTZw9 7SwFFB0RMiMSd1Qf9qg1sPPSVsOmEtz+vbotBNwUAogU4WxzH1YEuc21a+1Z5yhy h1ziRfb3IVplWmuttISAtDF5LZLS9nXwm0DgV0SjdQ7U4X+VFZDdfHLVfm7+Nblp yONxQ3huc8TeKlmIZMzHUXes63XnPOFDsApM4U3fTcfyZX8372Xv4FEnJSHlKD2r SWdTMBFcrZL8yRWQqoA7o5C/W6N/HPa0UW3zAhwLXlptBkCJsmWkdnEbgMc75St2 G1R9P5Ze64RvAx9NPqFL+sO7LLzZpLQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:29:27 2025 by rpki-client