$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa File: de2102d6-30e1-30c4-bde1-407cdd90a778.roa (raw, json) Hash identifier: Sg/9JPRW0PiEMKN/2Q/HomzIuSPROCz5q6t6ebgHP4s= Subject key identifier: F7:87:94:B9:B7:A9:5F:B4:70:42:45:03:1D:30:39:32:F2:34:2B:32 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A09EE5DF8EFF6FE6AF400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397221 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:09:ee:5d:f8:ef:f6:fe:6a:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=4fda12bc-ef0d-41d1-b68c-2c5b5f155e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:eb:ca:f4:a7:7e:79:5b:ff:3c:c2:64:49: 2e:b4:96:aa:a4:62:9f:f4:08:a7:0c:16:55:3c:73: e9:0a:7e:dd:ec:bb:b0:f5:35:ef:c0:7f:91:d2:ae: 5a:20:dd:14:f2:86:f3:46:28:c3:4e:23:19:81:79: ad:1a:21:5d:03:39:b3:ab:9c:da:ee:54:84:d9:e0: 48:32:16:12:72:66:ff:8f:9e:c5:06:47:0d:bb:58: 46:74:38:e4:65:c2:ca:26:97:4f:dc:e6:c0:0d:a5: 55:74:b4:2e:85:b9:fb:d3:10:7a:1c:67:94:bd:02: 9e:54:56:ec:47:96:f8:64:da:ac:35:14:e5:69:2c: 94:de:0c:2e:fa:7c:10:85:d2:b0:6d:62:c1:74:99: e4:46:c0:a6:cb:4a:40:e8:d2:7e:d8:d9:a7:6b:b5: b9:72:0f:3d:61:f4:94:a8:3e:62:13:ff:2c:19:97: dd:6c:97:90:19:ab:d2:83:7a:e6:e3:a2:2c:f9:a0: 38:5c:f1:72:eb:df:b0:63:b0:15:99:ca:06:87:35: 90:bd:2c:dd:63:d4:64:ba:d7:03:30:a6:51:b0:b7: 53:55:27:2a:89:96:90:1a:bf:0c:ce:4e:a3:67:0f: 84:dd:c8:cc:82:dd:ea:36:a9:c4:01:50:cd:3d:25: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:94:B9:B7:A9:5F:B4:70:42:45:03:1D:30:39:32:F2:34:2B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:83:5a:d2:8d:0b:2e:fb:fb:89:92:53:69:30:83:3f:8c:c0: 38:a4:5f:c1:68:07:9b:be:10:27:71:45:54:7c:02:47:28:d9: d4:4b:7c:ab:84:0c:63:69:69:25:86:81:49:00:11:1a:82:fb: 0f:f7:cc:92:fb:1c:cc:13:9f:82:1e:28:1f:c0:d5:62:35:94: e1:1c:10:a4:5b:c2:0e:1e:0b:4b:a6:22:e1:4b:ef:ad:5d:36: 72:7b:ff:e3:ab:0d:6a:d9:d3:26:d5:2b:29:7c:df:86:3f:95: 04:f0:f8:91:80:02:53:73:fc:88:e7:89:ee:58:dc:3e:dd:26: 2e:6d:88:04:32:52:c6:88:46:d8:4d:c9:98:63:d3:67:92:f5: bc:98:db:ef:3c:d7:db:8e:08:5d:01:73:bd:4b:f0:95:3c:e3: b4:67:50:26:26:4f:d4:41:eb:67:26:71:9c:4a:10:da:7a:e7: 3d:18:cb:1e:55:f0:85:cb:ab:9b:f7:87:63:e5:72:e0:5b:97: 48:a7:65:bd:38:e8:bb:0c:2d:df:8f:09:c3:c7:4d:b1:4b:f0: cd:a8:d0:c3:83:9d:68:d8:a4:1d:c5:19:b2:dd:f4:ac:f2:cf: 16:68:12:8c:5d:ca:b0:40:9e:ba:92:2d:da:d7:92:48:cd:5d: ad:6f:04:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgnuXfjv9v5q9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NGZkYTEyYmMtZWYwZC00MWQxLWI2OGMtMmM1YjVmMTU1ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRTryvSnfnlb/zzCZEkutJaqpGKf9AinDBZV PHPpCn7d7Luw9TXvwH+R0q5aIN0U8obzRijDTiMZgXmtGiFdAzmzq5za7lSE2eBI MhYScmb/j57FBkcNu1hGdDjkZcLKJpdP3ObADaVVdLQuhbn70xB6HGeUvQKeVFbs R5b4ZNqsNRTlaSyU3gwu+nwQhdKwbWLBdJnkRsCmy0pA6NJ+2Nmna7W5cg89YfSU qD5iE/8sGZfdbJeQGavSg3rm46Is+aA4XPFy69+wY7AVmcoGhzWQvSzdY9RkutcD MKZRsLdTVScqiZaQGr8Mzk6jZw+E3cjMgt3qNqnEAVDNPSXqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeHlLm3qV+0cEJFAx0wOTLyNCsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUyMTAyZDYtMzBlMS0z MGM0LWJkZTEtNDA3Y2RkOTBhNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeDWtKNCy77+4mSU2kwgz+MwDikX8FoB5u+ECdxRVR8Akco2dRLfKuE DGNpaSWGgUkAERqC+w/3zJL7HMwTn4IeKB/A1WI1lOEcEKRbwg4eC0umIuFL761d NnJ7/+OrDWrZ0ybVKyl834Y/lQTw+JGAAlNz/Ijnie5Y3D7dJi5tiAQyUsaIRthN yZhj02eS9byY2+8819uOCF0Bc71L8JU847RnUCYmT9RB62cmcZxKENp65z0Yyx5V 8IXLq5v3h2PlcuBbl0inZb046LsMLd+PCcPHTbFL8M2o0MODnWjYpB3FGbLd9Kzy zxZoEoxdyrBAnrqSLdrXkkjNXa1vBI0= -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:21 2025 by rpki-client