$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa File: de32abf6-dded-30c3-b049-8e15bee16b11.roa (raw, json) Hash identifier: fk1SLbU5icDlqZhlh8CgSYQdFZZn5QW95k0GWlU9+ww= Subject key identifier: CE:C8:90:CB:58:11:C8:C0:3B:A1:14:83:EE:A5:81:AF:D9:20:C2:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3F1CF120AAFFEE3ABEB4 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397220 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3f:1c:f1:20:aa:ff:ee:3a:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=a1ff86b2-e77d-44e1-b59e-23d0a00addb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:9b:32:b1:e8:43:f3:dd:60:fe:21:2a:b0: 1b:9c:fe:6c:62:b6:88:0e:c1:c8:19:cb:72:a4:84: d5:8c:8c:55:fc:cf:43:65:48:0a:b5:c3:b0:00:1c: 35:9e:a4:83:92:b0:aa:cf:03:27:ab:20:c4:f4:16: 25:cc:54:14:2c:7b:2f:e7:71:78:73:8b:c5:ab:da: f5:88:8e:1e:22:71:2a:8a:da:99:d7:df:28:5c:30: 2e:e6:89:0a:07:22:bc:ed:06:95:7b:2a:1f:8a:f2: 72:ce:3d:11:8a:46:b8:f2:0d:90:a4:b6:22:ba:29: 13:49:64:f2:93:36:f4:d4:c3:98:33:c1:2f:0a:89: f5:74:28:ee:34:65:fa:e8:6e:46:88:73:0d:ba:28: ec:99:2b:af:a3:83:c5:3c:19:c4:91:5c:35:1b:e6: 2c:b9:31:1e:74:62:d1:c8:9f:a6:31:66:84:48:81: 12:50:af:65:82:af:31:01:a2:b9:c3:67:3c:a1:77: c9:30:91:38:33:75:27:ca:17:4d:d5:5e:8e:29:db: 51:e5:90:09:8b:7e:de:76:be:64:b4:6d:6d:85:2b: 31:6a:8a:5d:1a:53:a5:a1:f0:d3:d8:b7:28:3f:d1: 7f:38:4d:d1:bd:01:5d:32:7d:7a:79:f8:f7:0a:e6: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C8:90:CB:58:11:C8:C0:3B:A1:14:83:EE:A5:81:AF:D9:20:C2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f4:ec:36:50:05:8c:89:ec:4e:2d:07:d9:81:00:24:b7:6b: 44:70:fc:a2:17:52:6a:10:fe:89:4b:99:cb:54:de:fc:ad:37: 7b:21:d1:c9:aa:ea:e6:ee:a4:4e:18:5f:36:71:f3:33:04:c3: fb:1f:47:35:58:4c:9e:00:ea:8f:fe:f9:71:07:37:5b:db:cf: 89:31:d4:54:9f:56:62:ef:7d:42:8f:65:18:98:ab:6d:b4:f7: 10:70:e0:05:92:01:37:92:1a:57:4e:cc:50:3d:d7:76:ad:f3: a7:93:41:7b:a1:e2:25:47:29:2f:f0:0a:d1:df:52:27:00:9e: bb:11:00:c3:17:ae:b5:53:58:5d:ab:33:06:b9:21:53:49:e6: 22:2e:a2:6c:a5:d9:a5:54:4d:06:4a:f5:0c:e1:f0:45:c8:06: b5:dc:5f:d4:14:15:a4:90:90:08:88:a1:45:b4:75:98:65:1e: 82:70:10:6f:49:2a:93:cc:57:48:00:fc:12:1f:f2:9c:2e:96: 80:74:3f:52:1a:e7:0b:31:70:16:f3:b0:9d:59:eb:89:d7:55: 76:6f:6d:6a:ed:ea:77:de:fc:b3:1b:03:49:f2:c0:6f:2c:ac: 45:fc:50:f1:d1:7b:cf:f3:53:b8:65:2a:1c:16:1a:e9:15:bf: e3:30:9e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz8c8SCq/+46vrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YTFmZjg2YjItZTc3ZC00NGUxLWI1OWUtMjNkMGEwMGFkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ2bMrHoQ/PdYP4hKrAbnP5sYraIDsHIGcty pITVjIxV/M9DZUgKtcOwABw1nqSDkrCqzwMnqyDE9BYlzFQULHsv53F4c4vFq9r1 iI4eInEqitqZ198oXDAu5okKByK87QaVeyofivJyzj0Rika48g2QpLYiuikTSWTy kzb01MOYM8EvCon1dCjuNGX66G5GiHMNuijsmSuvo4PFPBnEkVw1G+YsuTEedGLR yJ+mMWaESIESUK9lgq8xAaK5w2c8oXfJMJE4M3UnyhdN1V6OKdtR5ZAJi37edr5k tG1thSsxaopdGlOlofDT2LcoP9F/OE3RvQFdMn16efj3CubUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7IkMtYEcjAO6EUg+6lga/ZIMIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUzMmFiZjYtZGRlZC0z MGMzLWIwNDktOGUxNWJlZTE2YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA307DZQBYyJ7E4tB9mBACS3a0Rw/KIXUmoQ/olLmctU3vytN3sh0cmq 6ubupE4YXzZx8zMEw/sfRzVYTJ4A6o/++XEHN1vbz4kx1FSfVmLvfUKPZRiYq220 9xBw4AWSATeSGldOzFA913at86eTQXuh4iVHKS/wCtHfUicAnrsRAMMXrrVTWF2r Mwa5IVNJ5iIuomyl2aVUTQZK9Qzh8EXIBrXcX9QUFaSQkAiIoUW0dZhlHoJwEG9J KpPMV0gA/BIf8pwuloB0P1Ia5wsxcBbzsJ1Z64nXVXZvbWrt6nfe/LMbA0nywG8s rEX8UPHRe8/zU7hlKhwWGukVv+Mwnss= -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:55 2025 by rpki-client