$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa File: df6727da-fd25-3bc0-a428-19aa6a820332.roa (raw, json) Hash identifier: Su+CDlHi8QeWmjU+H4Q20bUrkrpIS9vr6rKPjDWlPr0= Subject key identifier: 23:6C:6E:3E:25:7D:38:4E:E4:8A:63:82:C0:79:94:D1:B8:98:BE:35 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF63573C7F7C013C73D8C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397242 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:63:57:3c:7f:7c:01:3c:73:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0fa654f8-3739-4f19-9a90-bd7a98370b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:35:d0:d5:64:af:0f:9e:bd:89:e8:03:19: 30:93:ee:b5:bb:4a:ca:7c:24:9a:ac:96:6f:fe:30: e5:14:39:55:47:04:42:4b:46:6e:c5:d0:71:ae:ad: db:b7:81:32:47:f0:4f:2d:6d:11:15:22:3f:35:04: a4:bc:fa:4a:f7:64:11:7e:b1:04:7e:db:13:a7:06: f5:f8:7a:bc:c7:30:e9:b3:45:73:81:e9:b8:44:57: 8a:af:36:c1:93:25:f8:cb:64:3c:71:08:b7:97:76: cf:29:8e:56:b2:ab:e6:7b:87:83:b5:82:3f:fc:90: e8:b8:e9:10:19:41:fd:16:80:b8:19:5e:df:7c:8b: a7:bb:59:42:88:18:83:99:82:7f:6d:2f:22:2e:43: e0:6c:11:9c:3a:53:86:a1:85:7d:2f:0a:89:ee:50: ad:08:79:e5:ff:92:3f:90:aa:72:f5:e0:51:f6:77: 0f:44:44:fa:56:93:0b:dc:93:7f:f5:08:02:8e:ec: c0:31:22:4f:ee:f6:0a:5b:df:4a:e0:8c:19:b3:7b: 81:82:9c:b7:2f:c6:6b:b1:aa:07:f9:6f:3c:e5:61: d0:ce:d2:22:ac:78:d1:d0:0c:59:60:53:6c:fc:00: ce:79:b6:1d:e7:fc:57:ec:79:5c:ea:f2:83:21:17: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:6E:3E:25:7D:38:4E:E4:8A:63:82:C0:79:94:D1:B8:98:BE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:96:7c:09:87:76:15:ec:dd:c8:02:f2:56:08:30:48:4c:08: b8:22:92:a4:44:d9:7c:2d:b2:60:c4:c1:0e:03:f8:f4:3a:8f: df:8b:88:a9:b4:77:ce:4d:e8:fb:df:48:9c:e4:03:45:ad:58: ce:75:a3:92:c2:56:82:e7:72:20:23:2d:d3:46:12:b2:e9:6c: ce:7f:00:46:90:f0:38:9c:c9:12:d3:ce:55:0a:4f:89:7b:c6: 52:60:43:e5:a2:2a:59:f5:a1:c9:61:36:dd:c7:b4:e9:a9:49: 8e:89:a1:a8:ef:8d:8f:ad:ff:43:7a:f8:75:04:4e:86:32:c7: de:e7:96:62:f8:ab:43:51:14:06:5a:53:32:3c:77:f2:85:d1: 12:eb:ae:e3:23:cd:db:0e:fb:8a:48:81:10:68:cd:dc:05:9a: a9:fe:4c:dd:33:96:73:78:cf:ec:29:30:c0:d7:38:6e:f5:46: 79:ce:8a:23:1d:b0:e1:d3:6b:86:9e:d5:60:3c:e3:5e:6c:22: 1d:77:c5:c5:e6:ee:c9:24:b9:a9:db:52:d8:f0:90:ef:d2:44: 59:61:b2:a9:56:32:69:f0:2c:9a:06:c2:af:a0:4d:75:24:0e: 8f:37:89:c6:ea:00:ad:de:e5:f2:1e:f0:46:39:3e:0e:47:84: cc:36:e6:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2NXPH98ATxz2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGZhNjU0ZjgtMzczOS00ZjE5LTlhOTAtYmQ3YTk4MzcwYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7es10NVkrw+evYnoAxkwk+61u0rKfCSarJZv /jDlFDlVRwRCS0ZuxdBxrq3bt4EyR/BPLW0RFSI/NQSkvPpK92QRfrEEftsTpwb1 +Hq8xzDps0Vzgem4RFeKrzbBkyX4y2Q8cQi3l3bPKY5Wsqvme4eDtYI//JDouOkQ GUH9FoC4GV7ffIunu1lCiBiDmYJ/bS8iLkPgbBGcOlOGoYV9LwqJ7lCtCHnl/5I/ kKpy9eBR9ncPRET6VpML3JN/9QgCjuzAMSJP7vYKW99K4IwZs3uBgpy3L8ZrsaoH +W885WHQztIirHjR0AxZYFNs/ADOebYd5/xX7Hlc6vKDIRcaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNsbj4lfThO5IpjgsB5lNG4mL41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY2NzI3ZGEtZmQyNS0z YmMwLWE0MjgtMTlhYTZhODIwMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSWfAmHdhXs3cgC8lYIMEhMCLgikqRE2XwtsmDEwQ4D+PQ6j9+LiKm0 d85N6PvfSJzkA0WtWM51o5LCVoLnciAjLdNGErLpbM5/AEaQ8DicyRLTzlUKT4l7 xlJgQ+WiKln1oclhNt3HtOmpSY6JoajvjY+t/0N6+HUEToYyx97nlmL4q0NRFAZa UzI8d/KF0RLrruMjzdsO+4pIgRBozdwFmqn+TN0zlnN4z+wpMMDXOG71RnnOiiMd sOHTa4ae1WA8415sIh13xcXm7skkuanbUtjwkO/SRFlhsqlWMmnwLJoGwq+gTXUk Do83icbqAK3e5fIe8EY5Pg5HhMw25h0= -----END CERTIFICATE-----Generated at Sun Apr 27 10:34:03 2025 by rpki-client