$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa File: ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa (raw, json) Hash identifier: p3EDCpg7DOsHenpw3Xq35hLKsToL2kf1Mwxx6PgSuOY= Subject key identifier: CC:59:D8:87:B3:9F:05:66:43:4D:41:0E:44:4D:0F:6B:85:88:46:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858496FAF1EB99AF7772AD3C9CFA0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397238 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:1e:b9:9a:f7:77:2a:d3:c9:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=fada279b-2035-4aa2-bb1f-5ae6d715de2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:66:1b:97:f5:25:c8:e2:8b:6f:89:d7:4b: 65:54:86:e8:cc:40:a5:fb:fe:ff:77:ba:57:f2:25: 27:62:84:c2:da:68:9c:ab:a7:51:db:c6:22:ca:75: 6a:f3:31:90:2c:b7:40:39:20:02:a2:27:2a:f4:49: 96:86:98:19:93:9c:00:59:28:0d:b4:41:3e:cd:66: 99:b9:0f:b2:db:f3:7a:d0:2d:a7:cb:79:bb:93:f5: a5:e7:b4:26:a4:bd:99:29:b7:28:a1:f2:61:2a:87: 01:d4:00:76:47:ec:e9:42:84:9b:85:87:13:b9:a2: de:5d:29:fb:b3:20:28:30:b3:f0:9d:b0:28:95:6b: 9c:78:6d:89:a8:f5:03:d9:23:de:9d:95:12:cf:29: 06:3b:6f:34:43:c8:52:c9:7d:63:cf:d9:95:41:a3: 57:62:99:2a:5c:da:32:57:55:d9:2b:ed:c8:3e:af: c4:d0:e3:ef:14:7a:90:8f:94:31:2c:57:a6:14:14: bf:27:fa:88:bb:24:48:b8:df:54:ff:9f:1d:19:c2: 46:f1:0b:3f:ff:02:96:8c:23:69:b4:fa:13:37:6e: 43:05:97:15:1e:9c:86:9e:b0:33:07:24:5c:8b:48: c5:a2:ec:4e:9c:1e:7a:8b:f2:e8:d8:f8:63:2b:46: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:59:D8:87:B3:9F:05:66:43:4D:41:0E:44:4D:0F:6B:85:88:46:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8f:0a:8b:4b:ed:f7:94:dd:b5:eb:f9:1d:64:d0:ab:7d:fd: e7:8c:00:af:41:ab:eb:a4:7d:0b:d4:62:bb:55:6f:71:c9:22: d2:f3:d5:5e:53:f1:2e:07:30:15:7c:9b:69:ff:dc:44:4a:6a: ff:d8:aa:65:e6:ae:72:ae:08:01:50:81:8c:bc:df:61:08:f2: 38:d8:9e:0d:b7:30:09:16:e5:63:2d:4a:ec:f7:cd:58:41:8a: 49:c0:73:74:1a:87:3e:65:67:83:06:d3:63:a5:dc:b5:05:52: 4e:e3:7c:51:66:05:0f:d6:97:ab:dd:7a:aa:e2:9e:c5:6f:46: ab:13:54:55:df:b4:c0:60:48:29:01:de:a4:38:26:fa:c8:b9: ca:9b:c6:4b:e7:9a:38:8e:ca:18:c1:59:aa:83:d9:9a:59:a4: c2:fb:5b:78:76:df:d2:54:71:b3:23:1a:56:b5:3e:7c:78:a3: 7b:c0:75:b5:72:cf:e4:7d:c1:a0:2b:8c:5f:1b:3e:d4:2b:98: 21:94:3a:94:97:1a:58:67:36:8e:f2:0b:91:e7:89:04:d3:8c: 8d:ca:0f:fc:74:b1:de:c1:53:04:c7:c1:30:87:c5:d4:eb:1b: 69:6f:64:69:73:ee:01:ad:a9:74:18:89:31:44:61:d8:b2:43: ef:d2:dd:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrx65mvd3KtPJz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmFkYTI3OWItMjAzNS00YWEyLWJiMWYtNWFlNmQ3MTVkZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLZmG5f1Jcjii2+J10tlVIbozECl+/7/d7pX 8iUnYoTC2micq6dR28YiynVq8zGQLLdAOSACoicq9EmWhpgZk5wAWSgNtEE+zWaZ uQ+y2/N60C2ny3m7k/Wl57QmpL2ZKbcoofJhKocB1AB2R+zpQoSbhYcTuaLeXSn7 syAoMLPwnbAolWuceG2JqPUD2SPenZUSzykGO280Q8hSyX1jz9mVQaNXYpkqXNoy V1XZK+3IPq/E0OPvFHqQj5QxLFemFBS/J/qIuyRIuN9U/58dGcJG8Qs//wKWjCNp tPoTN25DBZcVHpyGnrAzByRci0jFouxOnB56i/Lo2PhjK0Y12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxZ2IeznwVmQ01BDkRND2uFiEZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWNmZDEwY2QtYjA2My0z MTAyLWE4ZjQtOTQ1NmQ4ZjEwZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCPCotL7feU3bXr+R1k0Kt9/eeMAK9Bq+ukfQvUYrtVb3HJItLz1V5T 8S4HMBV8m2n/3ERKav/YqmXmrnKuCAFQgYy832EI8jjYng23MAkW5WMtSuz3zVhB iknAc3Qahz5lZ4MG02Ol3LUFUk7jfFFmBQ/Wl6vdeqrinsVvRqsTVFXftMBgSCkB 3qQ4JvrIucqbxkvnmjiOyhjBWaqD2ZpZpML7W3h239JUcbMjGla1Pnx4o3vAdbVy z+R9waArjF8bPtQrmCGUOpSXGlhnNo7yC5HniQTTjI3KD/x0sd7BUwTHwTCHxdTr G2lvZGlz7gGtqXQYiTFEYdiyQ+/S3cE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:12 2025 by rpki-client