$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa File: f206ae86-3c5f-3629-9092-609e9f195de2.roa (raw, json) Hash identifier: OtzfMSofXYAEZf2YSDlvIsLCp+J8H5eyGgmKlToi2nM= Subject key identifier: CF:D2:4B:55:20:E4:E4:98:5C:F8:0C:8C:4D:23:0C:8E:FB:B9:AE:58 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0BC8AB84172A4EEBD180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397220 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0b:c8:ab:84:17:2a:4e:eb:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=ab3bd7e2-0f51-42bc-bd49-fce5c91ebe80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:d3:c1:72:24:5e:df:54:1e:27:4c:e1:d6: 6b:b9:c8:66:6a:31:f7:80:95:d9:c5:6a:35:e9:13: 1e:eb:65:68:55:5f:e9:3a:f8:4e:a2:46:f2:65:37: 9d:e7:2a:81:84:1f:66:7c:99:8f:a2:89:b1:55:b9: 0a:2d:31:0c:f4:c5:8f:48:cd:59:49:69:d7:62:f1: e6:5c:56:5f:2b:8b:05:27:35:cc:7d:67:47:af:c1: 98:fd:f0:af:e6:03:69:ed:c4:13:fa:5e:da:e1:70: 57:ad:b1:c2:bc:b0:3c:06:66:4c:72:f4:cf:00:7e: 17:0f:17:81:17:48:3e:52:75:a1:01:1a:af:d9:ad: 46:d7:e9:8e:19:26:53:ab:e7:e1:d3:5a:d5:4f:80: 07:39:24:c9:10:90:f8:f4:f5:49:0c:22:39:d5:09: 0f:7c:a7:48:69:6b:54:b0:05:27:65:16:a6:6f:30: 0d:d6:ea:8e:b2:f5:ed:a5:c3:73:d1:86:cf:dd:fb: 89:f9:05:be:c5:2a:fe:9a:bd:00:7f:fc:5f:ad:ec: 0b:9a:54:8d:91:a5:9a:f4:ba:49:f2:62:16:a8:c4: e6:1b:18:fe:89:2d:6d:f0:a0:c0:54:9c:3c:23:c5: 59:59:88:ed:35:9b:ca:78:85:a3:81:7f:20:5b:a7: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:4B:55:20:E4:E4:98:5C:F8:0C:8C:4D:23:0C:8E:FB:B9:AE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e2:1e:e3:ce:c4:64:e6:d1:23:76:12:c5:95:d9:1c:b5:34: e8:e7:fe:f3:d7:bb:ca:87:13:e2:04:ec:29:83:cf:79:6f:fe: d8:21:eb:20:3a:b5:5e:a2:70:88:c3:08:51:82:c3:d3:7a:41: f9:06:5b:4b:d5:d9:4c:00:29:4c:48:3c:3d:cd:12:31:b2:a1: 61:f2:df:5b:db:4f:b8:d0:b9:c8:ce:85:c7:14:15:9f:34:84: 20:e4:0e:43:f9:dd:03:a8:66:7a:08:d3:87:31:e5:56:9e:00: 94:77:98:08:f2:50:a5:da:44:e8:c2:34:f5:d6:7a:05:8d:37: 52:88:63:bc:30:7d:c9:7c:cd:02:b6:a6:ab:ce:b8:d2:1c:3a: fb:94:1a:0d:e9:a7:42:4c:71:93:be:20:04:05:5a:f2:7e:8d: 2f:9c:10:70:c8:0e:a8:3f:31:37:65:7a:48:83:b1:f3:c2:c6: 3c:68:6e:bb:fc:91:88:10:69:f3:9a:8c:75:9b:07:90:96:23: 50:a7:cc:a9:8d:0d:c3:70:b2:99:72:06:f3:7b:6b:00:6a:06: 3d:76:33:a2:5d:60:c4:cb:51:fc:57:0b:0f:58:2d:11:ac:53: 5a:ac:1f:d4:64:b8:52:ef:ef:b7:2f:b0:d4:71:15:42:33:31: 0e:cb:7e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgvIq4QXKk7r0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YWIzYmQ3ZTItMGY1MS00MmJjLWJkNDktZmNlNWM5MWViZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vvTwXIkXt9UHidM4dZruchmajH3gJXZxWo1 6RMe62VoVV/pOvhOokbyZTed5yqBhB9mfJmPoomxVbkKLTEM9MWPSM1ZSWnXYvHm XFZfK4sFJzXMfWdHr8GY/fCv5gNp7cQT+l7a4XBXrbHCvLA8BmZMcvTPAH4XDxeB F0g+UnWhARqv2a1G1+mOGSZTq+fh01rVT4AHOSTJEJD49PVJDCI51QkPfKdIaWtU sAUnZRambzAN1uqOsvXtpcNz0YbP3fuJ+QW+xSr+mr0Af/xfrewLmlSNkaWa9LpJ 8mIWqMTmGxj+iS1t8KDAVJw8I8VZWYjtNZvKeIWjgX8gW6fnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/SS1Ug5OSYXPgMjE0jDI77ua5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjIwNmFlODYtM2M1Zi0z NjI5LTkwOTItNjA5ZTlmMTk1ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPiHuPOxGTm0SN2EsWV2Ry1NOjn/vPXu8qHE+IE7CmDz3lv/tgh6yA6 tV6icIjDCFGCw9N6QfkGW0vV2UwAKUxIPD3NEjGyoWHy31vbT7jQucjOhccUFZ80 hCDkDkP53QOoZnoI04cx5VaeAJR3mAjyUKXaROjCNPXWegWNN1KIY7wwfcl8zQK2 pqvOuNIcOvuUGg3pp0JMcZO+IAQFWvJ+jS+cEHDIDqg/MTdlekiDsfPCxjxobrv8 kYgQafOajHWbB5CWI1CnzKmNDcNwsplyBvN7awBqBj12M6JdYMTLUfxXCw9YLRGs U1qsH9RkuFLv77cvsNRxFUIzMQ7LftY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:49 2025 by rpki-client