$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa File: f3b1c337-d3d1-3299-a075-1393289e4d21.roa (raw, json) Hash identifier: ca+kKo7hcihls4E7p3KuWwUuzBbwNmgq8e5Xixd0UTo= Subject key identifier: FF:88:69:56:E0:75:1B:B1:48:9A:D9:D7:B7:CD:56:1A:44:59:34:79 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0B63D8992000F60571C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397213 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0b:63:d8:99:20:00:f6:05:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=4fde5ae2-b16e-408a-94ca-b45bac6a36a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1a:14:24:49:e6:39:36:28:d3:70:de:7e:2c: 68:71:4d:98:06:e0:a4:b9:9b:e3:10:3d:be:5b:37: 1a:41:99:60:a7:b8:25:6f:34:fb:d4:0a:a7:99:b2: 09:49:d2:44:f2:ad:63:32:91:58:89:44:71:23:7e: 40:f1:08:94:ca:54:60:c7:c5:be:4f:c4:0d:f0:a3: dd:b3:29:69:ad:e8:a6:ed:ee:bf:07:cb:d7:0d:a6: a2:82:1f:cb:c5:24:3d:d6:d5:60:6d:9f:42:3b:6e: 24:24:4c:0a:28:bd:11:41:9a:77:0e:bf:ac:af:d8: d6:e8:9e:2d:a6:05:f3:7c:bc:3d:0e:57:36:bf:41: 16:b2:f3:bc:e5:cb:7c:c2:20:06:83:34:5d:d1:57: 2a:40:62:a1:29:ce:df:9e:22:2f:b8:78:c4:48:67: db:69:f4:05:7c:db:f4:00:ce:bf:44:f4:8e:49:29: 5b:27:d7:32:59:44:d9:33:29:cc:73:0f:67:c7:e5: be:10:bd:40:cc:59:33:4e:55:0d:51:33:6f:ec:73: d1:71:14:37:f5:d0:c5:82:62:d4:e2:f8:98:f4:b0: f2:b4:9c:19:98:40:a5:f5:fa:a4:56:b3:05:66:75: 4e:5e:dd:9e:5c:5a:0b:3d:17:ce:0f:c8:46:7b:60: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:69:56:E0:75:1B:B1:48:9A:D9:D7:B7:CD:56:1A:44:59:34:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b4:c0:e9:fe:2e:62:25:00:69:e4:29:d1:d4:09:81:ab:87: ef:dd:0d:4c:dd:b8:1a:23:32:4c:72:d8:50:67:b7:cd:dd:fd: 8b:21:2a:87:3f:d8:b4:18:74:d3:9a:63:3f:ed:10:48:d4:49: b1:d1:80:d9:e2:ed:0d:3a:31:94:e1:64:1d:f7:34:c4:7f:21: 9d:3f:a4:9d:28:a3:c5:b0:ba:85:13:fd:58:f8:a0:c9:06:68: 9b:d1:e2:36:a0:bf:a6:6d:b8:52:7f:18:53:13:1d:cc:d5:d7: 27:a4:87:30:e1:10:1b:a5:32:82:e1:c2:04:93:e2:90:e0:35: ed:61:bc:2a:34:a2:2b:78:f2:04:db:a1:3b:03:e6:55:fd:02: f0:d9:be:50:55:6f:f8:a6:38:a5:99:c9:5c:e3:9b:60:16:cf: af:5e:cf:07:58:2f:7c:21:1c:0d:3a:00:d4:db:47:f5:b3:a3: 88:64:2d:aa:1e:28:21:8a:79:72:4c:6e:90:d1:56:4f:f2:6c: c8:d2:ff:3a:bf:9c:42:d3:40:62:4f:5a:93:8d:ec:5b:3a:04: 5f:0c:12:a3:67:02:47:b7:75:86:b2:e2:48:f8:52:42:c3:2e: 2d:e5:62:9b:a1:5e:c4:49:0b:f8:61:55:1a:cf:b1:3b:09:85: ee:6c:70:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgtj2JkgAPYFccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NGZkZTVhZTItYjE2ZS00MDhhLTk0Y2EtYjQ1YmFjNmEzNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBoUJEnmOTYo03DefixocU2YBuCkuZvjED2+ WzcaQZlgp7glbzT71AqnmbIJSdJE8q1jMpFYiURxI35A8QiUylRgx8W+T8QN8KPd sylpreim7e6/B8vXDaaigh/LxSQ91tVgbZ9CO24kJEwKKL0RQZp3Dr+sr9jW6J4t pgXzfLw9Dlc2v0EWsvO85ct8wiAGgzRd0VcqQGKhKc7fniIvuHjESGfbafQFfNv0 AM6/RPSOSSlbJ9cyWUTZMynMcw9nx+W+EL1AzFkzTlUNUTNv7HPRcRQ39dDFgmLU 4viY9LDytJwZmECl9fqkVrMFZnVOXt2eXFoLPRfOD8hGe2AnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+IaVbgdRuxSJrZ17fNVhpEWTR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjNiMWMzMzctZDNkMS0z Mjk5LWEwNzUtMTM5MzI4OWU0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+0wOn+LmIlAGnkKdHUCYGrh+/dDUzduBojMkxy2FBnt83d/YshKoc/ 2LQYdNOaYz/tEEjUSbHRgNni7Q06MZThZB33NMR/IZ0/pJ0oo8WwuoUT/Vj4oMkG aJvR4jagv6ZtuFJ/GFMTHczV1yekhzDhEBulMoLhwgST4pDgNe1hvCo0oit48gTb oTsD5lX9AvDZvlBVb/imOKWZyVzjm2AWz69ezwdYL3whHA06ANTbR/Wzo4hkLaoe KCGKeXJMbpDRVk/ybMjS/zq/nELTQGJPWpON7Fs6BF8MEqNnAke3dYay4kj4UkLD Li3lYpuhXsRJC/hhVRrPsTsJhe5scJk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:50:09 2025 by rpki-client