$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa File: f91d0ed1-7305-3885-b650-88a595e34a41.roa (raw, json) Hash identifier: eKSiw2xpOgCwP3lfBGZJn4iB3WQta+ATeDc5G3avvOo= Subject key identifier: B2:4E:42:1A:06:0C:89:A6:99:36:EC:1C:99:6C:5B:1F:E3:88:1F:5F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59F20F40041A2864C3BE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397230 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:f2:0f:40:04:1a:28:64:c3:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=1f73eb43-89ad-4276-88f5-e296e45d326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:40:44:04:d1:7d:2c:83:9a:58:c5:31:21: b7:3b:39:4a:d1:8f:60:79:8e:b2:b5:f3:f6:35:e2: 9e:de:ae:e8:a9:c0:0e:83:20:8f:2c:f0:2f:30:21: c4:c3:b6:32:59:b5:6b:62:b2:27:39:73:cf:04:43: 37:c7:64:e7:e9:57:1e:0a:cf:d6:c1:94:6c:1d:0a: 55:51:b6:27:c7:f9:d6:7b:1f:6f:db:a6:11:3a:37: 43:aa:41:87:fa:20:04:cb:95:12:ca:ad:bb:41:a5: 60:7e:ec:d0:56:6f:64:c5:46:e6:30:63:bb:45:68: da:ed:2b:c0:f3:9a:e3:4e:f0:54:63:bd:d2:32:53: 4d:46:0b:4c:28:24:4a:3d:d1:c5:2e:f4:b4:de:8c: d3:c4:4c:49:9e:a5:9e:b0:c8:86:0e:1c:89:3f:c9: 80:62:c0:11:a7:b4:58:ff:27:a3:47:53:1e:63:3b: 01:ac:55:e5:1e:98:26:68:92:de:a7:6b:84:b2:f1: 54:83:c5:d0:ce:6f:0c:38:e8:82:99:8e:97:d8:90: 19:13:b0:0c:e0:a5:bc:a1:4a:9a:84:ea:86:25:1c: bf:d0:10:b2:12:c7:95:9b:b4:9f:09:e1:91:dc:e3: b6:59:b4:b3:b0:a1:81:88:66:8f:ac:16:66:b3:dd: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:42:1A:06:0C:89:A6:99:36:EC:1C:99:6C:5B:1F:E3:88:1F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f91d0ed1-7305-3885-b650-88a595e34a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9f:8e:a0:ec:94:d0:dc:52:33:7c:46:d4:4b:10:d7:ff:95: 49:0f:2b:a5:ba:65:34:34:16:f7:f3:81:19:85:91:7b:95:f4: 11:16:c1:15:e7:e6:bd:72:b3:9a:6a:3b:5a:fc:24:df:9c:6d: 9d:9c:19:e4:9d:09:b9:90:86:00:17:59:b9:0d:37:f4:3f:2b: 8c:ee:4d:c4:4a:9e:41:5b:1e:3e:28:74:87:6a:74:8b:11:f8: 47:1b:f0:ad:59:8a:f6:72:e9:48:ca:e4:e8:c8:5e:92:c4:91: 8e:d9:15:15:0a:91:e9:bb:8c:63:d0:23:43:d4:22:9c:68:2b: a2:c0:00:48:27:13:28:91:e2:cc:2c:95:7d:1f:a0:5f:35:b9: 19:29:76:90:6f:f8:ca:7f:86:26:cf:9b:16:5b:cc:0b:c1:c7: 39:24:a5:6b:4b:08:af:d2:8e:5c:eb:bc:81:b6:7c:2a:b6:8e: 6f:ef:94:00:91:f8:aa:d3:c8:b3:09:69:26:4a:95:98:ec:65: 73:8d:ab:ff:42:76:28:c7:03:c8:86:9f:1b:bc:37:44:13:4e: f5:e5:b2:86:f9:e7:83:60:b1:2d:f9:c5:c8:93:c0:64:1e:a1: b3:52:6d:50:79:5d:ac:1f:68:1b:a2:b5:e3:a2:35:37:f6:54: 77:7b:c3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfIPQAQaKGTDvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MWY3M2ViNDMtODlhZC00Mjc2LTg4ZjUtZTI5NmU0NWQzMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnllARATRfSyDmljFMSG3OzlK0Y9geY6ytfP2 NeKe3q7oqcAOgyCPLPAvMCHEw7YyWbVrYrInOXPPBEM3x2Tn6VceCs/WwZRsHQpV UbYnx/nWex9v26YROjdDqkGH+iAEy5USyq27QaVgfuzQVm9kxUbmMGO7RWja7SvA 85rjTvBUY73SMlNNRgtMKCRKPdHFLvS03ozTxExJnqWesMiGDhyJP8mAYsARp7RY /yejR1MeYzsBrFXlHpgmaJLep2uEsvFUg8XQzm8MOOiCmY6X2JAZE7AM4KW8oUqa hOqGJRy/0BCyEseVm7SfCeGR3OO2WbSzsKGBiGaPrBZms930mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJOQhoGDImmmTbsHJlsWx/jiB9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjkxZDBlZDEtNzMwNS0z ODg1LWI2NTAtODhhNTk1ZTM0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2fjqDslNDcUjN8RtRLENf/lUkPK6W6ZTQ0FvfzgRmFkXuV9BEWwRXn 5r1ys5pqO1r8JN+cbZ2cGeSdCbmQhgAXWbkNN/Q/K4zuTcRKnkFbHj4odIdqdIsR +Ecb8K1ZivZy6UjK5OjIXpLEkY7ZFRUKkem7jGPQI0PUIpxoK6LAAEgnEyiR4sws lX0foF81uRkpdpBv+Mp/hibPmxZbzAvBxzkkpWtLCK/SjlzrvIG2fCq2jm/vlACR +KrTyLMJaSZKlZjsZXONq/9CdijHA8iGnxu8N0QTTvXlsob554NgsS35xciTwGQe obNSbVB5XawfaBuiteOiNTf2VHd7wyM= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:38 2025 by rpki-client