$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa File: ff45faf5-56ca-3c45-8e73-885c0701be83.roa (raw, json) Hash identifier: F5Qred9i56pnCQIwYzW+kBjZe9WCzRH7ylMF3KzoO+4= Subject key identifier: D9:11:87:3F:3C:47:61:FC:A2:67:B9:8E:4F:25:CB:6C:00:22:92:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59F1DF8201932203C2B050 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397227 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:f1:df:82:01:93:22:03:c2:b0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=25cba688-d6f4-4566-b3d7-c99c68e0f53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:32:aa:0f:41:55:ab:27:98:85:ce:d7:3f: ed:18:f2:f2:46:38:45:0e:ed:f1:3f:55:0a:16:d3: 69:9a:81:43:f2:99:21:7b:e2:ea:9b:56:1e:ca:8d: 64:2e:c5:ff:50:dd:b3:bc:c7:b4:63:f0:2f:78:a3: 1d:10:62:ae:05:2a:2a:83:c1:fc:b1:b2:6c:9a:f9: 5e:4d:7b:11:ee:79:2d:1b:43:97:72:d5:9b:48:b6: a5:ea:33:7f:6d:4a:ed:31:db:d0:4c:53:91:bf:3a: 1a:2d:1e:a8:1c:b1:fc:d9:bc:f9:3e:df:7d:b8:d3: 5c:34:64:49:d1:74:18:c7:a4:80:3d:c1:0a:02:f0: 39:44:ee:51:22:22:d1:51:a5:dd:16:60:f5:9c:43: 84:aa:f3:be:fe:44:24:47:a1:99:29:8c:10:02:5d: 13:10:e1:e2:4d:1a:88:8d:f9:71:59:b2:53:ee:37: 11:e9:02:07:1e:bf:2f:99:60:ad:ad:41:c1:42:aa: 20:f2:d1:29:69:9d:f5:27:be:e9:78:b2:93:f2:03: a5:47:77:a1:28:db:66:78:b2:e5:e0:7f:e4:ac:17: ba:86:03:a7:e3:2d:1d:94:f7:1c:c5:17:ae:d7:b7: ba:39:31:5a:9e:51:13:cb:c6:f7:84:17:f4:f8:2c: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:87:3F:3C:47:61:FC:A2:67:B9:8E:4F:25:CB:6C:00:22:92:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:3a:99:9d:4c:b1:2b:92:b1:98:a7:98:cf:be:66:fa:d0: 4a:40:ae:55:c8:31:cc:e1:73:65:48:4b:2b:13:d1:6f:d8:42: 71:72:99:c1:45:2b:34:9b:17:05:be:01:b5:10:9d:56:15:6a: f9:2e:db:aa:c8:ab:6b:ef:89:9e:e5:89:6c:84:41:7f:c0:a6: 55:7e:a1:8b:fc:14:ca:4e:87:96:1f:d5:33:e3:de:3a:56:90: c3:31:38:e8:dd:88:5d:79:31:cb:96:68:18:99:5f:ab:69:ba: 2d:d3:83:fb:a6:02:1d:45:92:d5:2d:af:b5:37:14:4a:fc:4a: d1:23:c9:d8:94:bf:40:a2:44:99:6b:49:48:72:09:41:86:53: 7f:bf:71:be:6a:db:78:ad:5d:1e:75:b1:c6:ad:00:41:ea:05: 22:76:1d:3f:d5:c7:57:93:1c:19:69:e4:a5:b4:eb:d1:d2:71: 27:d1:af:73:3e:17:2b:44:83:d0:8f:36:48:e8:b3:5d:75:eb: 1d:3f:cc:c4:44:f9:25:e8:0e:e0:d1:48:71:a0:ec:5c:f1:32: 10:96:1a:e1:53:5a:33:4c:86:ef:26:02:ab:30:6e:72:cf:51: 44:30:e3:6e:f8:89:f3:c7:f8:f3:10:32:5f:d0:97:e7:cf:b8: e1:46:ed:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfHfggGTIgPCsFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MjVjYmE2ODgtZDZmNC00NTY2LWIzZDctYzk5YzY4ZTBmNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dcyqg9BVasnmIXO1z/tGPLyRjhFDu3xP1UK FtNpmoFD8pkhe+Lqm1Yeyo1kLsX/UN2zvMe0Y/AveKMdEGKuBSoqg8H8sbJsmvle TXsR7nktG0OXctWbSLal6jN/bUrtMdvQTFORvzoaLR6oHLH82bz5Pt99uNNcNGRJ 0XQYx6SAPcEKAvA5RO5RIiLRUaXdFmD1nEOEqvO+/kQkR6GZKYwQAl0TEOHiTRqI jflxWbJT7jcR6QIHHr8vmWCtrUHBQqog8tEpaZ31J77peLKT8gOlR3ehKNtmeLLl 4H/krBe6hgOn4y0dlPccxReu17e6OTFanlETy8b3hBf0+Cx/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkRhz88R2H8ome5jk8ly2wAIpIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmY0NWZhZjUtNTZjYS0z YzQ1LThlNzMtODg1YzA3MDFiZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfVOpmdTLErkrGYp5jPvmb60EpArlXIMczhc2VISysT0W/YQnFymcFF KzSbFwW+AbUQnVYVavku26rIq2vviZ7liWyEQX/AplV+oYv8FMpOh5Yf1TPj3jpW kMMxOOjdiF15McuWaBiZX6tpui3Tg/umAh1FktUtr7U3FEr8StEjydiUv0CiRJlr SUhyCUGGU3+/cb5q23itXR51scatAEHqBSJ2HT/Vx1eTHBlp5KW069HScSfRr3M+ FytEg9CPNkjos1116x0/zMRE+SXoDuDRSHGg7FzxMhCWGuFTWjNMhu8mAqswbnLP UUQw4274ifPH+PMQMl/Ql+fPuOFG7XM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:06 2025 by rpki-client