$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa File: 23529858-d4ab-30bf-a73f-38e8897de341.roa (raw, json) Hash identifier: 598AK3h9VgqI8GLXQmukKXZnLOHiREj9gSKrnQuCJh8= Subject key identifier: 32:83:3F:78:1B:6F:67:0A:FC:C6:C4:BA:C1:18:A7:EE:4A:E0:6B:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858495C2464E9E31311CD88CD4F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 19905 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:64:e9:e3:13:11:cd:88:cd:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=426e60b3-b850-450d-af57-9c13fe3ff9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:38:e2:de:26:c5:28:ea:e5:c9:f1:16:cf: c2:8f:b1:26:0a:19:22:4a:9e:74:99:20:ab:83:49: 1b:9f:4d:42:aa:e6:de:4d:cc:81:01:44:20:90:cd: 2e:2b:4f:5f:1b:b5:1a:3e:25:5a:a7:d9:09:61:de: c6:88:c1:e2:3c:13:86:4f:45:c6:6a:a1:10:37:41: 72:72:b7:29:62:4d:f6:b7:d9:5a:cd:b2:66:56:0b: 92:9f:99:c1:7d:9b:7d:23:9b:7a:d2:14:c3:6b:ee: 75:05:b5:1c:81:92:fd:b6:56:4b:d5:8f:5b:ad:17: 93:d5:43:96:81:c7:bb:bc:d8:e2:3c:90:c3:e8:dc: cc:d3:5b:d9:7c:e6:6e:d2:cd:cc:0e:f8:c2:56:16: 13:e9:e2:80:1b:75:18:a0:6c:28:1d:f7:03:37:b1: be:91:4f:a8:32:bc:a8:d5:76:c5:4e:80:64:47:27: b1:88:d2:b3:da:ab:67:42:bb:ee:8c:7b:6e:cd:75: ad:a7:db:72:7f:c3:7f:9a:89:1d:95:05:72:52:33: ac:ec:e1:ca:df:20:86:15:57:5d:15:9e:57:37:63: b5:5d:67:e2:5c:7a:2d:09:77:96:dc:d5:0b:ba:4c: f3:97:50:0d:64:7a:83:c9:58:d6:58:2b:9a:43:3a: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:83:3F:78:1B:6F:67:0A:FC:C6:C4:BA:C1:18:A7:EE:4A:E0:6B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5c:13:5c:52:ff:ed:5b:41:6c:0a:70:ed:75:50:94:d1:3a: 5e:c8:a6:00:9d:06:eb:41:a2:c6:b3:ca:1f:ac:5e:1f:2b:d5: c8:08:0d:ea:32:30:e7:06:c5:11:64:09:de:7a:a6:05:ed:e0: 08:c2:c6:08:9d:cb:d0:ca:22:1c:1d:13:b2:c1:88:5d:28:ec: 9d:b8:84:8c:d2:9d:5e:fb:72:9f:14:64:67:3d:9f:01:30:61: 62:a0:64:95:c0:a3:80:86:05:62:98:b1:df:7f:38:ef:a3:b5: 44:e5:69:b7:2b:54:23:89:26:06:d6:63:64:60:b8:60:4b:87: 62:b2:53:73:98:7e:36:1b:95:de:2e:6d:b1:1c:68:b2:fe:38: 29:e5:06:3a:72:05:a1:99:00:fd:8a:20:68:d8:12:da:ea:a1: 46:97:06:fa:0c:c3:25:a9:2f:94:46:ba:17:dc:46:ea:dc:2c: 69:5b:e8:80:26:2e:82:38:4a:93:93:06:1d:fd:35:64:4f:23: 61:83:67:06:bd:b2:46:ac:06:85:b0:d6:2b:14:b2:10:e1:4c: a9:a7:3f:70:28:e1:2e:6c:6b:c9:30:04:09:5d:ec:3f:67:54: 5f:04:8a:85:a9:f2:b5:19:99:3a:a2:56:02:b3:96:81:a5:28: 1b:db:c1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJGTp4xMRzYjNTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NDI2ZTYwYjMtYjg1MC00NTBkLWFmNTctOWMxM2ZlM2ZmOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmo44t4mxSjq5cnxFs/Cj7EmChkiSp50mSCr g0kbn01CqubeTcyBAUQgkM0uK09fG7UaPiVap9kJYd7GiMHiPBOGT0XGaqEQN0Fy crcpYk32t9lazbJmVguSn5nBfZt9I5t60hTDa+51BbUcgZL9tlZL1Y9brReT1UOW gce7vNjiPJDD6NzM01vZfOZu0s3MDvjCVhYT6eKAG3UYoGwoHfcDN7G+kU+oMryo 1XbFToBkRyexiNKz2qtnQrvujHtuzXWtp9tyf8N/mokdlQVyUjOs7OHK3yCGFVdd FZ5XN2O1XWfiXHotCXeW3NULukzzl1ANZHqDyVjWWCuaQzqF7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKDP3gbb2cK/MbEusEYp+5K4GuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjM1Mjk4NTgtZDRhYi0z MGJmLWE3M2YtMzhlODg5N2RlMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFcE1xS/+1bQWwKcO11UJTROl7IpgCdButBosazyh+sXh8r1cgIDeoy MOcGxRFkCd56pgXt4AjCxgidy9DKIhwdE7LBiF0o7J24hIzSnV77cp8UZGc9nwEw YWKgZJXAo4CGBWKYsd9/OO+jtUTlabcrVCOJJgbWY2RguGBLh2KyU3OYfjYbld4u bbEcaLL+OCnlBjpyBaGZAP2KIGjYEtrqoUaXBvoMwyWpL5RGuhfcRurcLGlb6IAm LoI4SpOTBh39NWRPI2GDZwa9skasBoWw1isUshDhTKmnP3Ao4S5sa8kwBAld7D9n VF8EioWp8rUZmTqiVgKzloGlKBvbwdw= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:44 2025 by rpki-client