$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa File: 86bf22de-20a8-35a9-8b4d-3d31183807c8.roa (raw, json) Hash identifier: Pd3brY9yRdxr4EqMODGTjI+AJUpnY1TUs+udmTmMXAo= Subject key identifier: 11:6F:7C:9B:B8:E0:07:69:E8:C5:C8:58:5B:83:8B:91:59:0A:81:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858496FAF1F6945F5B99644928200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397217 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:1f:69:45:f5:b9:96:44:92:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=40498a24-27cb-494b-83c8-2e0fa4906603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:e0:3b:1a:04:34:41:e8:6d:a1:0c:03:0e: 4a:cf:cb:c0:43:70:81:75:e2:49:f6:9f:47:67:03: 97:53:b7:8f:92:fa:70:02:91:61:a4:3e:3a:e3:c7: 46:ae:fe:c4:fa:dc:d1:53:ed:02:d1:9d:bb:1f:4d: 84:7f:c5:79:eb:b5:e4:fc:af:31:6a:14:22:8f:1e: 65:39:85:47:3b:03:bd:08:99:8e:8b:31:17:13:95: df:de:ba:f3:fc:de:2d:61:70:63:f7:fc:7c:2c:ea: 28:eb:15:da:4d:75:94:3a:c0:fb:39:ce:20:02:ec: 18:2b:77:1e:88:db:e9:98:91:d3:bc:7d:92:b1:35: 2d:b3:91:f1:d0:6a:d7:fc:c3:58:35:cc:76:96:53: d1:fe:42:78:05:39:54:93:b5:dc:e8:46:ae:cf:dd: 2a:5d:8e:82:fb:ac:4a:b4:ba:1b:f8:ac:a3:0a:62: 1c:ed:8f:dd:d7:f4:5b:3c:22:10:dd:f8:73:fb:3b: 00:be:3d:d2:06:38:a8:17:8a:1c:9f:11:f9:c5:d3: da:9c:bb:52:21:ca:66:83:20:da:c1:ab:94:94:6f: 9c:12:4c:6d:68:7f:7c:6c:f8:6d:85:14:b1:1f:76: a1:c1:15:6c:18:47:41:31:be:78:d5:c0:f2:8e:3a: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:7C:9B:B8:E0:07:69:E8:C5:C8:58:5B:83:8B:91:59:0A:81:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86bf22de-20a8-35a9-8b4d-3d31183807c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:97:4d:37:d1:f9:32:cd:c4:dc:b1:17:6e:ab:cf:17:87:52: 72:44:ab:cd:07:d9:07:c9:6a:2e:c4:45:6b:c9:14:f6:33:71: 1e:a4:b8:90:a2:65:97:25:6b:39:5f:16:e7:cd:b4:04:4a:48: 17:0b:69:80:b2:26:0d:97:82:0d:e8:8e:31:e2:c1:cb:04:9d: 61:80:6f:58:f8:08:a9:4a:5d:e9:4f:65:2d:db:06:76:58:fc: 91:05:97:6b:5b:cf:a6:e3:54:45:65:cf:5b:05:22:37:3b:1e: 75:a9:66:40:81:51:8a:3a:40:b0:ed:a3:71:9d:b8:04:69:63: 89:20:5c:65:f1:a4:58:ea:66:44:31:f2:b4:e7:d8:b0:ce:67: a3:bb:08:7f:ee:43:5e:11:2e:09:ff:46:2d:a5:fc:0a:0b:41: 3a:df:c0:46:36:a2:d1:f4:f7:c2:09:e3:93:8b:89:8f:17:7c: c5:84:64:11:59:a5:bb:61:a6:2e:07:9e:f5:d8:a9:68:c2:99: d9:c8:c9:34:7c:5e:6b:61:e1:29:fc:ed:3e:fd:e2:5f:0d:76: 4e:f7:6d:58:59:b7:3c:d2:06:c0:e9:0a:f8:43:5c:22:a5:84: bb:eb:97:6b:f6:d6:44:72:43:0a:f1:e7:35:5e:4a:a4:18:a1: ad:4d:19:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrx9pRfW5lkSSggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NDA0OThhMjQtMjdjYi00OTRiLTgzYzgtMmUwZmE0OTA2NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSrgOxoENEHobaEMAw5Kz8vAQ3CBdeJJ9p9H ZwOXU7ePkvpwApFhpD4648dGrv7E+tzRU+0C0Z27H02Ef8V567Xk/K8xahQijx5l OYVHOwO9CJmOizEXE5Xf3rrz/N4tYXBj9/x8LOoo6xXaTXWUOsD7Oc4gAuwYK3ce iNvpmJHTvH2SsTUts5Hx0GrX/MNYNcx2llPR/kJ4BTlUk7Xc6Eauz90qXY6C+6xK tLob+KyjCmIc7Y/d1/RbPCIQ3fhz+zsAvj3SBjioF4ocnxH5xdPanLtSIcpmgyDa wauUlG+cEkxtaH98bPhthRSxH3ahwRVsGEdBMb541cDyjjrjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFvfJu44Adp6MXIWFuDi5FZCoFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODZiZjIyZGUtMjBhOC0z NWE5LThiNGQtM2QzMTE4MzgwN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmXTTfR+TLNxNyxF26rzxeHUnJEq80H2QfJai7ERWvJFPYzcR6kuJCi ZZclazlfFufNtARKSBcLaYCyJg2Xgg3ojjHiwcsEnWGAb1j4CKlKXelPZS3bBnZY /JEFl2tbz6bjVEVlz1sFIjc7HnWpZkCBUYo6QLDto3GduARpY4kgXGXxpFjqZkQx 8rTn2LDOZ6O7CH/uQ14RLgn/Ri2l/AoLQTrfwEY2otH098IJ45OLiY8XfMWEZBFZ pbthpi4HnvXYqWjCmdnIyTR8Xmth4Sn87T794l8Ndk73bVhZtzzSBsDpCvhDXCKl hLvrl2v21kRyQwrx5zVeSqQYoa1NGWU= -----END CERTIFICATE-----Generated at Sun Apr 6 19:10:36 2025 by rpki-client