$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d026fa44-e35e-3bd2-8fd9-703f3e363b34.roa File: d026fa44-e35e-3bd2-8fd9-703f3e363b34.roa (raw, json) Hash identifier: ncUGotTv6wHg+QMBZLxmfVDvsgWjUyr9BxS1+u0I9OI= Subject key identifier: 6C:07:CF:7B:04:5E:99:B7:CB:CD:99:2F:2C:CA:2A:51:7A:A9:97:A8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858495C246766D3905B7A423AA080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d026fa44-e35e-3bd2-8fd9-703f3e363b34.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 397226 IP address blocks: 156.154.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:67:66:d3:90:5b:7a:42:3a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=711d065e-233a-4535-8384-30caa866472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:bb:8f:d6:30:a7:83:4c:e1:91:29:a1:58: 69:97:c7:5e:84:82:20:dd:a0:fd:b7:4c:02:6b:40: 36:d4:9e:4a:7d:3f:08:30:35:7f:60:d8:0e:cb:ee: f5:a6:64:3c:83:49:98:16:23:ac:ea:0a:cb:fe:9d: ae:00:fe:76:2f:2f:26:c7:83:a3:da:60:b1:77:de: 1b:d8:0a:b7:30:27:f2:cc:df:83:01:b6:4b:1c:31: a9:3d:c4:d8:d8:56:bc:9d:e4:a5:f1:ba:43:85:b5: 5c:73:09:8b:3b:8d:bd:b7:a9:ec:6f:e9:ab:34:48: 49:79:bb:87:ca:6a:0d:78:2f:82:b0:ad:08:8e:8a: 53:0f:f2:6b:4a:ad:84:d2:97:fc:17:fb:be:4d:d3: 5e:be:60:28:f6:5e:43:bc:48:e4:d7:ec:e8:e8:82: 69:02:33:75:5f:a4:11:aa:d9:07:cc:ad:18:56:ae: 33:19:2d:0f:0c:85:8d:15:4a:6e:80:d9:88:70:a0: f2:65:81:7f:c6:96:c9:8f:3e:a7:21:51:7e:ab:f4: 29:32:56:3b:e6:a6:4c:aa:48:00:b6:fa:95:8b:47: cd:d2:bd:fd:1f:e6:b7:ed:26:d6:80:8e:f7:83:61: f4:70:ff:7a:27:9d:bd:0f:e9:82:0f:82:a1:fd:ba: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:CF:7B:04:5E:99:B7:CB:CD:99:2F:2C:CA:2A:51:7A:A9:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d026fa44-e35e-3bd2-8fd9-703f3e363b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:8f:52:b4:25:88:30:50:15:fe:ba:d5:4c:43:10:e1:f2: 82:f4:f0:f9:dc:a5:d5:67:41:20:74:87:69:c8:d9:22:63:03: 70:35:6d:2e:35:10:33:db:be:c1:74:c6:f5:eb:c8:fe:24:9d: 16:2d:cb:16:7c:3c:2c:a7:b4:47:38:47:d2:33:c9:ce:f1:62: b4:f4:e4:c6:70:4b:1f:89:2c:6e:1f:59:8c:8e:5e:5b:d2:c9: 1b:1b:a8:cd:4e:90:f1:10:f2:9a:25:23:d5:f7:fe:e4:c0:7f: b5:79:ab:e9:8f:ee:37:3a:0e:b2:9e:d8:1a:0e:13:c2:c4:c9: 6d:b5:2c:57:e7:ab:6e:e3:bb:eb:c7:10:41:e1:e7:6f:21:87: 96:12:5e:0a:17:5c:f8:69:f7:d2:cc:00:f0:10:3d:a2:f9:13: bf:e1:44:75:dc:32:d5:45:4e:5f:8b:fe:0f:20:3d:48:9e:fd: 76:0e:bf:79:cc:e9:c2:e4:12:8f:75:e4:be:e4:dd:3d:ca:6a: ca:a9:5c:c6:ff:5f:fb:ed:34:2f:e0:6c:c6:aa:cd:3e:e4:90: 5a:a6:f9:c4:f2:20:d9:21:9d:30:0f:08:fb:0d:ed:44:6c:63: c0:cf:32:d5:ea:9b:9d:6c:5c:0c:4f:1c:b7:c3:fd:77:9c:f6: b3:1d:ce:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJGdm05BbekI6oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NzExZDA2NWUtMjMzYS00NTM1LTgzODQtMzBjYWE4NjY0NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8G7j9Ywp4NM4ZEpoVhpl8dehIIg3aD9t0wC a0A21J5KfT8IMDV/YNgOy+71pmQ8g0mYFiOs6grL/p2uAP52Ly8mx4Oj2mCxd94b 2Aq3MCfyzN+DAbZLHDGpPcTY2Fa8neSl8bpDhbVccwmLO429t6nsb+mrNEhJebuH ymoNeC+CsK0IjopTD/JrSq2E0pf8F/u+TdNevmAo9l5DvEjk1+zo6IJpAjN1X6QR qtkHzK0YVq4zGS0PDIWNFUpugNmIcKDyZYF/xpbJjz6nIVF+q/QpMlY75qZMqkgA tvqVi0fN0r39H+a37SbWgI73g2H0cP96J529D+mCD4Kh/bpV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwHz3sEXpm3y82ZLyzKKlF6qZeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDAyNmZhNDQtZTM1ZS0z YmQyLThmZDktNzAzZjNlMzYzYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADujj1K0JYgwUBX+utVMQxDh8oL08PncpdVnQSB0h2nI2SJjA3A1bS41 EDPbvsF0xvXryP4knRYtyxZ8PCyntEc4R9Izyc7xYrT05MZwSx+JLG4fWYyOXlvS yRsbqM1OkPEQ8polI9X3/uTAf7V5q+mP7jc6DrKe2BoOE8LEyW21LFfnq27ju+vH EEHh528hh5YSXgoXXPhp99LMAPAQPaL5E7/hRHXcMtVFTl+L/g8gPUie/XYOv3nM 6cLkEo915L7k3T3KasqpXMb/X/vtNC/gbMaqzT7kkFqm+cTyINkhnTAPCPsN7URs Y8DPMtXqm51sXAxPHLfD/Xec9rMdzlg= -----END CERTIFICATE-----Generated at Sun Apr 6 04:55:32 2025 by rpki-client