$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4968ab29-e250-3217-b868-47259caf3ec9.roa File: 4968ab29-e250-3217-b868-47259caf3ec9.roa (raw, json) Hash identifier: Hm6XfFY+eKb/sG2v8zUZGHDHRoSW8YTi/gP1FbU/Lrs= Subject key identifier: D2:7B:27:74:3C:16:33:4F:71:BB:F9:A9:49:1B:24:45:D5:62:F7:76 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FEBAD08214B3B20FC1800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4968ab29-e250-3217-b868-47259caf3ec9.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397227 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:eb:ad:08:21:4b:3b:20:fc:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=25a37790-72f1-4db6-88cc-04e7226414a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:0d:ec:de:0f:7e:d5:89:ba:5c:56:6c:08: cd:17:b0:93:19:92:8a:73:a4:57:db:27:33:b0:e7: 1d:df:cf:8d:38:d5:1b:f3:0b:a9:93:47:13:43:61: 0f:1b:46:33:f3:3a:80:19:5e:11:79:ee:b6:c3:64: 28:79:dd:03:7d:99:7f:8c:4f:26:63:74:e7:9b:21: 35:0e:f4:71:95:e7:6a:61:c5:c8:ac:ae:34:07:83: a1:e2:04:b1:53:1d:13:76:59:ab:81:b9:d1:bd:d8: a7:46:6b:51:96:2a:30:6e:d4:1f:5a:bf:9d:c7:b0: 55:00:c0:13:a9:0f:4a:c6:7a:67:65:bc:d2:7c:ab: 8c:26:75:cc:80:5a:49:1e:5d:e5:41:b7:3e:88:52: a3:80:8d:a7:82:db:e3:4e:02:4f:50:1a:3d:28:94: d0:32:b6:42:fa:ad:6f:8e:cc:f7:28:9b:75:f9:0b: eb:a6:2c:e3:f7:10:fa:f1:12:b7:c3:39:38:e7:9c: 63:98:c5:61:73:5b:73:56:58:0b:4d:6b:2c:ec:a0: b3:ee:72:f3:91:52:b9:c6:2c:1c:0a:03:d1:d2:0a: c9:78:93:99:e4:00:ad:2d:09:e9:63:c6:5c:2e:e3: b8:79:13:7b:28:6b:38:bf:4b:df:af:4c:83:7a:34: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7B:27:74:3C:16:33:4F:71:BB:F9:A9:49:1B:24:45:D5:62:F7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4968ab29-e250-3217-b868-47259caf3ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:00:b6:73:28:26:e9:90:35:cf:85:65:d3:d9:e8:04:e7:be: da:db:6c:94:8d:c8:b8:5d:3b:d3:d5:c9:12:72:a4:29:e6:92: 0f:69:40:5f:7e:cf:39:6f:a4:dd:34:0f:74:3e:5e:f2:f2:46: 6c:0c:19:8e:b2:2d:38:14:b2:6d:60:b9:23:b1:4c:50:32:49: bb:4b:52:b4:d8:38:e2:19:21:11:92:b1:e8:69:1f:99:22:0d: d9:ce:af:a7:a5:b2:7b:79:e4:14:c8:d9:46:31:eb:da:c8:d3: ce:01:97:7b:78:cb:c8:7c:32:ac:63:35:b3:b8:9d:b0:be:07: 00:eb:b8:c8:2f:06:a7:65:28:c5:83:8c:16:ed:4d:04:c5:44: 32:54:79:cb:a0:be:e9:ad:99:f8:10:37:2e:25:82:54:2c:71: a7:77:fb:13:5b:67:64:02:0f:41:57:59:64:1a:bf:a6:17:6d: 04:b9:e9:6a:18:ae:2f:7d:2a:8c:5c:ff:2c:0f:c2:55:b8:a8: a0:30:8e:69:78:60:46:de:48:22:68:af:6b:a8:54:a5:07:da: b8:1e:34:a8:a1:f9:f9:85:b7:e6:96:c9:4b:6b:dc:76:de:4a: c8:74:92:0c:d6:10:a5:83:bd:26:e9:fb:ac:f5:f9:15:82:ca: 95:ac:92:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+utCCFLOyD8GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjVhMzc3OTAtNzJmMS00ZGI2LTg4Y2MtMDRlNzIyNjQxNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxsN7N4PftWJulxWbAjNF7CTGZKKc6RX2ycz sOcd38+NONUb8wupk0cTQ2EPG0Yz8zqAGV4Ree62w2Qoed0DfZl/jE8mY3TnmyE1 DvRxledqYcXIrK40B4Oh4gSxUx0TdlmrgbnRvdinRmtRliowbtQfWr+dx7BVAMAT qQ9KxnpnZbzSfKuMJnXMgFpJHl3lQbc+iFKjgI2ngtvjTgJPUBo9KJTQMrZC+q1v jsz3KJt1+Qvrpizj9xD68RK3wzk455xjmMVhc1tzVlgLTWss7KCz7nLzkVK5xiwc CgPR0grJeJOZ5ACtLQnpY8ZcLuO4eRN7KGs4v0vfr0yDejSFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ7J3Q8FjNPcbv5qUkbJEXVYvd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDk2OGFiMjktZTI1MC0z MjE3LWI4NjgtNDcyNTljYWYzZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4AtnMoJumQNc+FZdPZ6ATnvtrbbJSNyLhdO9PVyRJypCnmkg9pQF9+ zzlvpN00D3Q+XvLyRmwMGY6yLTgUsm1guSOxTFAySbtLUrTYOOIZIRGSsehpH5ki DdnOr6elsnt55BTI2UYx69rI084Bl3t4y8h8MqxjNbO4nbC+BwDruMgvBqdlKMWD jBbtTQTFRDJUecugvumtmfgQNy4lglQscad3+xNbZ2QCD0FXWWQav6YXbQS56WoY ri99Koxc/ywPwlW4qKAwjml4YEbeSCJor2uoVKUH2rgeNKih+fmFt+aWyUtr3Hbe Ssh0kgzWEKWDvSbp+6z1+RWCypWskr8= -----END CERTIFICATE-----Generated at Sun Jun 8 23:27:57 2025 by rpki-client