$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa File: 21b27889-d1bf-37f1-875c-637accb009ac.roa (raw, json) Hash identifier: 0109ITLVcU0Jq9g+j0tabbsvtIcWrfHacwGVNZUsYxk= Subject key identifier: 69:0E:85:93:8A:32:AB:49:AB:1D:F3:04:79:54:3F:ED:32:EC:1E:09 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3EBC7883C18714675F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397214 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3e:bc:78:83:c1:87:14:67:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7ec61b56-8cf6-41eb-b262-3ff7d53d25e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:30:4d:40:fc:62:01:d1:c5:a6:1d:44:39: ad:79:a4:f0:7b:38:a8:29:2e:21:78:6c:87:d8:4f: 74:a1:cd:0b:a0:2b:a3:c2:7f:36:48:7a:15:b2:de: 51:23:b5:50:20:a4:e4:ab:17:d4:60:70:4a:93:6b: b7:45:b2:8d:d7:94:e0:a9:48:99:ef:66:79:66:80: 6c:1a:3d:d4:5e:1a:1b:3b:4d:de:2d:6f:b9:e3:a8: 57:a3:86:a6:9d:07:6e:6f:91:5e:aa:f6:4e:f3:53: b9:d3:e6:f2:a8:69:37:1b:e5:b3:3e:2b:07:bf:bc: b6:f2:b6:0d:2e:d8:77:3e:34:43:29:c1:9d:b9:8e: c5:4e:0d:f5:a9:6d:2e:09:9b:58:45:b1:5c:b9:a3: c0:86:81:3a:7f:c1:46:33:b4:3b:d0:c4:5b:54:8b: f9:e6:2c:28:a4:00:ac:5a:eb:a0:15:7d:a9:ae:90: 6e:80:88:89:e3:76:9a:1d:98:27:24:94:c9:03:04: fc:f3:d1:38:58:9b:5c:b7:a9:03:0d:92:d3:1e:0a: b3:f6:d1:ad:3d:ab:08:66:0f:58:52:a4:c1:c9:d3: 6b:97:04:53:93:b4:aa:12:98:6c:ff:6c:47:05:3a: 50:94:89:a2:6b:b6:98:87:a0:db:9f:38:3e:a9:3b: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0E:85:93:8A:32:AB:49:AB:1D:F3:04:79:54:3F:ED:32:EC:1E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bf:15:95:67:37:ba:7c:64:33:4d:4d:cb:1f:92:7a:a0:a6: 02:b5:cf:ec:15:2e:51:56:5a:21:02:9e:38:86:27:49:2f:ff: b5:0e:f4:d1:aa:35:47:5b:44:d7:a7:6a:59:ee:58:34:75:5e: 0a:7d:d4:1d:67:f6:23:3f:8c:76:d5:e9:3f:9a:d5:93:50:52: 8c:be:b3:4d:15:c2:21:99:35:e3:a1:ad:6c:19:81:86:bc:4e: 9a:55:59:fa:3d:6f:a5:d7:23:60:4e:24:ef:a6:2d:e8:91:4a: ae:b4:b8:d6:04:75:9c:93:a0:ee:4b:de:36:51:b7:52:dd:e0: 0a:e0:16:44:05:a3:c8:6f:f0:0a:6d:fa:fe:12:49:47:39:15: 66:7b:86:1c:d5:a5:22:5c:8a:7d:26:fe:ef:49:6d:bc:19:ab: 39:51:25:28:72:4d:94:fe:c3:cd:9e:c0:19:50:b3:82:32:d4: ca:2d:5c:7c:b7:f9:f6:ef:e2:5e:d1:cf:51:44:d8:a6:5f:19: 09:b4:d2:fd:a2:34:da:0f:5d:94:5c:8d:73:31:26:00:47:72: c9:b7:5e:a9:8c:81:98:82:c2:18:af:f1:20:b1:34:17:05:2e: 1f:30:73:ac:4c:c8:f3:cb:4a:ec:6f:d6:03:8a:5d:f5:48:ea: c0:ee:b0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz68eIPBhxRnX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2VjNjFiNTYtOGNmNi00MWViLWIyNjItM2ZmN2Q1M2QyNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoMwTUD8YgHRxaYdRDmteaTwezioKS4heGyH 2E90oc0LoCujwn82SHoVst5RI7VQIKTkqxfUYHBKk2u3RbKN15TgqUiZ72Z5ZoBs Gj3UXhobO03eLW+546hXo4amnQdub5FeqvZO81O50+byqGk3G+WzPisHv7y28rYN Lth3PjRDKcGduY7FTg31qW0uCZtYRbFcuaPAhoE6f8FGM7Q70MRbVIv55iwopACs WuugFX2prpBugIiJ43aaHZgnJJTJAwT889E4WJtct6kDDZLTHgqz9tGtPasIZg9Y UqTBydNrlwRTk7SqEphs/2xHBTpQlImia7aYh6Dbnzg+qTvvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkOhZOKMqtJqx3zBHlUP+0y7B4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFiMjc4ODktZDFiZi0z N2YxLTg3NWMtNjM3YWNjYjAwOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu/FZVnN7p8ZDNNTcsfknqgpgK1z+wVLlFWWiECnjiGJ0kv/7UO9NGq NUdbRNenalnuWDR1Xgp91B1n9iM/jHbV6T+a1ZNQUoy+s00VwiGZNeOhrWwZgYa8 TppVWfo9b6XXI2BOJO+mLeiRSq60uNYEdZyToO5L3jZRt1Ld4ArgFkQFo8hv8Apt +v4SSUc5FWZ7hhzVpSJcin0m/u9JbbwZqzlRJShyTZT+w82ewBlQs4Iy1MotXHy3 +fbv4l7Rz1FE2KZfGQm00v2iNNoPXZRcjXMxJgBHcsm3XqmMgZiCwhiv8SCxNBcF Lh8wc6xMyPPLSuxv1gOKXfVI6sDusCg= -----END CERTIFICATE-----Generated at Sun May 11 01:58:01 2025 by rpki-client