$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4722672e-e1ac-385c-9d6f-9497edf38049.roa File: 4722672e-e1ac-385c-9d6f-9497edf38049.roa (raw, json) Hash identifier: xYjTrtSpyNNODc7zqj1TI+OtlsshW6rmOqiCfMVNw3A= Subject key identifier: 21:2B:4F:C0:DC:FE:CA:72:75:B4:09:52:65:22:2F:42:6D:1B:DA:7F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FE8F60CC6FC0536F09A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4722672e-e1ac-385c-9d6f-9497edf38049.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397216 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e8:f6:0c:c6:fc:05:36:f0:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=948f87e1-7357-423f-9258-a6625f84c651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:68:0a:b3:64:4e:21:58:68:97:b4:b6:2d: ac:57:42:70:e8:a1:0c:8f:32:be:67:8f:02:4f:ce: e9:4c:3b:79:b8:0f:20:5b:ca:79:d7:4c:be:bf:2c: d9:b8:79:49:da:12:bc:6d:7a:c0:6b:ef:ea:10:06: 07:88:95:00:0a:72:0b:4d:b9:0d:07:2e:60:d4:f2: 09:e0:37:6f:84:7c:66:9f:e8:7f:55:a0:f7:6f:84: cb:f6:1b:c7:31:93:d9:43:a3:7f:40:ac:4d:89:44: 05:97:d7:2d:ab:a5:10:5b:54:65:4b:d3:79:7e:3b: 76:02:c2:97:73:e7:a1:05:09:ec:46:5b:40:75:52: 5b:36:7f:18:09:d9:f7:e1:7d:90:f0:42:55:02:a9: b6:20:3c:c0:db:92:7b:67:da:07:9b:fb:43:b4:5c: e8:ea:39:2b:18:d7:41:0d:c0:c1:a8:84:c9:36:e8: f0:46:77:60:54:d4:f5:2b:2b:55:ba:3e:ad:c2:56: bc:43:58:19:d4:b8:d9:53:6b:1b:09:ae:38:1d:19: 1e:46:70:dc:91:96:4e:35:32:12:cc:b2:fe:ca:e3: fa:f1:21:6e:43:c5:ac:3b:ef:70:7d:98:b5:d3:37: 9c:ba:fa:5b:c1:8f:90:1e:ef:55:1e:f4:59:92:b0: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2B:4F:C0:DC:FE:CA:72:75:B4:09:52:65:22:2F:42:6D:1B:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4722672e-e1ac-385c-9d6f-9497edf38049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:35:9a:80:aa:ad:b1:69:2b:76:1d:74:61:a0:f3:b4:e8:62: a7:c7:a3:5c:3d:2a:2a:9f:34:23:05:bb:f0:bd:fc:ca:3f:4f: 7a:0c:f2:fc:b4:a8:fd:24:39:70:2f:4c:9a:1d:02:60:36:8b: 52:29:e2:d3:2d:ca:a8:db:5a:3b:50:70:18:c8:49:24:73:24: b8:d9:35:ef:39:f5:3a:9b:be:77:50:6a:36:19:e2:6e:33:0f: 62:eb:1b:30:9b:32:39:e2:30:ff:95:97:4b:b3:22:ed:fb:ac: 1d:3d:25:e7:5c:d4:39:9f:50:85:95:70:c2:fc:be:98:7b:01: 74:19:51:d8:5a:f6:b4:07:ce:9f:a3:08:52:00:9d:ec:dd:2b: 5a:12:85:d9:57:c4:36:22:13:31:8b:0e:30:10:af:40:97:0a: 6c:cf:36:79:98:1f:0a:46:0c:1e:a5:10:4e:ef:4c:54:bb:b7: f7:9d:64:bb:f1:d2:7c:4f:b1:c7:cb:8b:2d:19:c8:ca:08:7c: b7:be:9b:c4:ee:9b:65:a6:d9:00:43:40:ba:ee:be:60:f5:b9: a7:c3:4d:f9:5e:6c:19:8c:3f:b4:33:6e:13:93:e2:47:3a:e1: a4:f9:b1:c3:75:73:9b:fc:0f:3c:ad:eb:5b:f3:c5:2f:13:f2: 3b:d7:ea:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+j2DMb8BTbwmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OTQ4Zjg3ZTEtNzM1Ny00MjNmLTkyNTgtYTY2MjVmODRjNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKVoCrNkTiFYaJe0ti2sV0Jw6KEMjzK+Z48C T87pTDt5uA8gW8p510y+vyzZuHlJ2hK8bXrAa+/qEAYHiJUACnILTbkNBy5g1PIJ 4DdvhHxmn+h/VaD3b4TL9hvHMZPZQ6N/QKxNiUQFl9ctq6UQW1RlS9N5fjt2AsKX c+ehBQnsRltAdVJbNn8YCdn34X2Q8EJVAqm2IDzA25J7Z9oHm/tDtFzo6jkrGNdB DcDBqITJNujwRndgVNT1KytVuj6twla8Q1gZ1LjZU2sbCa44HRkeRnDckZZONTIS zLL+yuP68SFuQ8WsO+9wfZi10zecuvpbwY+QHu9VHvRZkrD+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCErT8Dc/spydbQJUmUiL0JtG9p/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDcyMjY3MmUtZTFhYy0z ODVjLTlkNmYtOTQ5N2VkZjM4MDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc1moCqrbFpK3YddGGg87ToYqfHo1w9KiqfNCMFu/C9/Mo/T3oM8vy0 qP0kOXAvTJodAmA2i1Ip4tMtyqjbWjtQcBjISSRzJLjZNe859TqbvndQajYZ4m4z D2LrGzCbMjniMP+Vl0uzIu37rB09Jedc1DmfUIWVcML8vph7AXQZUdha9rQHzp+j CFIAnezdK1oShdlXxDYiEzGLDjAQr0CXCmzPNnmYHwpGDB6lEE7vTFS7t/edZLvx 0nxPscfLiy0ZyMoIfLe+m8Tum2Wm2QBDQLruvmD1uafDTflebBmMP7QzbhOT4kc6 4aT5scN1c5v8Dzyt61vzxS8T8jvX6rs= -----END CERTIFICATE-----Generated at Tue Jul 1 05:44:59 2025 by rpki-client