$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa File: 8852dbaf-fd17-380a-a383-c40b65220c0d.roa (raw, json) Hash identifier: b+yD8RsP+5nm3en2Yvy8EKj7ZjYwFA8NT+Lx6/ift7M= Subject key identifier: E0:CD:42:D6:1D:72:B5:2B:60:39:AD:5F:F0:13:F0:97:C4:49:FA:97 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0616F3FED37F048D5440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397217 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:06:16:f3:fe:d3:7f:04:8d:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=34f878d1-69d6-405b-ab72-4b149cff27a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:c4:4d:19:33:ad:8c:d5:33:4b:49:44:b0: bd:de:51:f8:af:15:05:f4:31:2f:aa:2d:86:bf:91: d7:de:1a:fd:90:e9:56:07:d2:65:10:1e:b3:4d:05: 90:c8:71:4b:a2:87:4f:7e:e7:7b:7c:fc:06:07:99: c5:9f:e4:9c:af:81:1f:a1:f9:5e:a6:48:47:e1:04: 4e:47:e5:4c:9f:36:f2:4b:fa:a3:e9:d5:88:82:1f: ac:63:43:5a:b1:73:2b:39:c3:22:de:ed:1c:1d:d8: 4f:ea:1e:d9:5b:d1:16:56:96:a1:60:e1:2a:33:05: 1c:93:08:03:87:2c:e1:13:f0:42:b4:49:18:2b:22: 6d:fb:1f:7d:a9:f4:f3:c8:af:ae:5d:02:fd:cd:6e: 11:07:1e:4c:fe:d5:4a:b2:58:af:2d:26:43:87:51: 40:d3:6a:15:51:45:d8:a4:40:b9:18:48:35:4c:32: 69:ea:16:91:37:6d:fc:3c:91:70:8e:e6:2c:d6:27: d9:eb:27:92:ec:bf:06:ef:fe:3a:42:67:11:0a:79: 59:b0:40:8c:d4:0c:c0:2e:82:1d:ac:1a:8d:b1:6a: 5e:44:15:94:69:c4:b9:df:13:aa:4f:e5:fa:e7:a1: 23:f2:e4:7c:f4:95:3b:c8:ae:f0:74:b2:39:ed:f6: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CD:42:D6:1D:72:B5:2B:60:39:AD:5F:F0:13:F0:97:C4:49:FA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e0:94:9f:d1:19:41:d4:72:08:1c:30:f3:31:36:d4:14:35: 1e:89:f6:36:b2:90:3b:86:b6:f8:33:1e:df:aa:91:1e:cd:c0: 2c:f7:19:e5:ef:28:c5:8b:51:a4:ff:04:89:c7:ac:e3:5a:78: 92:b9:22:c8:97:12:ba:a5:df:9b:92:c3:26:27:fb:f9:11:0b: 5f:b0:ab:73:fe:7b:ba:1f:74:4b:fc:47:90:0b:5b:ef:a5:90: 3f:a7:27:f8:9e:de:34:8c:2f:87:95:eb:26:12:4d:fd:a7:76: d7:2e:15:d8:ef:d2:2c:18:d0:f4:69:b4:ef:cf:f8:65:ed:7b: de:9d:2f:cd:48:c9:1c:05:50:b4:4d:d4:d1:ae:5a:a4:56:bb: b4:e1:41:ba:64:a1:fd:d8:54:bf:a9:c3:05:6d:b5:1a:34:fb: 18:0c:71:7e:a3:58:0c:3d:2c:0f:8c:9f:d3:b9:f1:cf:56:d1: f6:ed:29:c7:68:fc:63:85:ba:7c:d7:89:50:b1:e2:6a:fe:d3: 50:77:3e:1e:40:a6:9f:5d:59:18:87:3d:d6:33:e4:87:1d:f7: 59:79:fa:ff:6a:23:cc:e3:63:a8:43:d6:92:e3:15:3d:d0:65: d5:9b:ba:51:c4:b1:67:b9:45:f9:7f:8d:ac:f3:42:7f:0f:87: 52:4c:59:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgYW8/7TfwSNVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MzRmODc4ZDEtNjlkNi00MDViLWFiNzItNGIxNDljZmYyN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyDETRkzrYzVM0tJRLC93lH4rxUF9DEvqi2G v5HX3hr9kOlWB9JlEB6zTQWQyHFLoodPfud7fPwGB5nFn+Scr4EfoflepkhH4QRO R+VMnzbyS/qj6dWIgh+sY0NasXMrOcMi3u0cHdhP6h7ZW9EWVpahYOEqMwUckwgD hyzhE/BCtEkYKyJt+x99qfTzyK+uXQL9zW4RBx5M/tVKslivLSZDh1FA02oVUUXY pEC5GEg1TDJp6haRN238PJFwjuYs1ifZ6yeS7L8G7/46QmcRCnlZsECM1AzALoId rBqNsWpeRBWUacS53xOqT+X656Ej8uR89JU7yK7wdLI57fZ8fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODNQtYdcrUrYDmtX/AT8JfESfqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODg1MmRiYWYtZmQxNy0z ODBhLWEzODMtYzQwYjY1MjIwYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLglJ/RGUHUcggcMPMxNtQUNR6J9jaykDuGtvgzHt+qkR7NwCz3GeXv KMWLUaT/BInHrONaeJK5IsiXErql35uSwyYn+/kRC1+wq3P+e7ofdEv8R5ALW++l kD+nJ/ie3jSML4eV6yYSTf2ndtcuFdjv0iwY0PRptO/P+GXte96dL81IyRwFULRN 1NGuWqRWu7ThQbpkof3YVL+pwwVttRo0+xgMcX6jWAw9LA+Mn9O58c9W0fbtKcdo /GOFunzXiVCx4mr+01B3Ph5App9dWRiHPdYz5Icd91l5+v9qI8zjY6hD1pLjFT3Q ZdWbulHEsWe5Rfl/jazzQn8Ph1JMWd8= -----END CERTIFICATE-----Generated at Fri May 9 09:47:57 2025 by rpki-client