$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa File: a1d17512-1459-3108-8b8c-3798f05db395.roa (raw, json) Hash identifier: Dr7JAVsnrdc+Es40Zpca11ePglJU9gjPrPQcvwJaPO8= Subject key identifier: A5:DE:D0:78:AF:B1:0E:59:BE:71:7D:0E:82:62:AE:E7:47:6B:59:AA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A0C0845A82D35EDB0F5C7B880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 399163 IP address blocks: 156.154.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:45:a8:2d:35:ed:b0:f5:c7:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=cdaff0f0-4c70-4e12-a0d4-27ca48c1fb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:22:12:21:a8:c1:81:82:93:9d:62:9d:5e: 14:db:1e:55:a0:81:ab:17:14:5a:87:3c:42:0e:db: 03:5e:0e:76:ed:64:f5:b7:47:0d:bb:ca:f0:a1:b9: 46:89:55:96:7e:00:5a:eb:3a:d0:5d:1f:d1:c6:56: 46:c5:77:b4:0c:c2:3a:da:ae:a9:08:10:48:f6:30: d0:92:3d:a0:50:2d:e6:4a:ab:a4:11:3c:c2:95:f8: d6:5d:b0:80:59:2c:78:5f:97:d4:3f:ca:ed:a2:3b: 6a:d5:1a:23:19:77:1c:51:22:8d:07:24:f2:aa:79: 6e:44:f4:71:3d:55:57:26:1b:7b:f4:b8:9e:f2:70: 31:91:6c:62:f5:d8:b2:d0:76:39:d6:5a:38:36:9c: 4c:70:99:26:b7:f0:a4:da:fc:44:bb:80:0f:21:fe: f5:78:6f:61:55:c3:60:4e:d9:a3:4e:a7:97:9d:c2: 77:24:6c:c3:3c:37:32:7a:0d:94:2d:90:14:74:9d: d7:c4:36:8c:79:14:de:46:55:dc:3d:9b:90:f8:ba: f0:56:42:65:6d:48:43:42:e8:6f:e6:8f:81:d0:47: ab:b3:6d:38:d5:7e:1a:d9:a3:df:7b:df:7e:c1:75: 70:1d:b2:51:7c:37:51:f0:1c:a6:88:fe:5b:59:40: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:D0:78:AF:B1:0E:59:BE:71:7D:0E:82:62:AE:E7:47:6B:59:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:92:3f:e4:14:ee:4a:9f:38:e5:f4:75:da:dc:01:21:31:bc: 37:e8:b1:02:2d:d1:63:a3:e8:5d:dc:3b:1b:7d:9e:39:99:40: 7a:24:e9:05:df:bc:34:1b:24:d6:8d:0c:97:aa:f8:16:f5:64: b9:dd:51:03:fc:26:b6:ac:58:b2:8c:71:c6:57:28:f7:78:c5: 2c:7a:a4:1b:7b:cb:9a:2e:45:1c:19:82:00:bf:03:c2:61:d6: 6d:67:c7:7c:d3:f3:69:8d:97:e7:2a:e3:14:ac:6c:e6:73:eb: e8:87:c5:f8:21:77:f5:9d:df:e1:30:e9:08:f6:55:f4:68:c8: c6:03:1e:a4:3a:28:ed:f4:83:87:51:36:1c:e7:00:27:b3:5b: b2:e4:50:f4:d0:3c:e7:c3:74:cd:55:3c:3b:01:0c:b7:8e:ef: ac:7d:1e:86:c6:94:64:ef:26:51:1a:77:62:43:7c:cc:27:42: b4:3a:6b:45:a5:b2:76:42:ba:4a:5e:3f:54:95:bb:1c:d1:c9: 48:6d:e3:ec:a2:d9:d7:36:0e:2b:b9:5e:73:9f:cb:fb:be:c1: bb:bb:6c:eb:25:d5:63:8b:47:a4:46:91:3c:ea:11:0d:82:4e: d5:4a:d1:ca:2b:db:69:b8:49:90:35:28:99:f7:c2:ee:31:e9: ec:53:d0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCEWoLTXtsPXHuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Y2RhZmYwZjAtNGM3MC00ZTEyLWEwZDQtMjdjYTQ4YzFmYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAgiEiGowYGCk51inV4U2x5VoIGrFxRahzxC DtsDXg527WT1t0cNu8rwoblGiVWWfgBa6zrQXR/RxlZGxXe0DMI62q6pCBBI9jDQ kj2gUC3mSqukETzClfjWXbCAWSx4X5fUP8rtojtq1RojGXccUSKNByTyqnluRPRx PVVXJht79Lie8nAxkWxi9diy0HY51lo4NpxMcJkmt/Ck2vxEu4APIf71eG9hVcNg TtmjTqeXncJ3JGzDPDcyeg2ULZAUdJ3XxDaMeRTeRlXcPZuQ+LrwVkJlbUhDQuhv 5o+B0Eers2041X4a2aPfe99+wXVwHbJRfDdR8BymiP5bWUBjvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXe0HivsQ5ZvnF9DoJirudHa1mqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTFkMTc1MTItMTQ1OS0z MTA4LThiOGMtMzc5OGYwNWRiMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeSP+QU7kqfOOX0ddrcASExvDfosQIt0WOj6F3cOxt9njmZQHok6QXf vDQbJNaNDJeq+Bb1ZLndUQP8JrasWLKMccZXKPd4xSx6pBt7y5ouRRwZggC/A8Jh 1m1nx3zT82mNl+cq4xSsbOZz6+iHxfghd/Wd3+Ew6Qj2VfRoyMYDHqQ6KO30g4dR NhznACezW7LkUPTQPOfDdM1VPDsBDLeO76x9HobGlGTvJlEad2JDfMwnQrQ6a0Wl snZCukpeP1SVuxzRyUht4+yi2dc2Diu5XnOfy/u+wbu7bOsl1WOLR6RGkTzqEQ2C TtVK0cor22m4SZA1KJn3wu4x6exT0MQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:36:55 2025 by rpki-client