$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a20e9673-98fa-3f73-835b-5e493ca5cf65.roa File: a20e9673-98fa-3f73-835b-5e493ca5cf65.roa (raw, json) Hash identifier: TSkeFc6XZ76hdvLtj+xlf7wp+UjsdCW1LjWfw4O7TNE= Subject key identifier: 42:40:16:D1:E2:1F:22:40:3F:46:60:14:D3:4B:29:51:F7:27:B8:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A0C08457EF904881AB198E600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a20e9673-98fa-3f73-835b-5e493ca5cf65.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 399160 IP address blocks: 156.154.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:45:7e:f9:04:88:1a:b1:98:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3a65633d-38fb-4673-ab60-2a85d901b512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:a1:20:50:05:34:d9:ac:c6:2d:76:66:2b: 94:57:bd:7c:a1:53:22:4b:0e:b2:e1:2d:f1:74:89: 74:d8:8c:9c:c1:7b:18:a4:4f:bd:eb:a3:58:78:c1: 1f:97:af:34:d7:13:f3:5c:d0:62:f1:41:fa:67:4b: 73:09:46:98:ff:e8:c4:fa:81:2f:fc:b9:d9:7c:4f: 33:3b:9c:c3:c8:8f:84:fc:ae:70:08:48:23:45:18: de:e8:18:ff:40:ae:c5:40:d4:92:c1:1f:58:18:07: da:09:ed:00:bd:50:81:17:1c:1c:48:c8:28:09:73: 90:9c:5b:02:25:fe:cd:08:1a:f0:04:58:33:bb:b6: ad:93:32:d9:57:ab:9e:8a:92:e7:6b:8b:18:0f:61: b1:84:75:7f:6a:9b:07:b4:01:60:8a:a2:a8:a7:cd: 23:ce:80:fb:ab:4c:c0:5d:87:94:80:23:68:94:59: eb:2e:5c:ba:15:8d:8e:05:17:f7:68:66:cf:b9:00: 65:b0:f6:71:39:5d:0a:a9:d7:41:79:0b:7c:70:56: c7:72:c3:77:7d:d9:16:e4:33:24:48:6f:09:31:b5: e0:2e:1b:d7:19:c5:c5:23:f7:f4:c8:cb:10:08:11: be:b3:d5:ea:d7:9b:ac:3f:cd:11:e9:df:22:b1:dd: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:16:D1:E2:1F:22:40:3F:46:60:14:D3:4B:29:51:F7:27:B8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a20e9673-98fa-3f73-835b-5e493ca5cf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:00:71:b3:c8:c6:03:bf:e6:72:ee:91:c4:a6:f4:cc:99: 60:aa:40:39:e5:bd:8b:0c:f2:aa:e2:d5:75:38:81:e7:b0:69: 1a:7f:4b:17:7d:e6:55:d5:6b:6a:eb:30:c5:a6:f6:40:35:ed: 1c:a9:89:29:5e:cf:99:4e:aa:1a:df:21:4d:13:37:35:36:82: d6:01:d3:df:34:15:42:30:1a:a5:0e:b2:e2:ac:23:b6:2f:63: 51:ee:e7:ea:d6:9a:9a:50:4a:52:a4:9b:d0:87:fc:e8:96:0c: 1f:1c:2a:c6:bb:7d:f4:e9:d7:38:7c:e4:62:13:ac:ce:5c:95: 48:a1:43:7e:0b:d1:d3:ba:bb:79:e5:f6:54:1e:41:2a:a4:1b: eb:a4:08:4a:29:23:0a:f5:23:9b:cd:a8:55:b7:1c:dc:ed:e7: df:be:f7:c5:59:98:e7:cf:2f:b6:a8:4e:55:82:b5:9b:d5:d3: 9a:82:14:d3:49:35:4f:a2:33:49:0f:5f:58:88:94:86:1a:e9: 46:3a:38:7f:6b:44:77:d3:c4:f0:f8:03:89:f4:07:9a:05:f8: 71:e2:ed:c2:14:5d:02:4c:f3:b8:e7:36:24:cd:39:c4:15:72: 79:97:0d:41:0e:6c:0f:01:59:18:95:59:fd:e7:13:4b:ea:c2: b7:c8:1b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCEV++QSIGrGY5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2E2NTYzM2QtMzhmYi00NjczLWFiNjAtMmE4NWQ5MDFiNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I+hIFAFNNmsxi12ZiuUV718oVMiSw6y4S3x dIl02IycwXsYpE+966NYeMEfl6801xPzXNBi8UH6Z0tzCUaY/+jE+oEv/LnZfE8z O5zDyI+E/K5wCEgjRRje6Bj/QK7FQNSSwR9YGAfaCe0AvVCBFxwcSMgoCXOQnFsC Jf7NCBrwBFgzu7atkzLZV6ueipLna4sYD2GxhHV/apsHtAFgiqKop80jzoD7q0zA XYeUgCNolFnrLly6FY2OBRf3aGbPuQBlsPZxOV0KqddBeQt8cFbHcsN3fdkW5DMk SG8JMbXgLhvXGcXFI/f0yMsQCBG+s9Xq15usP80R6d8isd030QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJAFtHiHyJAP0ZgFNNLKVH3J7hiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTIwZTk2NzMtOThmYS0z ZjczLTgzNWItNWU0OTNjYTVjZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9VAHGzyMYDv+Zy7pHEpvTMmWCqQDnlvYsM8qri1XU4geewaRp/Sxd9 5lXVa2rrMMWm9kA17RypiSlez5lOqhrfIU0TNzU2gtYB0980FUIwGqUOsuKsI7Yv Y1Hu5+rWmppQSlKkm9CH/OiWDB8cKsa7ffTp1zh85GITrM5clUihQ34L0dO6u3nl 9lQeQSqkG+ukCEopIwr1I5vNqFW3HNzt59++98VZmOfPL7aoTlWCtZvV05qCFNNJ NU+iM0kPX1iIlIYa6UY6OH9rRHfTxPD4A4n0B5oF+HHi7cIUXQJM87jnNiTNOcQV cnmXDUEObA8BWRiVWf3nE0vqwrfIG8w= -----END CERTIFICATE-----Generated at Mon Jun 30 14:19:51 2025 by rpki-client