$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa File: afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa (raw, json) Hash identifier: mGcyMawvqUzkTsFeNxMfg9WCg0kRrYGByqKj67hKoJ0= Subject key identifier: A1:CC:21:6E:75:10:D0:A7:EB:32:5B:7E:FB:79:4F:50:C2:54:97:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849BF3F5C1F15359B37634A5F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 12008 IP address blocks: 156.154.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5c:1f:15:35:9b:37:63:4a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=357cbf67-3011-4251-8608-c2fc6978aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:11:5a:6f:1a:87:17:34:90:39:43:d3:d7: ff:7e:ee:56:d3:1f:0c:83:69:f2:ea:04:fb:58:92: df:dc:04:4c:e5:d2:1d:e8:9d:19:1c:28:de:5e:f7: 44:ba:2b:ec:2c:7c:7a:99:b7:88:2b:c9:02:67:32: 90:21:d0:06:91:38:0a:c7:ee:f0:d3:72:45:d1:f0: 8d:61:61:4e:ca:d5:f9:ae:93:c0:d4:58:39:f2:52: fe:47:31:1f:df:8e:a4:78:c8:3b:ce:81:47:9c:88: 53:bf:14:4b:54:81:d1:f6:8b:9e:ff:af:68:69:b9: 01:9f:1a:1b:d2:7b:37:fb:c7:bf:37:23:f2:77:23: 7e:70:46:2b:90:e0:a9:2f:d8:86:0d:cb:cc:27:6d: 2d:58:11:4a:48:87:11:c3:1f:72:ef:2c:77:9c:24: 1c:54:6b:8d:56:4f:47:af:f3:34:94:da:3a:2e:97: 8a:0d:9e:44:29:2e:70:a9:4b:f5:2e:94:73:88:2c: e6:4a:33:4d:fa:e1:24:f1:e3:f5:de:57:de:f5:fb: 17:0c:94:de:a5:30:f9:2f:c8:31:66:b8:19:6e:ac: 88:a5:d3:b7:09:89:76:ae:bb:b7:12:f0:5c:18:aa: 91:c9:c3:ae:fc:b1:ba:11:7e:85:be:07:91:09:1b: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CC:21:6E:75:10:D0:A7:EB:32:5B:7E:FB:79:4F:50:C2:54:97:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fa:e6:d0:03:44:13:3f:9b:bb:c9:c8:5d:fe:55:68:7b:f6: 70:e6:32:ed:a6:2d:32:55:ef:ea:31:07:c7:7a:8d:86:df:ad: 70:91:9d:53:0f:0d:5b:3b:9d:66:ec:ed:1a:f6:d4:38:cc:36: a2:b9:7c:4f:13:2e:7c:c1:82:7d:ef:fe:a7:72:79:ac:f6:f6: ce:e2:dd:a7:2e:fe:33:d3:77:6c:33:50:19:58:cd:19:4c:b9: 0e:ac:41:80:64:15:3d:51:c6:fd:77:97:1d:3f:49:3f:5e:a5: 77:31:cc:6b:07:a0:8b:8c:7d:c3:91:89:76:4f:60:6d:3e:f8: ca:61:90:a3:57:91:88:ce:d0:05:09:8a:1b:20:0e:45:b8:34: 2a:fa:d3:1e:70:5f:19:ad:8b:93:72:94:ec:e5:fc:6b:6a:07: 5f:3e:d8:cd:4e:f2:28:8c:56:3e:b8:cf:53:24:4b:96:8b:1f: a6:4b:12:51:6a:73:65:30:b2:18:7f:98:7b:04:ef:4d:f2:42: 8c:b6:c8:41:a8:48:82:59:fc:96:87:31:6d:2a:ed:e9:38:0d: 5f:fe:c8:19:e2:b0:a7:84:a0:0f:3b:27:42:a3:a3:11:8b:2c: a3:6a:a2:d0:cc:1b:71:69:2d:13:71:0e:a7:9e:75:a7:5d:e4: 19:32:4f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1wfFTWbN2NKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MzU3Y2JmNjctMzAxMS00MjUxLTg2MDgtYzJmYzY5NzhhYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBARWm8ahxc0kDlD09f/fu5W0x8Mg2ny6gT7 WJLf3ARM5dId6J0ZHCjeXvdEuivsLHx6mbeIK8kCZzKQIdAGkTgKx+7w03JF0fCN YWFOytX5rpPA1Fg58lL+RzEf346keMg7zoFHnIhTvxRLVIHR9oue/69oabkBnxob 0ns3+8e/NyPydyN+cEYrkOCpL9iGDcvMJ20tWBFKSIcRwx9y7yx3nCQcVGuNVk9H r/M0lNo6LpeKDZ5EKS5wqUv1LpRziCzmSjNN+uEk8eP13lfe9fsXDJTepTD5L8gx ZrgZbqyIpdO3CYl2rru3EvBcGKqRycOu/LG6EX6FvgeRCRs5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHMIW51ENCn6zJbfvt5T1DCVJdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWZiZTJlMDAtNzNlNi0z Yjc5LTllZjgtMDE0YTEzZTBjNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj65tADRBM/m7vJyF3+VWh79nDmMu2mLTJV7+oxB8d6jYbfrXCRnVMP DVs7nWbs7Rr21DjMNqK5fE8TLnzBgn3v/qdyeaz29s7i3acu/jPTd2wzUBlYzRlM uQ6sQYBkFT1Rxv13lx0/ST9epXcxzGsHoIuMfcORiXZPYG0++MphkKNXkYjO0AUJ ihsgDkW4NCr60x5wXxmti5NylOzl/GtqB18+2M1O8iiMVj64z1MkS5aLH6ZLElFq c2Uwshh/mHsE703yQoy2yEGoSIJZ/JaHMW0q7ek4DV/+yBnisKeEoA87J0KjoxGL LKNqotDMG3FpLRNxDqeedadd5BkyT4c= -----END CERTIFICATE-----Generated at Tue May 6 21:01:02 2025 by rpki-client