$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa File: cf81221b-0a41-37b9-9909-8340202ab1e1.roa (raw, json) Hash identifier: xcsqtCTPW2VMdM1I7J4PU6QkfwNSVIRdCXuL0g4qnzY= Subject key identifier: CA:CD:1A:4F:28:B4:14:4F:DB:15:CA:8A:5B:E2:13:0D:32:77:3E:AC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FEB5A116645025DBF3D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397221 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:eb:5a:11:66:45:02:5d:bf:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=d9dfdc7e-899d-40d7-ae97-7c5403aa2358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:8e:8a:a7:b5:05:51:6a:4a:4a:e7:a0:a2: a8:42:7e:f0:ba:5a:f6:7d:38:30:61:ec:49:dc:74: 98:e1:8b:81:72:1f:b1:38:9e:7d:19:5e:ec:26:f7: b0:9e:ff:90:a3:5e:d8:85:a8:b3:69:29:b1:19:2f: e9:d6:a2:cd:d2:c9:13:4e:59:5c:4e:99:07:78:ba: e0:20:99:f7:17:df:67:36:07:4b:49:ba:63:1e:49: 2b:81:12:9b:98:6a:fd:7d:ff:57:7e:c8:d6:8e:a9: 1f:b9:60:4f:67:91:16:ad:c5:f8:95:1d:40:cf:bb: 69:64:54:b5:ab:3c:40:34:60:0b:72:15:b4:9f:93: b9:d7:01:a8:ad:d6:c7:61:32:2f:d5:3e:16:29:d6: ae:15:6b:64:53:c2:b5:3a:d1:51:8c:56:96:8a:37: cd:bc:eb:af:4a:5f:45:eb:1c:92:af:c6:4e:3f:2c: 92:74:29:68:bc:c8:90:0c:ca:47:74:08:47:c9:02: b4:16:f3:5b:e6:66:66:dc:f7:77:1d:53:25:c7:31: 71:40:98:d1:47:7a:ea:01:f2:07:80:87:42:87:4e: de:62:71:ab:2b:6f:00:36:77:43:73:4c:81:c2:79: f3:dd:f6:e1:b1:2e:d2:01:01:f4:99:92:27:c4:b1: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:1A:4F:28:B4:14:4F:DB:15:CA:8A:5B:E2:13:0D:32:77:3E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ae:3f:ab:9e:bc:27:76:5e:ca:2e:e2:b3:e6:e8:3a:cf:8b: 43:8b:99:3b:09:b6:36:9b:ab:ad:54:93:fe:c7:87:c7:b7:5e: d9:2d:bc:25:67:3f:9e:b8:60:62:c2:4a:43:8f:80:a6:98:2e: 45:b9:a5:26:e7:96:a3:4c:c2:95:79:e7:cc:00:c0:24:39:c7: fd:26:ec:60:d2:1f:25:c2:36:cc:bd:d0:26:3b:f5:3b:fb:b4: 42:83:6d:ca:51:cd:3a:12:0b:ff:e7:e5:00:a4:40:a8:8d:b7: cc:fe:aa:8e:ec:69:c0:6d:e5:80:b7:8a:5c:86:3e:e8:2b:4f: 15:a1:6b:7a:95:d3:c9:ee:a0:9e:00:92:5d:52:39:cf:0d:21: 88:d5:77:2c:6c:a0:49:41:df:fe:9d:8a:12:b3:a1:fa:5d:d0: c1:cf:6b:44:e9:56:32:b5:04:67:00:bf:b0:b0:f5:ba:82:9f: 4f:5a:39:49:87:cc:ff:7f:66:7c:5b:6d:2d:aa:86:5f:91:9c: 13:51:e1:06:b8:2f:56:23:ff:7f:65:ab:02:86:9b:91:27:8c: e3:d4:b2:b0:80:0c:36:65:e7:1c:46:63:d6:0a:f0:32:cd:37: e0:d4:d8:cc:9a:10:7d:94:1b:a2:48:53:d6:29:7b:26:f4:fa: 66:6d:6d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+taEWZFAl2/PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDlkZmRjN2UtODk5ZC00MGQ3LWFlOTctN2M1NDAzYWEyMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgreOiqe1BVFqSkrnoKKoQn7wulr2fTgwYexJ 3HSY4YuBch+xOJ59GV7sJvewnv+Qo17YhaizaSmxGS/p1qLN0skTTllcTpkHeLrg IJn3F99nNgdLSbpjHkkrgRKbmGr9ff9XfsjWjqkfuWBPZ5EWrcX4lR1Az7tpZFS1 qzxANGALchW0n5O51wGordbHYTIv1T4WKdauFWtkU8K1OtFRjFaWijfNvOuvSl9F 6xySr8ZOPyySdClovMiQDMpHdAhHyQK0FvNb5mZm3Pd3HVMlxzFxQJjRR3rqAfIH gIdCh07eYnGrK28ANndDc0yBwnnz3fbhsS7SAQH0mZInxLEBqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrNGk8otBRP2xXKilviEw0ydz6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2Y4MTIyMWItMGE0MS0z N2I5LTk5MDktODM0MDIwMmFiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAquP6uevCd2Xsou4rPm6DrPi0OLmTsJtjabq61Uk/7Hh8e3XtktvCVn P564YGLCSkOPgKaYLkW5pSbnlqNMwpV558wAwCQ5x/0m7GDSHyXCNsy90CY79Tv7 tEKDbcpRzToSC//n5QCkQKiNt8z+qo7sacBt5YC3ilyGPugrTxWha3qV08nuoJ4A kl1SOc8NIYjVdyxsoElB3/6dihKzofpd0MHPa0TpVjK1BGcAv7Cw9bqCn09aOUmH zP9/ZnxbbS2qhl+RnBNR4Qa4L1Yj/39lqwKGm5EnjOPUsrCADDZl5xxGY9YK8DLN N+DU2MyaEH2UG6JIU9Ypeyb0+mZtbVw= -----END CERTIFICATE-----Generated at Mon Jun 30 16:07:09 2025 by rpki-client