$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e32934a7-9ddc-307a-83fd-c7197b5d3d98.roa File: e32934a7-9ddc-307a-83fd-c7197b5d3d98.roa (raw, json) Hash identifier: Z4qAOUkyOvtAD7ZNs9qxcMmtl2qD83OtAx/WV9yuGI0= Subject key identifier: BA:D0:F3:34:41:59:47:FC:4D:F1:18:D7:9F:F5:CF:F9:1F:AA:33:82 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F17FF302DD788AD37AA1CF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e32934a7-9ddc-307a-83fd-c7197b5d3d98.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397217 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:f3:02:dd:78:8a:d3:7a:a1:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=77dcbf7c-9955-4481-8d29-27d1cbf6f576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:12:4a:77:ce:35:52:23:84:0d:27:b4:73: be:33:c2:9b:db:cf:9a:ae:fa:07:c4:15:dc:14:02: cd:f5:84:68:c5:fc:c4:57:b6:a7:62:f3:13:c3:9a: b1:30:0e:54:8f:47:d7:7b:30:56:b0:a7:e8:f1:c8: eb:c8:72:84:35:dd:b7:e5:d0:95:c7:5d:f1:db:71: cf:e9:de:f9:5a:00:fc:32:37:95:2b:7b:d4:fd:b4: f0:55:cc:71:22:d2:bd:45:93:65:f1:06:4f:e8:22: 17:a8:14:ac:a9:6a:a6:56:1d:cd:c1:75:ea:b8:d1: fd:63:8a:3d:1f:d4:a1:82:c2:9c:f8:ed:e1:52:c2: e2:29:41:d3:04:be:54:1a:1b:b3:d8:4a:53:13:5d: 53:7c:5b:76:e8:19:10:47:dd:a0:7e:fa:04:94:c5: c3:4c:ec:fe:a6:37:f6:e4:63:c9:4b:13:ca:0b:ab: 0e:c2:90:b4:53:d3:ba:a9:06:43:15:59:34:e8:32: 30:c7:61:5d:5a:89:27:9c:bf:2a:8e:51:35:1e:4e: c8:10:48:00:e1:ba:30:db:d8:4a:28:a2:da:2f:3d: 02:63:27:f2:6a:96:66:91:05:7a:5a:91:8e:99:1d: 8d:ca:a7:36:2d:30:1a:70:9d:5b:d6:80:30:dc:ae: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D0:F3:34:41:59:47:FC:4D:F1:18:D7:9F:F5:CF:F9:1F:AA:33:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e32934a7-9ddc-307a-83fd-c7197b5d3d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5b:d1:8b:39:53:27:59:4e:a2:46:56:71:5c:5a:83:e0:19: 8f:7c:8f:9f:7a:e5:cf:31:0b:99:eb:e4:97:36:d5:85:79:29: 41:b8:03:48:9d:60:4e:bc:89:52:a1:45:e9:63:ad:58:5d:d9: f0:12:07:dc:87:8d:c1:39:84:ba:60:5c:2f:0e:a9:b0:5d:17: 00:f1:a4:3b:63:bf:47:26:52:6a:4c:be:3d:60:3f:9d:29:99: 5f:01:80:03:c5:58:b8:67:9b:40:c8:b2:f2:cd:be:a8:23:1f: a9:ce:25:23:33:30:76:74:65:07:b0:21:2f:7a:90:88:45:fd: 67:e2:12:45:e0:48:c0:7c:98:69:05:34:c4:12:0a:c5:4d:58: 58:cd:01:4f:ad:7e:6e:9c:e4:72:78:e5:49:c0:23:e2:80:8b: d7:3a:1e:25:c5:dd:fe:ce:54:d7:14:9e:df:42:20:93:8d:e4: d0:de:ca:37:6c:24:02:0e:c5:96:78:2f:11:d6:34:8c:60:c8: 42:ae:fd:5e:2f:4a:d6:f6:96:92:66:69:14:b3:c1:59:01:e1: c9:c4:ab:03:17:f7:43:9e:1f:07:0b:42:07:e3:23:df:81:f3: c2:32:77:f7:ca:2b:15:bb:cc:b9:b0:6d:19:37:42:fd:b9:1b: 2d:3a:a7:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/MC3XiK03qhzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NzdkY2JmN2MtOTk1NS00NDgxLThkMjktMjdkMWNiZjZmNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigwSSnfONVIjhA0ntHO+M8Kb28+arvoHxBXc FALN9YRoxfzEV7anYvMTw5qxMA5Uj0fXezBWsKfo8cjryHKENd235dCVx13x23HP 6d75WgD8MjeVK3vU/bTwVcxxItK9RZNl8QZP6CIXqBSsqWqmVh3NwXXquNH9Y4o9 H9ShgsKc+O3hUsLiKUHTBL5UGhuz2EpTE11TfFt26BkQR92gfvoElMXDTOz+pjf2 5GPJSxPKC6sOwpC0U9O6qQZDFVk06DIwx2FdWoknnL8qjlE1Hk7IEEgA4bow29hK KKLaLz0CYyfyapZmkQV6WpGOmR2Nyqc2LTAacJ1b1oAw3K4yDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrQ8zRBWUf8TfEY15/1z/kfqjOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTMyOTM0YTctOWRkYy0z MDdhLTgzZmQtYzcxOTdiNWQzZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhb0Ys5UydZTqJGVnFcWoPgGY98j5965c8xC5nr5Jc21YV5KUG4A0id YE68iVKhReljrVhd2fASB9yHjcE5hLpgXC8OqbBdFwDxpDtjv0cmUmpMvj1gP50p mV8BgAPFWLhnm0DIsvLNvqgjH6nOJSMzMHZ0ZQewIS96kIhF/WfiEkXgSMB8mGkF NMQSCsVNWFjNAU+tfm6c5HJ45UnAI+KAi9c6HiXF3f7OVNcUnt9CIJON5NDeyjds JAIOxZZ4LxHWNIxgyEKu/V4vStb2lpJmaRSzwVkB4cnEqwMX90OeHwcLQgfjI9+B 88Iyd/fKKxW7zLmwbRk3Qv25Gy06p78= -----END CERTIFICATE-----Generated at Mon Jun 30 07:53:11 2025 by rpki-client