$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7cb0fe9-6c90-35bd-8243-169886f2148c.roa File: e7cb0fe9-6c90-35bd-8243-169886f2148c.roa (raw, json) Hash identifier: +Ikp6B6hK6FOqm5WF8bP5XxBudhe4E3ja4t2kdXYEGQ= Subject key identifier: FC:6C:32:54:22:02:68:75:DD:CC:11:6F:22:BF:D6:38:52:30:5E:DE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5303A349C233406AA700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7cb0fe9-6c90-35bd-8243-169886f2148c.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397221 IP address blocks: 156.154.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:53:03:a3:49:c2:33:40:6a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=13877b90-3096-44f0-9592-d7f27ddee70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:44:5e:e3:bf:b5:96:e9:e4:44:6d:74:c4: d7:56:77:6b:7e:5d:a1:ae:02:88:7b:80:b1:1a:fd: 87:29:6a:0e:b7:f4:9f:70:c6:72:b4:3b:20:58:e6: 20:95:cd:bc:f7:1a:ec:cb:6a:cb:b0:ee:e8:8f:8b: 5c:92:ff:75:5e:4b:2d:29:f3:14:15:28:da:cb:08: fd:63:b8:3b:b2:ad:1b:5a:a6:48:e0:93:1b:de:43: 72:fb:56:1b:3c:a6:9d:46:7a:5b:df:93:8c:88:bc: 1e:42:95:cb:34:c6:44:2b:e1:fb:ea:89:c7:88:4b: af:04:ef:d1:ef:0a:aa:b3:a2:23:ba:fc:e0:70:78: ba:10:65:59:24:f7:fd:81:79:d9:63:02:e3:39:f9: 31:25:bd:d9:3b:a5:72:81:03:0e:12:dc:03:14:64: 94:35:d4:44:d5:81:46:ea:a3:8c:f6:10:a4:96:e9: 13:e9:a2:e1:54:82:22:7e:f9:40:c4:ef:1a:d4:a0: 80:73:0b:54:1c:8c:28:ed:ef:f5:b5:b6:eb:18:ef: dd:27:e6:e8:ae:a6:a0:4c:f1:a5:4c:ce:2f:62:23: a4:f0:8c:04:27:27:f7:93:10:55:2c:7d:f3:45:d2: 2e:a2:31:78:09:ef:62:04:4b:4c:03:f5:e6:f8:35: ca:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6C:32:54:22:02:68:75:DD:CC:11:6F:22:BF:D6:38:52:30:5E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7cb0fe9-6c90-35bd-8243-169886f2148c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b7:ab:23:c3:40:73:33:a2:d0:c2:ec:35:ec:a4:d3:b7:0b: 9b:87:5a:20:cf:2f:5b:d8:8e:dc:a8:0a:b1:4b:a1:ee:bf:df: 62:01:79:77:04:ba:d5:6d:65:9f:6d:98:6e:c3:68:88:98:e2: 53:76:26:c4:9b:fa:41:ff:3d:80:a3:32:ce:f3:83:50:3a:83: 9d:5b:56:f1:fd:3a:ca:fa:e2:94:94:e4:a4:67:e4:60:a8:64: 39:c4:71:b3:65:5c:0e:74:d8:8a:d5:35:b0:74:5c:e6:5e:ed: c3:84:ab:a3:8b:a0:e2:ca:cd:70:24:76:26:a0:66:8e:bb:62: f7:f5:66:ba:a2:c7:92:9f:93:86:0f:22:9c:26:9d:0c:26:02: ff:bc:66:a4:d0:0c:52:29:54:03:4e:3c:b9:95:fb:77:f4:4a: fe:64:d2:bf:97:28:d7:52:21:61:e0:5b:0a:37:a7:65:5d:98: 8f:61:18:95:a0:61:8f:a6:f2:e0:26:db:e6:5b:bc:3c:ff:92: 34:10:53:78:9b:21:2c:97:4c:1f:3a:be:ba:96:85:c8:cb:0f: 3a:e2:cb:6a:9f:90:ff:f6:4a:08:e4:55:9e:9c:02:84:0e:18: a8:78:53:e8:ff:3d:d1:0a:b2:d7:7f:2b:93:c2:6a:aa:8e:09: 88:ac:cd:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1MDo0nCM0BqpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTM4NzdiOTAtMzA5Ni00NGYwLTk1OTItZDdmMjdkZGVlNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBEXuO/tZbp5ERtdMTXVndrfl2hrgKIe4Cx Gv2HKWoOt/SfcMZytDsgWOYglc289xrsy2rLsO7oj4tckv91XkstKfMUFSjaywj9 Y7g7sq0bWqZI4JMb3kNy+1YbPKadRnpb35OMiLweQpXLNMZEK+H76onHiEuvBO/R 7wqqs6IjuvzgcHi6EGVZJPf9gXnZYwLjOfkxJb3ZO6VygQMOEtwDFGSUNdRE1YFG 6qOM9hCklukT6aLhVIIifvlAxO8a1KCAcwtUHIwo7e/1tbbrGO/dJ+borqagTPGl TM4vYiOk8IwEJyf3kxBVLH3zRdIuojF4Ce9iBEtMA/Xm+DXKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxsMlQiAmh13cwRbyK/1jhSMF7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTdjYjBmZTktNmM5MC0z NWJkLTgyNDMtMTY5ODg2ZjIxNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC3qyPDQHMzotDC7DXspNO3C5uHWiDPL1vYjtyoCrFLoe6/32IBeXcE utVtZZ9tmG7DaIiY4lN2JsSb+kH/PYCjMs7zg1A6g51bVvH9Osr64pSU5KRn5GCo ZDnEcbNlXA502IrVNbB0XOZe7cOEq6OLoOLKzXAkdiagZo67Yvf1Zrqix5Kfk4YP IpwmnQwmAv+8ZqTQDFIpVANOPLmV+3f0Sv5k0r+XKNdSIWHgWwo3p2VdmI9hGJWg YY+m8uAm2+ZbvDz/kjQQU3ibISyXTB86vrqWhcjLDzriy2qfkP/2SgjkVZ6cAoQO GKh4U+j/PdEKstd/K5PCaqqOCYiszYc= -----END CERTIFICATE-----Generated at Sat May 10 19:34:16 2025 by rpki-client