$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa File: fbf91949-c8ce-376e-b497-653317600419.roa (raw, json) Hash identifier: HV/SqcsXNlGf4/e0hC8xccIEs9a2C8EJcOFsH4hKI8w= Subject key identifier: CF:EE:FB:34:AC:1D:F1:AA:F2:55:62:DB:7A:41:2B:E4:15:3F:66:F6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0D9A581797EF082D7000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397216 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0d:9a:58:17:97:ef:08:2d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=d82853aa-42a8-4bf8-89be-dc206c6bb527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:89:9b:e5:64:38:82:65:11:b0:32:f9:9e: 9c:04:d4:f8:81:65:67:06:a1:15:28:62:26:fb:58: 65:7d:fd:17:29:14:c5:c7:1b:dd:93:44:b9:25:90: ff:11:9b:7e:92:5f:b9:21:7b:79:aa:77:e0:45:80: 41:37:dc:49:7f:7f:3e:a1:05:6c:86:e4:c8:82:68: 1c:61:13:16:0b:d6:97:fd:80:55:ca:64:12:16:63: b3:a6:57:fe:e7:f6:9e:53:14:8a:8e:70:59:99:fc: 4c:34:8c:47:38:dc:8b:d3:51:3f:e7:e8:fd:41:bc: ca:35:26:ca:eb:10:c3:74:36:64:a0:10:c7:ae:b7: a8:f1:83:18:7c:c0:f9:c6:a2:b7:73:8a:ff:44:f7: e9:2b:7a:03:14:36:11:3a:1a:50:6a:8b:6a:2f:1f: 73:9d:79:52:09:c3:dd:fa:4c:56:3d:2b:65:1c:cf: 4a:36:3d:e8:e0:13:9c:2e:52:2b:5b:50:5d:27:00: fc:93:2f:1d:8e:a6:44:70:30:41:31:8d:4c:4d:60: 87:4d:85:dc:15:db:a0:46:9e:c4:73:39:02:f1:fc: e0:57:c9:4b:65:b9:7a:9b:9f:ac:c7:39:1b:4c:e9: 80:9b:d7:8d:da:82:42:85:2f:7f:0e:9d:b6:c3:bb: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:FB:34:AC:1D:F1:AA:F2:55:62:DB:7A:41:2B:E4:15:3F:66:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c8:0a:2a:e0:c3:04:83:93:91:ca:24:c2:12:f2:d2:18:2e: 23:be:47:4b:14:99:12:38:be:f5:49:a6:88:a9:90:87:9e:25: dd:1a:a1:e0:5e:76:40:42:3c:8b:2c:b3:06:c4:55:c1:c0:2e: 1f:25:58:22:41:29:84:0b:85:75:20:c7:16:1b:33:ae:ad:e8: 80:49:30:37:19:41:16:85:28:ca:84:7b:a1:3e:c4:ea:46:4f: 12:b2:e7:34:f6:4c:a2:f6:0c:3b:bb:4b:35:fd:49:d4:4d:1b: eb:ca:d1:73:ff:6c:5c:0d:ab:3c:8c:95:1f:aa:43:a7:dd:d3: 27:8f:d3:a9:bf:f7:23:e9:83:a7:35:bc:e3:25:83:7a:7f:96: 71:dc:ec:33:d7:05:00:d7:ec:62:47:e6:54:a6:5c:7e:50:87: ce:2f:3d:a9:58:ba:7e:44:93:17:ee:45:94:af:4b:09:f9:8b: df:f5:0d:2a:1a:aa:5e:17:63:aa:18:23:7a:4f:64:bb:b3:7a: 31:11:8c:cb:20:c5:00:d6:bc:24:7e:a3:97:e5:29:90:5a:9c: 07:ba:c5:10:87:b3:07:88:bf:0a:51:5a:89:9c:4c:d1:d6:ea: 29:a9:f9:ca:83:c5:ce:61:99:30:da:f5:27:9c:38:4c:47:cb: 26:57:52:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWg2aWBeX7wgtcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZDgyODUzYWEtNDJhOC00YmY4LTg5YmUtZGMyMDZjNmJiNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJOJm+VkOIJlEbAy+Z6cBNT4gWVnBqEVKGIm +1hlff0XKRTFxxvdk0S5JZD/EZt+kl+5IXt5qnfgRYBBN9xJf38+oQVshuTIgmgc YRMWC9aX/YBVymQSFmOzplf+5/aeUxSKjnBZmfxMNIxHONyL01E/5+j9QbzKNSbK 6xDDdDZkoBDHrreo8YMYfMD5xqK3c4r/RPfpK3oDFDYROhpQaotqLx9znXlSCcPd +kxWPStlHM9KNj3o4BOcLlIrW1BdJwD8ky8djqZEcDBBMY1MTWCHTYXcFdugRp7E czkC8fzgV8lLZbl6m5+sxzkbTOmAm9eN2oJChS9/Dp22w7uSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/u+zSsHfGq8lVi23pBK+QVP2b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmJmOTE5NDktYzhjZS0z NzZlLWI0OTctNjUzMzE3NjAwNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzICirgwwSDk5HKJMIS8tIYLiO+R0sUmRI4vvVJpoipkIeeJd0aoeBe dkBCPIssswbEVcHALh8lWCJBKYQLhXUgxxYbM66t6IBJMDcZQRaFKMqEe6E+xOpG TxKy5zT2TKL2DDu7SzX9SdRNG+vK0XP/bFwNqzyMlR+qQ6fd0yeP06m/9yPpg6c1 vOMlg3p/lnHc7DPXBQDX7GJH5lSmXH5Qh84vPalYun5EkxfuRZSvSwn5i9/1DSoa ql4XY6oYI3pPZLuzejERjMsgxQDWvCR+o5flKZBanAe6xRCHsweIvwpRWomcTNHW 6imp+cqDxc5hmTDa9SecOExHyyZXUvw= -----END CERTIFICATE-----Generated at Sun May 11 12:46:48 2025 by rpki-client