$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa File: 03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa (raw, json) Hash identifier: nKcLtaONGWoUf5dWlfFNTA1I0Na48pb8eplGTOXeoyg= Subject key identifier: 9B:B4:3B:B1:54:43:03:9D:65:0E:60:E2:81:9E:10:71:9E:38:9C:57 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858492CB143A4687DDE345F2ECA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 399170 IP address blocks: 156.154.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:43:a4:68:7d:de:34:5f:2e:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5a8d7a73-5aa9-4f6b-96d3-0f3eb5061831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:18:3b:95:b5:d2:16:32:ad:3e:f2:46:00: 74:36:f4:89:4c:3a:50:b2:63:f0:f9:6a:bc:5f:53: 4c:9c:cc:16:3a:00:79:36:a6:b8:42:84:04:63:c3: 04:ac:65:90:6e:a6:14:d6:e9:65:44:f4:a9:73:e5: e5:06:18:02:87:91:fa:37:c2:70:89:f8:ba:79:ba: 40:94:5e:8e:73:25:66:19:cb:ad:f7:e2:ad:e2:ee: 56:25:bb:85:1b:9d:a7:10:50:cc:dc:d1:77:27:40: 26:21:0a:78:c4:a0:0d:51:84:4d:6f:cb:8a:56:bf: c9:dc:81:36:bd:73:19:21:a4:ae:40:ac:96:49:7e: 70:30:37:3a:91:f9:ad:e3:01:59:4a:2a:79:fe:4e: c3:2b:6f:d5:b4:cb:7d:49:70:14:b3:1f:77:78:76: 11:f4:08:39:06:40:c7:2c:c9:da:05:a9:80:00:25: c1:86:32:c8:66:bc:5b:d0:00:73:4f:71:c8:54:f6: 3a:1f:f1:de:54:50:50:33:05:47:c1:59:ef:a2:7c: 1e:eb:b0:5c:5f:ca:13:0b:74:82:d1:66:90:2d:28: a9:a2:29:76:5c:3f:8f:db:03:90:f0:34:9c:1a:74: 2d:63:7c:ff:a8:d0:47:7f:d1:b9:8e:de:d9:e2:3d: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:3B:B1:54:43:03:9D:65:0E:60:E2:81:9E:10:71:9E:38:9C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5c:73:85:50:cb:4b:09:7a:bf:32:ac:5e:e3:c5:0f:5d:de: cd:9a:bb:05:84:fe:b6:9f:a5:4b:56:5b:b4:ff:e0:d8:10:cc: c1:13:ca:b3:a5:dd:d1:f3:74:11:3d:e7:25:7e:74:aa:b0:93: 70:bf:c7:d8:6d:1e:c9:f8:17:15:9d:e5:40:b4:4c:d5:0a:4d: 1d:64:94:eb:17:7f:49:03:24:51:b9:f8:46:6b:38:3c:4a:3f: 47:47:b1:72:5b:30:7c:5b:41:87:fa:14:92:6c:1c:c1:cf:ba: de:5e:a2:84:9d:d0:3b:eb:aa:c8:df:a9:b1:27:c3:2b:18:65: bb:cb:05:9b:3d:bb:96:ed:4f:a9:c5:d0:39:85:1b:e2:bf:aa: a3:92:62:52:05:55:43:65:42:bf:94:89:6a:d4:a5:00:c5:8b: d9:d5:7f:01:fa:31:70:4a:14:c7:47:40:5f:d1:59:db:54:e7: dd:42:a0:98:62:bc:8e:70:fa:ce:3f:e6:12:4e:a2:67:97:4e: e0:51:62:ec:26:c3:b1:ed:0f:49:11:ca:d3:a5:82:01:13:84: 45:ce:57:e1:7c:74:c2:6e:03:d8:84:0c:dd:ef:e5:79:da:31: b6:d2:39:28:3f:4b:4f:ce:ca:d2:53:a9:4f:e9:e8:ac:6d:a9: 72:dd:28:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUOkaH3eNF8uyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWE4ZDdhNzMtNWFhOS00ZjZiLTk2ZDMtMGYzZWI1MDYxODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMYO5W10hYyrT7yRgB0NvSJTDpQsmPw+Wq8 X1NMnMwWOgB5Nqa4QoQEY8MErGWQbqYU1ullRPSpc+XlBhgCh5H6N8Jwifi6ebpA lF6OcyVmGcut9+Kt4u5WJbuFG52nEFDM3NF3J0AmIQp4xKANUYRNb8uKVr/J3IE2 vXMZIaSuQKyWSX5wMDc6kfmt4wFZSip5/k7DK2/VtMt9SXAUsx93eHYR9Ag5BkDH LMnaBamAACXBhjLIZrxb0ABzT3HIVPY6H/HeVFBQMwVHwVnvonwe67BcX8oTC3SC 0WaQLSipoil2XD+P2wOQ8DScGnQtY3z/qNBHf9G5jt7Z4j0lRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu0O7FUQwOdZQ5g4oGeEHGeOJxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDNkODljNGUtODBhMS0z ZjMyLWJmZDQtNGQ0NGVlZjBhNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABcc4VQy0sJer8yrF7jxQ9d3s2auwWE/rafpUtWW7T/4NgQzMETyrOl 3dHzdBE95yV+dKqwk3C/x9htHsn4FxWd5UC0TNUKTR1klOsXf0kDJFG5+EZrODxK P0dHsXJbMHxbQYf6FJJsHMHPut5eooSd0DvrqsjfqbEnwysYZbvLBZs9u5btT6nF 0DmFG+K/qqOSYlIFVUNlQr+UiWrUpQDFi9nVfwH6MXBKFMdHQF/RWdtU591CoJhi vI5w+s4/5hJOomeXTuBRYuwmw7HtD0kRytOlggEThEXOV+F8dMJuA9iEDN3v5Xna MbbSOSg/S0/OytJTqU/p6KxtqXLdKB4= -----END CERTIFICATE-----Generated at Mon Apr 7 13:05:01 2025 by rpki-client