$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa File: 19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa (raw, json) Hash identifier: ACQBzQTBdAfgZIcM+pm3fWfCUER88sUlnIoRCg4jtwc= Subject key identifier: D5:03:0A:8B:1D:D4:B7:C6:79:7C:C0:E6:98:91:FB:58:14:8E:3F:10 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965066CC8FBDF42C350680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397234 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:50:66:cc:8f:bd:f4:2c:35:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c6318138-224b-423d-9b10-953af8aa2705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:08:1a:bd:3e:4b:9d:48:ba:d8:36:a5:42: 7d:30:8d:36:44:f4:77:01:9d:dc:6e:88:2c:9d:79: 82:91:a0:4e:6c:2b:69:8d:95:23:7d:db:8c:ee:db: d1:a4:91:d8:4f:e1:07:a8:d2:95:2c:f7:ef:fa:1c: c4:8e:9e:f8:fc:ba:70:ef:6d:68:25:cb:ed:72:1e: 69:94:a9:22:ea:7d:ae:3b:94:7b:d1:93:a1:7c:cc: a2:fa:52:bf:1b:f8:53:d6:50:2b:19:46:40:1e:5c: 96:4b:37:a3:db:f8:43:7b:25:dd:24:a1:b1:35:ab: c2:7b:cf:c8:74:6f:4e:1d:84:71:17:e6:25:a3:34: ea:8f:6c:03:dd:d4:07:98:33:98:42:db:d9:82:16: bb:b0:e2:69:0e:59:ea:d2:91:67:ce:4a:5a:76:6f: 02:ce:31:31:4e:75:61:82:20:91:50:e1:c5:2a:1f: 9c:b4:e7:90:20:26:46:25:7b:5a:f9:84:cd:d3:63: 0a:f4:0c:ad:57:ef:6e:4c:db:7e:0b:7c:86:53:88: 92:cb:b8:b7:56:d3:91:c0:45:f8:62:a2:c4:5c:3c: d5:2f:95:ea:a2:47:0d:4d:b9:80:0d:f9:d5:20:d0: 9b:e4:2e:e8:86:79:21:1f:23:24:e8:f1:bc:f9:c9: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:03:0A:8B:1D:D4:B7:C6:79:7C:C0:E6:98:91:FB:58:14:8E:3F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:86:f2:12:0d:f3:49:d3:f7:24:3d:71:ba:60:5c:fb:73:c5: 7b:53:58:f0:f4:8a:2a:12:d8:ef:ee:c4:16:75:10:3e:eb:7c: 5a:a4:3d:fd:5a:04:43:e3:00:fa:3a:88:13:43:15:a2:11:36: b8:2d:09:01:a5:56:40:28:07:35:e0:d2:da:53:c3:37:eb:c8: 04:e8:32:61:45:22:7b:17:25:c8:f0:3e:13:c6:e9:9e:70:f7: 2f:e6:29:47:d1:90:16:76:b9:aa:1b:64:45:5b:40:49:c1:86: a0:6d:79:29:d5:cf:67:3b:09:21:96:97:f8:9c:b5:3e:e2:c5: cb:94:fe:a4:7d:45:e0:fe:31:db:32:e9:1d:78:34:69:92:d7: 38:71:48:c9:8a:12:18:69:da:44:db:3f:1b:71:6b:46:2c:63: 7f:eb:63:5b:1d:8e:8b:e8:80:5b:6d:70:44:85:58:cf:50:95: f1:4e:35:5f:a6:87:db:a8:a4:9b:94:90:bf:82:5f:b7:38:0c: 1e:0e:38:13:d9:d9:f1:11:4c:79:13:16:de:ff:2e:4d:4c:4e: 74:bc:12:ae:d1:b4:a2:65:3a:cb:da:1d:01:2b:e1:44:4d:e2: 2c:a2:0f:1d:67:b0:50:10:61:e2:0b:4e:1a:eb:74:7a:c4:81: 7a:87:e7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllBmzI+99Cw1BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzYzMTgxMzgtMjI0Yi00MjNkLTliMTAtOTUzYWY4YWEyNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRQIGr0+S51Iutg2pUJ9MI02RPR3AZ3cbogs nXmCkaBObCtpjZUjfduM7tvRpJHYT+EHqNKVLPfv+hzEjp74/Lpw721oJcvtch5p lKki6n2uO5R70ZOhfMyi+lK/G/hT1lArGUZAHlyWSzej2/hDeyXdJKGxNavCe8/I dG9OHYRxF+YlozTqj2wD3dQHmDOYQtvZgha7sOJpDlnq0pFnzkpadm8CzjExTnVh giCRUOHFKh+ctOeQICZGJXta+YTN02MK9AytV+9uTNt+C3yGU4iSy7i3VtORwEX4 YqLEXDzVL5XqokcNTbmADfnVINCb5C7ohnkhHyMk6PG8+ckGrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUDCosd1LfGeXzA5piR+1gUjj8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTllYTdjZmEtY2VmYS0z YjdmLWE3OWEtMjczNDQ2NGFjY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqG8hIN80nT9yQ9cbpgXPtzxXtTWPD0iioS2O/uxBZ1ED7rfFqkPf1a BEPjAPo6iBNDFaIRNrgtCQGlVkAoBzXg0tpTwzfryAToMmFFInsXJcjwPhPG6Z5w 9y/mKUfRkBZ2uaobZEVbQEnBhqBteSnVz2c7CSGWl/ictT7ixcuU/qR9ReD+Mdsy 6R14NGmS1zhxSMmKEhhp2kTbPxtxa0YsY3/rY1sdjovogFttcESFWM9QlfFONV+m h9uopJuUkL+CX7c4DB4OOBPZ2fERTHkTFt7/Lk1MTnS8Eq7RtKJlOsvaHQEr4URN 4iyiDx1nsFAQYeILThrrdHrEgXqH57Y= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:42 2025 by rpki-client