$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c80c671-be9d-3bcc-b730-f53263839577.roa File: 1c80c671-be9d-3bcc-b730-f53263839577.roa (raw, json) Hash identifier: AOk8Y32y1B8ys5X6OaC1xnO7AXjaYWSD8Vkz8M+ruTA= Subject key identifier: C1:38:6A:A3:13:37:1B:31:7C:72:4E:28:8B:5A:56:9E:D3:6F:2B:78 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210D1E48FB45C265CF2AE0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c80c671-be9d-3bcc-b730-f53263839577.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397214 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0d:1e:48:fb:45:c2:65:cf:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=9adffafb-6fdb-49aa-91c9-e4d5d1032cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:39:62:73:15:10:82:37:2c:0d:31:b8:7e: 67:3e:ca:4d:ce:f3:48:46:a7:96:ed:67:7d:07:d0: 95:96:d0:67:26:b2:62:c9:89:7e:20:40:5e:4c:da: d7:65:ad:96:25:73:7f:29:71:81:b3:8a:ce:97:7d: b4:ad:3d:59:4a:3c:09:fb:d8:aa:74:10:c0:49:a1: 28:55:c0:05:24:23:c0:5a:9e:e4:74:2e:41:08:3f: 5f:6e:09:31:ba:c1:58:00:e2:d2:00:a7:77:10:7c: d2:cc:00:33:95:7d:65:03:37:36:7a:2e:02:f9:88: f3:8f:e7:96:07:fb:6f:e9:b4:d4:31:d5:c1:4e:97: 38:a9:71:71:95:50:c4:b3:c3:6d:72:0d:69:ac:61: e1:5a:19:77:d1:34:95:16:91:6b:f3:7f:2d:68:db: 04:af:7f:14:64:69:32:db:5b:1f:d3:d2:d7:9d:82: 59:8d:85:c5:96:8e:28:ab:e2:62:2a:d2:f3:47:96: cb:89:ec:3c:2f:a9:9e:c6:b6:0e:29:93:c4:97:32: 4b:55:27:6a:da:ac:ce:9d:7e:2f:39:b3:47:33:b8: aa:a4:8e:2f:18:27:c5:1f:f3:7a:43:56:86:bb:60: 71:01:d3:20:56:40:18:84:fd:22:16:79:dc:66:35: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:6A:A3:13:37:1B:31:7C:72:4E:28:8B:5A:56:9E:D3:6F:2B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c80c671-be9d-3bcc-b730-f53263839577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ed:73:62:34:60:cb:30:6b:04:63:34:1d:d5:11:a5:75:d6: 5a:ec:2d:02:48:cb:2f:89:bd:cd:57:fb:b3:35:a9:2b:28:86: b4:af:4e:74:4b:26:00:fc:7f:69:eb:5b:c5:6e:d6:a0:d0:c1: c5:cb:ee:a9:22:89:19:85:86:da:cc:bd:d5:14:c6:11:10:16: fa:3d:38:c0:56:16:d8:ac:53:4a:e8:6a:8c:fd:e7:62:61:96: 86:f6:31:36:51:98:4e:7a:d6:6a:2f:fd:b6:a4:f7:8b:b2:eb: e4:fe:2b:c2:ed:fd:d0:12:1f:c6:94:cd:fb:02:a1:43:e3:c1: 8f:6a:9c:b8:e7:67:5e:d4:fb:12:03:38:ef:a8:25:45:d7:b5: b5:16:93:49:31:5a:ff:dd:3e:d3:84:7f:9d:1b:c2:b1:b2:9a: b8:dc:e1:63:f5:d3:00:19:9e:83:2b:3c:e1:1b:27:46:28:2d: a2:7b:a3:b3:35:17:35:ef:41:18:9d:cf:a4:a3:b9:26:4e:78: 74:1b:8d:6b:74:bc:6e:36:eb:ee:f0:05:30:f8:87:e4:b5:db: d3:3f:a1:e7:ec:0e:c7:92:94:3f:4b:a9:c2:d5:86:56:a4:4e: d6:b3:34:e7:77:6a:d5:cb:26:80:9d:49:a5:71:91:00:6d:34: 27:ef:a4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ0eSPtFwmXPKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk OWFkZmZhZmItNmZkYi00OWFhLTkxYzktZTRkNWQxMDMyY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTY5YnMVEII3LA0xuH5nPspNzvNIRqeW7Wd9 B9CVltBnJrJiyYl+IEBeTNrXZa2WJXN/KXGBs4rOl320rT1ZSjwJ+9iqdBDASaEo VcAFJCPAWp7kdC5BCD9fbgkxusFYAOLSAKd3EHzSzAAzlX1lAzc2ei4C+Yjzj+eW B/tv6bTUMdXBTpc4qXFxlVDEs8Ntcg1prGHhWhl30TSVFpFr838taNsEr38UZGky 21sf09LXnYJZjYXFlo4oq+JiKtLzR5bLiew8L6mexrYOKZPElzJLVSdq2qzOnX4v ObNHM7iqpI4vGCfFH/N6Q1aGu2BxAdMgVkAYhP0iFnncZjV+vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME4aqMTNxsxfHJOKItaVp7Tbyt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWM4MGM2NzEtYmU5ZC0z YmNjLWI3MzAtZjUzMjYzODM5NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILtc2I0YMswawRjNB3VEaV11lrsLQJIyy+Jvc1X+7M1qSsohrSvTnRL JgD8f2nrW8Vu1qDQwcXL7qkiiRmFhtrMvdUUxhEQFvo9OMBWFtisU0roaoz952Jh lob2MTZRmE561mov/bak94uy6+T+K8Lt/dASH8aUzfsCoUPjwY9qnLjnZ17U+xID OO+oJUXXtbUWk0kxWv/dPtOEf50bwrGymrjc4WP10wAZnoMrPOEbJ0YoLaJ7o7M1 FzXvQRidz6SjuSZOeHQbjWt0vG426+7wBTD4h+S129M/oefsDseSlD9LqcLVhlak TtazNOd3atXLJoCdSaVxkQBtNCfvpCw= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:04 2025 by rpki-client