$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f2b23a4-d2d9-3726-81f0-1462e73ed116.roa File: 1f2b23a4-d2d9-3726-81f0-1462e73ed116.roa (raw, json) Hash identifier: gdiate94b/h6N6mbyZWDcfmkWsv3rcC2wgYT0cad9X0= Subject key identifier: EE:89:B7:A8:24:4C:F3:F1:40:13:67:1D:AF:BA:0E:FD:60:DC:CB:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965C59DEB0041C0963AF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f2b23a4-d2d9-3726-81f0-1462e73ed116.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397218 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5c:59:de:b0:04:1c:09:63:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=a118a35c-402a-442c-8f5d-8d81ef62f149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:0c:45:ae:18:53:7d:a6:e6:51:f0:a3:e4: 9e:04:46:27:79:08:57:32:d9:1c:53:1d:db:55:41: 1f:3d:ff:1e:53:99:e9:b1:37:6e:2e:4b:7d:e3:a2: ef:06:52:c8:10:d3:cc:f0:d0:5b:c1:dd:9a:3e:d9: ff:4e:b2:6b:38:90:8c:66:91:4b:0f:53:42:59:08: 14:6d:d8:f5:a0:ad:83:16:c2:73:32:7a:83:e4:a9: 5c:1a:28:19:f6:0a:a4:a0:57:d5:1d:b2:53:bc:b9: 3b:eb:96:72:63:d3:46:58:56:eb:ae:f2:21:fc:61: c7:d7:e9:33:ee:8d:ce:3d:a0:3e:33:03:b8:f2:9b: 6d:a9:ba:81:63:aa:21:c3:bc:9a:2b:99:24:4c:d6: 18:b7:28:78:02:3f:f1:e7:ea:18:4e:18:48:57:5b: 00:92:ed:7a:9a:c2:05:0e:4a:76:1e:15:25:df:fd: 87:3e:1e:79:4e:70:9a:97:78:65:f1:2c:84:44:7c: 20:74:d7:85:34:a7:a1:87:55:d4:a1:0e:62:1a:b8: a1:d1:50:a0:c9:8b:a0:d0:99:62:6b:2e:f8:d4:eb: fd:ab:df:af:37:2a:24:b6:75:a3:27:ac:82:2b:15: 93:c1:b8:32:1b:56:89:ee:24:ef:e4:c4:8c:e6:8f: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:B7:A8:24:4C:F3:F1:40:13:67:1D:AF:BA:0E:FD:60:DC:CB:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f2b23a4-d2d9-3726-81f0-1462e73ed116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:72:da:33:c9:ff:c9:cf:80:04:4f:f1:d7:53:35:6e:48:50: 66:ba:b0:a4:87:78:0d:b5:ba:dc:46:53:4e:94:06:bb:1f:8b: ee:8e:18:f5:a6:d2:01:f5:91:78:95:14:8e:f9:41:d9:d0:53: 0a:a9:05:33:e2:ea:eb:fe:b0:30:c6:f2:9f:26:48:81:4f:10: 59:1a:13:8e:b7:ba:f2:c8:2d:17:33:9d:25:7c:fa:d5:83:23: be:f4:1c:39:7f:2e:ee:77:91:0e:c4:b8:9c:94:27:45:a1:50: c6:51:c9:47:cc:e5:d4:7f:b1:b8:96:1a:41:02:a4:e2:74:a1: d2:e2:40:d6:df:2e:12:28:b7:5e:1a:53:0c:16:8a:65:48:be: 09:c5:6b:47:1b:28:e3:c1:85:31:f1:3d:33:67:40:61:d6:08: d7:43:6e:c1:0b:42:d0:09:c1:8a:48:ad:72:2d:55:b1:1b:00: 14:99:98:40:64:7e:18:e5:74:59:01:90:c3:f5:85:5e:a8:19: ed:74:3a:55:b4:0d:7d:8a:66:16:3a:69:3a:a8:4d:c2:44:fe: fb:b0:a3:59:dc:4d:9f:89:b9:4c:9e:d8:b1:9f:72:c0:50:80: d6:7f:40:f7:6d:c4:cc:4d:d3:1b:7a:e9:28:24:40:37:7e:ab: e7:6e:3d:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllxZ3rAEHAljrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTExOGEzNWMtNDAyYS00NDJjLThmNWQtOGQ4MWVmNjJmMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EMMRa4YU32m5lHwo+SeBEYneQhXMtkcUx3b VUEfPf8eU5npsTduLkt946LvBlLIENPM8NBbwd2aPtn/TrJrOJCMZpFLD1NCWQgU bdj1oK2DFsJzMnqD5KlcGigZ9gqkoFfVHbJTvLk765ZyY9NGWFbrrvIh/GHH1+kz 7o3OPaA+MwO48pttqbqBY6ohw7yaK5kkTNYYtyh4Aj/x5+oYThhIV1sAku16msIF Dkp2HhUl3/2HPh55TnCal3hl8SyERHwgdNeFNKehh1XUoQ5iGrih0VCgyYug0Jli ay741Ov9q9+vNyoktnWjJ6yCKxWTwbgyG1aJ7iTv5MSM5o/q/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6Jt6gkTPPxQBNnHa+6Dv1g3MtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWYyYjIzYTQtZDJkOS0z NzI2LTgxZjAtMTQ2MmU3M2VkMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBy2jPJ/8nPgARP8ddTNW5IUGa6sKSHeA21utxGU06UBrsfi+6OGPWm 0gH1kXiVFI75QdnQUwqpBTPi6uv+sDDG8p8mSIFPEFkaE463uvLILRcznSV8+tWD I770HDl/Lu53kQ7EuJyUJ0WhUMZRyUfM5dR/sbiWGkECpOJ0odLiQNbfLhIot14a UwwWimVIvgnFa0cbKOPBhTHxPTNnQGHWCNdDbsELQtAJwYpIrXItVbEbABSZmEBk fhjldFkBkMP1hV6oGe10OlW0DX2KZhY6aTqoTcJE/vuwo1ncTZ+JuUye2LGfcsBQ gNZ/QPdtxMxN0xt66SgkQDd+q+duPZ0= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:52 2025 by rpki-client