$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20e49d5e-ffcc-30f4-87aa-9f575d445c55.roa File: 20e49d5e-ffcc-30f4-87aa-9f575d445c55.roa (raw, json) Hash identifier: CyrYkAxWlf7m9J6cloN29Ak/Xn74ylk6nRYSfYuAQ6o= Subject key identifier: FA:9C:37:A4:8E:AA:E1:86:C8:78:70:CF:AF:3D:4F:C1:80:01:69:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584890760BAEA36387E91985AA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20e49d5e-ffcc-30f4-87aa-9f575d445c55.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397229 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0b:ae:a3:63:87:e9:19:85:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=e801f668-8edc-40a8-ae26-cd39c93eed17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:7f:33:fa:47:6e:d7:ed:49:ad:ac:08:29: 10:90:8f:b8:a3:49:69:b9:6b:77:fb:41:b0:55:cf: ca:25:52:bf:5f:23:40:de:f1:d6:c2:76:e5:31:9e: aa:c3:d4:5c:2e:bf:6c:03:c3:88:66:7c:1c:e4:f3: 03:d6:ce:96:eb:6a:c6:d4:b0:52:35:e1:30:e1:1a: b4:4d:86:24:4b:7b:f2:b8:e2:8a:fd:37:fc:d8:92: 6f:ba:ea:a1:96:a9:15:97:0b:a0:36:b4:93:ce:a8: 34:b1:2a:80:2d:ac:f3:3f:69:c3:eb:b2:98:5e:71: 9b:f6:e5:42:22:b1:fb:76:7f:51:6f:7e:c7:87:34: 65:e6:09:07:7f:44:bb:d8:16:d8:6e:3b:a3:14:ad: 57:89:44:c2:fb:09:51:3c:9e:a6:11:09:b9:7b:48: 1b:d4:75:37:f6:38:fe:60:3a:38:d4:08:fe:04:7b: 4c:a6:bb:9e:30:10:cb:fd:e6:89:2e:28:f6:12:84: f9:90:38:b9:1c:92:78:4f:f8:d8:42:27:d0:06:a6: 42:21:7c:56:41:cf:e4:84:58:52:6f:a3:6d:fc:96: 88:a8:0c:18:e8:df:66:03:5c:df:62:bb:06:07:e0: 9a:db:80:30:71:fe:88:84:62:a9:61:98:c5:0b:47: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:37:A4:8E:AA:E1:86:C8:78:70:CF:AF:3D:4F:C1:80:01:69:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20e49d5e-ffcc-30f4-87aa-9f575d445c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5d:62:bd:03:47:8e:4c:76:27:c2:5f:2f:d1:e2:39:8a:16: 1f:4c:dc:5c:61:34:74:bd:30:53:83:77:ef:5d:2c:36:71:cb: 09:5a:87:ec:db:f1:2c:3b:4d:de:62:5e:8d:95:50:f1:71:8d: a7:c2:8a:f1:fb:84:50:06:f9:9d:3b:b2:b1:0b:55:ca:19:dc: 0d:e7:6d:05:e5:0f:8a:ae:88:5a:88:87:b4:dc:7c:ea:2f:25: 9a:4a:0f:29:2e:58:e4:5c:4c:51:56:68:f9:a9:53:6c:1c:13: 3a:cd:9e:c1:11:d2:5d:ee:29:36:b8:c0:ec:e2:a7:c0:b8:5a: 68:2f:2e:f7:57:8e:a1:f4:b1:15:15:5c:81:f6:32:d2:f0:af: 9c:ac:56:31:32:c5:3a:0e:c9:31:0b:26:e7:a4:79:d1:ee:cb: 14:f5:14:10:4c:df:64:8c:c8:5f:80:ff:84:0b:d1:87:e2:ff: 4c:2b:1d:db:fc:0e:a2:2c:84:3d:1f:01:9c:a9:db:de:86:23: c0:ec:ab:59:21:6c:68:0c:55:03:64:ea:ad:4f:81:fd:b3:1a: 53:72:28:6e:db:2e:bb:3d:84:22:4b:bf:15:7b:95:02:b8:71: 71:e8:fd:8e:29:48:40:5a:af:32:64:8a:16:d5:2e:3e:6f:5d: e7:ab:4f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdguuo2OH6RmFqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZTgwMWY2NjgtOGVkYy00MGE4LWFlMjYtY2QzOWM5M2VlZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXF/M/pHbtftSa2sCCkQkI+4o0lpuWt3+0Gw Vc/KJVK/XyNA3vHWwnblMZ6qw9RcLr9sA8OIZnwc5PMD1s6W62rG1LBSNeEw4Rq0 TYYkS3vyuOKK/Tf82JJvuuqhlqkVlwugNrSTzqg0sSqALazzP2nD67KYXnGb9uVC IrH7dn9Rb37HhzRl5gkHf0S72BbYbjujFK1XiUTC+wlRPJ6mEQm5e0gb1HU39jj+ YDo41Aj+BHtMprueMBDL/eaJLij2EoT5kDi5HJJ4T/jYQifQBqZCIXxWQc/khFhS b6Nt/JaIqAwY6N9mA1zfYrsGB+Ca24Awcf6IhGKpYZjFC0eFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqcN6SOquGGyHhwz689T8GAAWmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjBlNDlkNWUtZmZjYy0z MGY0LTg3YWEtOWY1NzVkNDQ1YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEddYr0DR45MdifCXy/R4jmKFh9M3FxhNHS9MFODd+9dLDZxywlah+zb 8Sw7Td5iXo2VUPFxjafCivH7hFAG+Z07srELVcoZ3A3nbQXlD4quiFqIh7TcfOov JZpKDykuWORcTFFWaPmpU2wcEzrNnsER0l3uKTa4wOzip8C4WmgvLvdXjqH0sRUV XIH2MtLwr5ysVjEyxToOyTELJuekedHuyxT1FBBM32SMyF+A/4QL0Yfi/0wrHdv8 DqIshD0fAZyp296GI8Dsq1khbGgMVQNk6q1Pgf2zGlNyKG7bLrs9hCJLvxV7lQK4 cXHo/Y4pSEBarzJkihbVLj5vXeerT8I= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:44 2025 by rpki-client