$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa File: 2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa (raw, json) Hash identifier: OOsCiazuCLzEiTMJN4GKRqUAyMWndjeUhdfLCCRWli8= Subject key identifier: 42:BB:37:3B:33:54:BF:0B:84:92:47:26:6D:A6:5F:CB:95:02:55:69 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996584653B3F92BCAF72100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397234 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:58:46:53:b3:f9:2b:ca:f7:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=2528b3f0-a5ef-480d-a3be-87ce117b6ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:73:42:3d:01:ca:34:42:fe:1f:84:4f:f3:46: 37:44:3c:41:32:be:30:cf:ca:15:9e:ca:e7:37:da: 02:4b:a1:9b:5c:f3:25:2a:c6:c4:8f:49:39:e5:e7: 59:1c:25:7e:c3:5a:b4:73:d8:3a:c1:e3:8f:e4:0c: ff:94:b7:63:88:77:fc:27:86:1f:69:2c:c0:6c:d6: 0a:e1:de:95:84:5f:bd:62:26:98:ac:19:6d:74:79: 5d:91:38:d0:0c:cc:c5:f7:14:45:bf:9d:62:8f:f3: db:33:71:fa:23:3e:99:1a:1c:6b:58:d8:c3:be:22: e3:29:25:23:ff:9b:e9:84:b6:9f:a8:87:bf:99:6b: 6b:05:09:88:7b:05:43:ba:d3:3f:0c:91:96:3f:74: c9:97:27:3d:2d:e1:3e:05:7d:16:fb:15:47:48:17: 9b:51:20:77:6e:6a:cf:2e:92:93:6e:42:02:2f:8e: 46:f5:d0:a8:fc:0f:84:bf:09:d7:17:e2:01:2f:8f: c5:1e:45:51:b7:88:8d:26:2e:d0:c0:15:6a:eb:b3: b7:b2:74:a3:e8:9c:2a:5c:29:8f:71:ec:42:a1:76: ca:bb:f1:a7:c2:04:95:78:3d:8a:54:70:ca:c9:e5: 43:97:e9:ba:05:70:29:da:39:4d:83:24:3c:59:b1: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:37:3B:33:54:BF:0B:84:92:47:26:6D:A6:5F:CB:95:02:55:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e5e5d5d-95d6-30ae-9622-88fe32e29152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e3:9e:54:2c:34:fa:c2:5f:13:43:f4:5e:cf:02:a0:8c:03: 0c:9e:29:1f:56:28:35:03:5a:6a:f4:c4:9a:42:37:be:1a:e4: 68:fc:a1:83:3c:0d:23:68:f9:3a:3e:e9:5a:de:2e:08:63:d9: 74:e9:00:45:60:01:e1:65:17:f4:62:d3:cd:40:6b:c5:53:ed: 19:a0:0c:e3:f2:3e:7c:ab:aa:ca:32:86:f1:d6:db:a9:db:a5: 53:77:33:63:7a:a5:09:e1:e6:96:e4:5b:11:af:c3:56:47:37: 48:d3:fc:c8:17:f4:8d:a7:10:aa:fe:38:9a:e2:28:95:90:78: 6d:46:1b:10:77:11:bf:2d:32:ff:1b:7e:3b:bb:1c:16:7c:12: 66:4f:a2:06:ab:69:eb:6a:6e:d5:a3:44:13:8a:cb:18:20:05: 3c:bb:c1:cf:82:04:5f:69:55:8e:f5:e7:f6:8d:eb:b9:0c:5e: 96:53:eb:a4:1a:27:59:d0:4d:fb:96:86:17:c6:9b:99:fb:d1: 1b:27:97:59:7e:0c:2e:e0:38:cc:62:2c:41:ac:de:b8:8f:8d: b9:0a:0c:7c:82:20:6c:cf:0a:e2:a0:e1:63:2d:b1:df:dc:e7: 5f:47:9b:7a:1a:83:81:d0:b8:ca:65:cd:4d:01:13:87:bb:e0: fa:b6:60:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllhGU7P5K8r3IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjUyOGIzZjAtYTVlZi00ODBkLWEzYmUtODdjZTExN2I2YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HNCPQHKNEL+H4RP80Y3RDxBMr4wz8oVnsrn N9oCS6GbXPMlKsbEj0k55edZHCV+w1q0c9g6weOP5Az/lLdjiHf8J4YfaSzAbNYK 4d6VhF+9YiaYrBltdHldkTjQDMzF9xRFv51ij/PbM3H6Iz6ZGhxrWNjDviLjKSUj /5vphLafqIe/mWtrBQmIewVDutM/DJGWP3TJlyc9LeE+BX0W+xVHSBebUSB3bmrP LpKTbkICL45G9dCo/A+EvwnXF+IBL4/FHkVRt4iNJi7QwBVq67O3snSj6JwqXCmP cexCoXbKu/GnwgSVeD2KVHDKyeVDl+m6BXAp2jlNgyQ8WbFqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK7NzszVL8LhJJHJm2mX8uVAlVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmU1ZTVkNWQtOTVkNi0z MGFlLTk2MjItODhmZTMyZTI5MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/jnlQsNPrCXxND9F7PAqCMAwyeKR9WKDUDWmr0xJpCN74a5Gj8oYM8 DSNo+To+6VreLghj2XTpAEVgAeFlF/Ri081Aa8VT7RmgDOPyPnyrqsoyhvHW26nb pVN3M2N6pQnh5pbkWxGvw1ZHN0jT/MgX9I2nEKr+OJriKJWQeG1GGxB3Eb8tMv8b fju7HBZ8EmZPogaraetqbtWjRBOKyxggBTy7wc+CBF9pVY715/aN67kMXpZT66Qa J1nQTfuWhhfGm5n70Rsnl1l+DC7gOMxiLEGs3riPjbkKDHyCIGzPCuKg4WMtsd/c 519Hm3oag4HQuMplzU0BE4e74Pq2YK4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:44 2025 by rpki-client