$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa File: 3d7f35df-c1ad-31e7-a176-395b54aa0986.roa (raw, json) Hash identifier: ouVFDA5a5JZ0Od3gp4OQbvciqhGnQEpF6LNQQUijtW4= Subject key identifier: 8E:07:F8:9C:19:A5:B0:46:55:7C:57:44:45:93:00:5F:42:C2:37:F5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99658E1E7585C9CC3E0B980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397214 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:58:e1:e7:58:5c:9c:c3:e0:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3f009a98-1d00-4c52-a486-30acac8ededb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:9c:23:22:f7:be:73:23:23:9e:f9:f8:e3: bf:36:43:b4:43:06:e7:1b:5c:57:c2:99:20:75:4d: 79:4d:51:da:80:4c:e9:cf:d5:9d:31:64:df:ac:1b: 96:55:f2:0d:d4:53:3b:ec:36:02:73:cc:b6:07:36: 11:3e:b9:c5:2f:cb:02:85:ab:93:53:06:93:69:a2: a1:d6:7b:25:bb:1d:ca:df:1d:17:cf:4b:87:f5:e8: 67:a1:a4:51:41:60:a1:e2:55:a3:57:b3:2d:f8:93: 75:1d:de:1a:03:f6:f9:a5:0f:8f:37:e2:05:80:74: 21:5d:81:b5:fd:00:f6:3b:9f:46:47:e5:ed:aa:58: 73:23:27:de:cc:df:d8:94:7f:27:9c:d5:ed:83:eb: 38:ca:2d:94:59:ab:0c:ec:5b:5b:87:40:97:1e:0a: bf:82:a5:51:a9:5a:7c:44:bc:bc:5e:1d:52:b1:76: 31:ae:8e:c0:c8:fc:4f:3c:0d:84:bc:f5:0b:7a:51: e3:56:a4:36:76:c6:1b:f4:e5:f9:97:cf:2f:3f:9c: 8a:bc:93:f7:76:af:37:01:af:ac:6d:42:f9:6c:72: 07:c7:1f:f4:41:5f:c1:ea:6a:7e:4c:db:15:cb:22: 05:0a:5c:87:65:bf:cb:5d:7f:80:d8:d3:17:63:4f: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:F8:9C:19:A5:B0:46:55:7C:57:44:45:93:00:5F:42:C2:37:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:67:5f:4f:da:a2:8a:6a:20:51:96:d1:9d:3d:49:4b:53:d8: 87:15:e9:c9:9a:ea:21:f4:42:5f:12:77:48:84:78:5a:f9:6f: 19:4c:03:74:29:32:4e:6e:c5:f9:78:f9:dc:a4:05:d9:a0:2a: 73:fc:a1:d2:1d:a9:8b:c9:0d:8c:b6:10:95:1f:70:eb:5b:b5: cd:25:fa:15:9a:44:bd:b4:ce:32:83:07:ea:44:d7:2b:ec:d9: d1:7a:89:b9:bc:8a:8f:8e:8c:a6:f2:a3:f7:92:3a:3a:25:d9: d7:e8:b7:1c:c6:f4:5c:92:1a:0f:4e:2a:1e:f1:74:17:dc:07: b6:5a:e8:ba:50:83:e9:a0:5a:c9:b6:98:15:4a:26:b6:83:fe: 6a:cb:28:75:0c:15:80:db:72:b5:4f:47:72:c6:69:e3:77:cb: 7d:b5:10:1c:00:0c:5f:58:bf:44:42:c1:1f:07:5f:b1:1f:6d: c2:fc:c0:c2:3a:46:1c:0a:0d:2d:ff:91:94:15:55:7a:87:0c: ad:63:79:96:34:e5:dd:94:ec:1f:3e:97:17:c7:1e:a0:82:ae: 2c:3c:a5:2c:2a:07:94:67:d5:9a:cd:8f:59:bc:ee:20:47:1f: 86:cb:7e:05:a7:e9:48:e0:92:f8:c3:e6:0c:5c:df:8c:4c:06: c2:08:d8:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplljh51hcnMPguYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2YwMDlhOTgtMWQwMC00YzUyLWE0ODYtMzBhY2FjOGVkZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDScIyL3vnMjI575+OO/NkO0QwbnG1xXwpkg dU15TVHagEzpz9WdMWTfrBuWVfIN1FM77DYCc8y2BzYRPrnFL8sChauTUwaTaaKh 1nslux3K3x0Xz0uH9ehnoaRRQWCh4lWjV7Mt+JN1Hd4aA/b5pQ+PN+IFgHQhXYG1 /QD2O59GR+XtqlhzIyfezN/YlH8nnNXtg+s4yi2UWasM7Ftbh0CXHgq/gqVRqVp8 RLy8Xh1SsXYxro7AyPxPPA2EvPULelHjVqQ2dsYb9OX5l88vP5yKvJP3dq83Aa+s bUL5bHIHxx/0QV/B6mp+TNsVyyIFClyHZb/LXX+A2NMXY09YUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4H+JwZpbBGVXxXREWTAF9Cwjf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Q3ZjM1ZGYtYzFhZC0z MWU3LWExNzYtMzk1YjU0YWEwOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBnX0/aoopqIFGW0Z09SUtT2IcV6cma6iH0Ql8Sd0iEeFr5bxlMA3Qp Mk5uxfl4+dykBdmgKnP8odIdqYvJDYy2EJUfcOtbtc0l+hWaRL20zjKDB+pE1yvs 2dF6ibm8io+OjKbyo/eSOjol2dfotxzG9FySGg9OKh7xdBfcB7Za6LpQg+mgWsm2 mBVKJraD/mrLKHUMFYDbcrVPR3LGaeN3y321EBwADF9Yv0RCwR8HX7EfbcL8wMI6 RhwKDS3/kZQVVXqHDK1jeZY05d2U7B8+lxfHHqCCriw8pSwqB5Rn1ZrNj1m87iBH H4bLfgWn6UjgkvjD5gxc34xMBsII2Ko= -----END CERTIFICATE-----Generated at Mon Apr 7 15:39:56 2025 by rpki-client