$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4cfb1f0a-64a4-3b33-90c8-1d02ee992ccf.roa File: 4cfb1f0a-64a4-3b33-90c8-1d02ee992ccf.roa (raw, json) Hash identifier: hlaAm+LZk9TqaPGf/m6I3ulcKcF+ZSETeXdl6fq+zkc= Subject key identifier: EF:C6:71:8B:48:69:B7:19:B5:72:A2:D3:0D:2B:ED:08:1B:E1:2F:2E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DB4FC645CC6E5B59AE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4cfb1f0a-64a4-3b33-90c8-1d02ee992ccf.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397218 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:db:4f:c6:45:cc:6e:5b:59:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=cac36116-21e8-400d-be61-35bbe6a51dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:22:d1:67:99:95:5b:f7:bf:90:98:21:d0: 3d:71:76:a1:40:b2:5e:db:0f:c1:e7:8a:df:e5:9b: 97:d8:9d:86:d1:84:45:58:a0:5c:fb:54:3e:4d:7b: 4a:9b:8e:87:d5:59:a6:8f:8c:1d:48:86:50:a8:64: cd:84:a3:a2:f2:fb:50:75:8e:4b:32:3a:ca:24:d7: a4:3f:37:81:52:38:5a:ef:97:9d:04:82:0e:f7:4a: bf:fa:7b:30:0c:87:22:24:06:b9:eb:4b:24:bc:8a: 55:b0:fb:69:21:51:77:a4:02:2a:ca:53:12:e7:9f: b1:77:75:3a:66:44:c5:c0:05:5f:04:91:c4:17:79: 05:d4:0d:f2:d7:5e:6a:ac:b1:a2:a5:ce:65:1d:43: 20:c1:22:f0:22:e3:4e:ab:62:11:ed:54:6b:34:31: d9:7d:f8:7f:29:6b:ec:af:ac:f2:db:41:08:35:13: ba:d0:8b:c1:ce:96:be:14:76:7a:b8:26:90:c3:76: eb:34:cc:0f:37:1c:0e:3c:8c:26:a5:32:74:3b:e3: 14:27:91:8c:e0:f3:db:60:53:c8:85:04:4c:51:fe: 86:20:20:b4:50:8a:53:3b:d1:dc:7a:87:75:05:30: f7:46:59:06:0b:df:2d:43:ea:87:86:c1:5b:2a:4d: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C6:71:8B:48:69:B7:19:B5:72:A2:D3:0D:2B:ED:08:1B:E1:2F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4cfb1f0a-64a4-3b33-90c8-1d02ee992ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0b:14:04:0f:ed:50:81:56:d9:df:f7:a1:d9:45:84:b0:54: 75:c3:2f:53:20:ad:21:c5:27:c1:f2:49:46:4e:b6:1b:ab:47: d2:e6:7c:1f:b6:0b:ac:19:80:6b:d4:03:26:1c:e0:68:39:a1: 0c:85:ef:d8:36:9f:bd:ff:de:72:98:bd:9d:ae:91:dc:4c:36: 16:ea:15:75:1e:57:42:0e:ba:63:c0:ec:3a:5c:75:d2:a9:ed: 98:be:f1:a3:dc:ca:65:80:61:1d:c2:6d:2d:53:27:65:f1:55: 65:ad:ab:36:2d:a7:71:d5:84:b8:6f:47:36:bf:8e:01:04:43: ac:0e:df:5b:ea:82:48:50:8f:ae:78:f6:3c:1c:7e:e0:0e:d7: 7a:fa:57:36:31:7b:1d:e7:d0:e9:79:65:21:4a:58:20:b2:f2: 21:b6:45:d7:2e:bb:76:2b:5c:45:98:3c:da:7a:19:e0:31:1f: 71:09:b5:a7:6e:f8:07:80:43:1c:0d:ed:90:35:1b:c4:ab:5c: 34:2a:86:94:b2:f8:1a:06:0c:4a:74:8f:ea:c0:c2:e5:f4:99: 99:f1:b5:93:e4:fa:e2:e8:32:f8:05:e3:63:09:5a:3a:bd:73: 18:4a:a6:2d:3a:88:eb:da:e6:95:ec:64:58:18:c1:b7:92:44: 48:f9:89:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRttPxkXMbltZrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Y2FjMzYxMTYtMjFlOC00MDBkLWJlNjEtMzViYmU2YTUxZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjIi0WeZlVv3v5CYIdA9cXahQLJe2w/B54rf 5ZuX2J2G0YRFWKBc+1Q+TXtKm46H1Vmmj4wdSIZQqGTNhKOi8vtQdY5LMjrKJNek PzeBUjha75edBIIO90q/+nswDIciJAa560skvIpVsPtpIVF3pAIqylMS55+xd3U6 ZkTFwAVfBJHEF3kF1A3y115qrLGipc5lHUMgwSLwIuNOq2IR7VRrNDHZffh/KWvs r6zy20EINRO60IvBzpa+FHZ6uCaQw3brNMwPNxwOPIwmpTJ0O+MUJ5GM4PPbYFPI hQRMUf6GICC0UIpTO9Hceod1BTD3RlkGC98tQ+qHhsFbKk2vdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/GcYtIabcZtXKi0w0r7Qgb4S8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGNmYjFmMGEtNjRhNC0z YjMzLTkwYzgtMWQwMmVlOTkyY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFILFAQP7VCBVtnf96HZRYSwVHXDL1MgrSHFJ8HySUZOthurR9LmfB+2 C6wZgGvUAyYc4Gg5oQyF79g2n73/3nKYvZ2ukdxMNhbqFXUeV0IOumPA7DpcddKp 7Zi+8aPcymWAYR3CbS1TJ2XxVWWtqzYtp3HVhLhvRza/jgEEQ6wO31vqgkhQj654 9jwcfuAO13r6VzYxex3n0Ol5ZSFKWCCy8iG2Rdcuu3YrXEWYPNp6GeAxH3EJtadu +AeAQxwN7ZA1G8SrXDQqhpSy+BoGDEp0j+rAwuX0mZnxtZPk+uLoMvgF42MJWjq9 cxhKpi06iOva5pXsZFgYwbeSREj5iUI= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:59 2025 by rpki-client