$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ed5a3ee-fd06-343d-b6f6-e82762a61d40.roa File: 4ed5a3ee-fd06-343d-b6f6-e82762a61d40.roa (raw, json) Hash identifier: 3jFDz+WZETZlOd07FrB7aG4PUszy20cGp8Pl6uGau28= Subject key identifier: 8F:60:69:80:E2:FD:C9:38:D3:D2:FF:BC:C6:DE:CB:67:22:15:EF:23 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DA6624F2BD1291D93E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ed5a3ee-fd06-343d-b6f6-e82762a61d40.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397233 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:da:66:24:f2:bd:12:91:d9:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b55583ae-52c9-46f6-abcc-c7a80e088ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:3f:93:50:55:56:f9:6f:12:e2:96:b2:a1: 10:d1:69:8e:2e:f5:1d:60:67:65:84:a5:21:bd:e2: e9:35:13:2d:b0:58:15:65:28:8d:0a:5a:14:db:44: 89:2e:dc:cf:f9:83:5c:1f:92:ca:d7:99:f8:1b:7a: 90:bf:1d:5f:79:95:1e:88:19:46:41:ef:59:08:d5: b3:b8:77:b5:8c:2a:9c:a5:62:2b:55:96:c7:6c:a2: 97:74:7e:1e:cb:b7:b1:6a:6e:bf:a0:4d:68:e2:cd: 0f:45:42:47:41:4e:f9:73:5e:8b:e1:a8:1b:e5:de: da:46:32:9e:bc:af:cb:b0:35:e8:73:7b:44:6d:1c: e9:f3:12:08:a6:bc:7d:81:c8:24:6b:12:83:0d:09: 52:f3:2a:81:0f:cb:48:4c:73:f4:92:06:b3:1e:4c: 3d:46:6a:a9:62:51:fa:f3:f4:1d:5c:98:ee:c9:5f: bb:b4:2b:99:c6:45:c4:b3:d1:9f:8e:71:23:57:14: c1:38:08:59:65:72:ae:57:1a:78:1d:52:31:69:a4: 9f:e4:64:d9:19:8f:c4:0b:8a:92:be:6c:31:ed:6a: 31:fa:81:45:9a:c4:59:bc:16:4f:cd:c7:46:9c:a7: c6:ca:b6:a1:5f:ff:f0:0f:77:25:7a:71:a3:b9:1c: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:60:69:80:E2:FD:C9:38:D3:D2:FF:BC:C6:DE:CB:67:22:15:EF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ed5a3ee-fd06-343d-b6f6-e82762a61d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:ea:74:7b:7f:ae:3c:17:95:12:f3:c4:49:18:c8:39:80: 38:cb:00:d4:dc:d4:bf:47:2b:f1:a3:94:97:aa:29:9a:fd:71: ec:a5:8d:ce:dc:20:59:f9:91:53:23:0c:97:91:ba:07:e0:71: fa:90:db:09:72:09:ad:16:09:74:4d:8b:5d:47:d7:fc:4d:90: dd:08:61:3d:4b:1a:0b:2c:d6:77:4f:cb:8f:d3:e0:fe:62:d7: dc:37:f6:5f:73:04:73:2a:ce:27:36:34:96:72:b6:30:ea:5c: d6:22:0a:d4:bf:1e:9c:15:4f:75:d7:1f:2b:57:50:54:0a:43: 39:72:9c:8e:ed:93:27:4f:e1:f2:e6:75:a1:92:c5:9e:b9:f7: a2:74:ae:78:9f:ce:04:2b:a2:62:50:bb:3c:3d:c3:c5:9f:5c: 4b:b6:2e:e6:43:f3:5f:59:92:05:8b:4f:be:08:75:bc:54:ce: bb:b6:85:a6:ca:6a:40:f6:8c:72:da:60:ef:22:b5:bb:4a:c3: 6a:e1:86:64:fd:2b:3c:85:17:bc:b1:7e:63:fc:74:4b:40:65: 72:be:cd:b0:02:a0:c0:f3:45:df:de:af:e3:d0:66:a8:09:ae: e6:e1:bf:d6:7e:8d:38:97:4d:7d:32:be:5c:47:3a:f9:ef:af: aa:2d:95:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtpmJPK9EpHZPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YjU1NTgzYWUtNTJjOS00NmY2LWFiY2MtYzdhODBlMDg4ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa0/k1BVVvlvEuKWsqEQ0WmOLvUdYGdlhKUh veLpNRMtsFgVZSiNCloU20SJLtzP+YNcH5LK15n4G3qQvx1feZUeiBlGQe9ZCNWz uHe1jCqcpWIrVZbHbKKXdH4ey7exam6/oE1o4s0PRUJHQU75c16L4agb5d7aRjKe vK/LsDXoc3tEbRzp8xIIprx9gcgkaxKDDQlS8yqBD8tITHP0kgazHkw9RmqpYlH6 8/QdXJjuyV+7tCuZxkXEs9GfjnEjVxTBOAhZZXKuVxp4HVIxaaSf5GTZGY/EC4qS vmwx7Wox+oFFmsRZvBZPzcdGnKfGyrahX//wD3clenGjuRwWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9gaYDi/ck409L/vMbey2ciFe8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGVkNWEzZWUtZmQwNi0z NDNkLWI2ZjYtZTgyNzYyYTYxZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5g6nR7f648F5US88RJGMg5gDjLANTc1L9HK/GjlJeqKZr9ceyljc7c IFn5kVMjDJeRugfgcfqQ2wlyCa0WCXRNi11H1/xNkN0IYT1LGgss1ndPy4/T4P5i 19w39l9zBHMqzic2NJZytjDqXNYiCtS/HpwVT3XXHytXUFQKQzlynI7tkydP4fLm daGSxZ6596J0rnifzgQromJQuzw9w8WfXEu2LuZD819ZkgWLT74IdbxUzru2habK akD2jHLaYO8itbtKw2rhhmT9KzyFF7yxfmP8dEtAZXK+zbACoMDzRd/er+PQZqgJ rubhv9Z+jTiXTX0yvlxHOvnvr6otle0= -----END CERTIFICATE-----Generated at Mon Apr 7 13:05:02 2025 by rpki-client