$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa File: 549084ab-81eb-3f9c-a956-ae07d5781133.roa (raw, json) Hash identifier: e/fWUUWqXG6z776f7O1KAcn2MvaUtJyd6QKKZhvtGu4= Subject key identifier: AD:95:64:BB:21:27:68:87:B8:21:35:9C:50:EE:8A:38:FB:42:D7:CF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963F3D9319D4DE77D6C090 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 19905 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3f:3d:93:19:d4:de:77:d6:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=321ebbca-a32b-4577-96ef-db21d4ff2b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:76:8d:47:51:b8:13:da:33:f5:2e:0c:f5: fd:e3:12:68:2e:5b:b8:66:9c:9c:cd:d4:63:b6:7b: 62:62:cf:9d:54:c1:5c:07:84:5e:31:c2:cd:df:a2: 7d:f3:c4:3b:f4:f6:03:52:f2:95:57:b9:be:00:7a: 72:c5:30:bf:f1:22:79:52:90:0b:06:4c:68:aa:b8: d6:8b:46:fd:75:2b:48:4e:9f:74:51:c2:b6:10:c8: 6f:4a:fa:79:74:c2:f5:ba:df:54:96:72:0a:ce:93: 0d:60:fc:80:3e:f2:2f:ea:b1:cb:cd:fc:35:8e:a3: 09:01:92:63:0a:de:dd:ae:b2:fe:89:a0:5b:78:fa: 0d:9e:87:3f:14:e2:e9:87:fc:d8:9a:bf:1f:77:3f: 40:f5:8f:87:58:dc:01:6f:1c:47:93:25:c4:7c:6d: 82:77:1d:dd:da:93:63:f7:aa:ad:fd:26:37:ff:8c: 4e:31:80:3b:18:b8:bf:ca:72:fd:56:97:78:4f:2b: 29:6b:37:8a:fa:f0:3f:33:33:bb:13:c1:a9:8a:1b: bd:ba:f8:e2:3a:96:6f:9c:5e:0c:3c:ef:d5:0d:80: a7:9a:f2:94:ed:a8:71:33:0a:dd:74:48:5c:82:36: b0:57:78:ef:32:29:f7:a2:8a:3a:9e:aa:7f:6f:03: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:64:BB:21:27:68:87:B8:21:35:9C:50:EE:8A:38:FB:42:D7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/549084ab-81eb-3f9c-a956-ae07d5781133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d4:2e:80:9d:5e:44:33:cb:45:12:da:f8:9e:f0:de:dd:24: f9:c6:35:80:6f:c9:34:58:df:f4:2f:cc:59:70:bf:cd:32:2c: a0:85:92:6a:12:8f:1c:5e:e9:a1:f4:f5:3f:19:6e:40:1b:92: 56:5e:5c:34:6b:2e:d8:7d:63:c3:94:8e:77:db:4b:67:c4:af: d4:df:d9:92:17:3e:27:46:99:f3:3d:75:74:ad:7d:c0:fc:31: 01:c6:ba:b7:da:54:21:cc:15:78:c5:9a:7b:b1:4d:6f:ad:57: a9:65:89:34:70:21:a9:0d:6b:6a:52:4a:17:b8:39:65:e3:b0: b4:7b:76:e8:58:a2:b4:ae:ac:cf:4f:ce:c2:71:6a:1d:a8:9b: 54:5e:40:e4:ad:4e:71:4b:43:30:d5:fe:93:ac:1e:aa:61:af: c7:5c:0d:ca:81:90:c6:18:f2:cd:aa:c2:a6:54:d9:d1:2c:83: 97:17:64:7c:0d:ca:b1:56:6a:7c:f0:02:6c:20:66:ef:bb:db: ff:78:97:c7:60:31:f2:a8:8a:52:4a:fe:5f:af:da:63:b8:d3: ed:b4:cf:ed:c6:9d:2a:bc:1b:80:c7:9a:b6:5f:d8:61:9f:ad: 9e:30:bf:11:10:b2:42:c7:42:62:21:f2:c9:1b:6a:f4:3b:3f: cb:54:4a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj89kxnU3nfWwJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzIxZWJiY2EtYTMyYi00NTc3LTk2ZWYtZGIyMWQ0ZmYyYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQJ2jUdRuBPaM/UuDPX94xJoLlu4ZpyczdRj tntiYs+dVMFcB4ReMcLN36J988Q79PYDUvKVV7m+AHpyxTC/8SJ5UpALBkxoqrjW i0b9dStITp90UcK2EMhvSvp5dML1ut9UlnIKzpMNYPyAPvIv6rHLzfw1jqMJAZJj Ct7drrL+iaBbePoNnoc/FOLph/zYmr8fdz9A9Y+HWNwBbxxHkyXEfG2Cdx3d2pNj 96qt/SY3/4xOMYA7GLi/ynL9Vpd4TyspazeK+vA/MzO7E8Gpihu9uvjiOpZvnF4M PO/VDYCnmvKU7ahxMwrddEhcgjawV3jvMin3ooo6nqp/bwNVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2VZLshJ2iHuCE1nFDuijj7QtfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTQ5MDg0YWItODFlYi0z ZjljLWE5NTYtYWUwN2Q1NzgxMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ULoCdXkQzy0US2vie8N7dJPnGNYBvyTRY3/QvzFlwv80yLKCFkmoS jxxe6aH09T8ZbkAbklZeXDRrLth9Y8OUjnfbS2fEr9Tf2ZIXPidGmfM9dXStfcD8 MQHGurfaVCHMFXjFmnuxTW+tV6lliTRwIakNa2pSShe4OWXjsLR7duhYorSurM9P zsJxah2om1ReQOStTnFLQzDV/pOsHqphr8dcDcqBkMYY8s2qwqZU2dEsg5cXZHwN yrFWanzwAmwgZu+72/94l8dgMfKoilJK/l+v2mO40+20z+3GnSq8G4DHmrZf2GGf rZ4wvxEQskLHQmIh8skbavQ7P8tUSs8= -----END CERTIFICATE-----Generated at Mon Apr 7 13:08:41 2025 by rpki-client