$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/659d046f-b3bd-38ef-a012-824790ac4ac2.roa File: 659d046f-b3bd-38ef-a012-824790ac4ac2.roa (raw, json) Hash identifier: 8MPrg8E+Zy+AxXTVj3HHM7psZiOrHcJjZmyfilL2ut8= Subject key identifier: CD:59:34:D5:3F:19:0F:AB:33:C2:31:0A:B0:13:D6:F0:9C:CD:EB:45 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858492CB141D0972030C1E70C3680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/659d046f-b3bd-38ef-a012-824790ac4ac2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 399169 IP address blocks: 156.154.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:41:d0:97:20:30:c1:e7:0c:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8cad26ab-a126-42d6-a3c0-a5e60192b7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:a4:05:1e:68:20:32:9e:11:39:db:1b:fc: 02:6a:5d:a4:de:ff:da:a0:48:aa:e2:00:e4:6d:06: 46:dd:9b:33:bc:3d:23:65:75:53:84:9b:33:11:65: de:fd:56:b7:f6:3a:8e:f2:32:32:80:e9:bd:a7:5a: 1e:ca:e2:ca:3f:db:e2:90:6c:ab:87:14:20:d3:0b: b1:12:b7:e9:6f:02:7f:ae:25:64:32:8c:ec:3b:d0: 3e:16:c1:cb:8f:72:d6:a1:38:64:b9:00:92:94:c1: 65:bd:8a:97:3e:fe:8d:1c:37:05:8b:bd:c4:23:4e: dd:ee:28:df:9c:9e:be:98:9f:35:de:d4:bf:6f:b5: e5:4b:c9:6c:3f:8f:5c:0c:41:2b:d4:a7:1f:6a:5f: fe:b4:14:ab:97:e9:14:9d:d7:b8:9f:55:56:09:de: e2:c1:b3:78:d2:eb:7d:fd:7d:90:99:a5:45:88:6f: 69:85:f7:ce:20:48:5c:cc:c3:d9:cb:08:f0:c4:50: 57:ab:65:71:d2:cc:78:12:e7:d3:cc:23:99:19:11: 47:a9:08:9e:d6:c1:5b:26:95:bc:d1:5a:15:14:00: be:76:43:f6:19:02:c0:d5:dd:15:63:b4:fc:30:af: 51:15:5a:4a:28:45:0a:3d:26:b8:80:34:f4:83:92: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:34:D5:3F:19:0F:AB:33:C2:31:0A:B0:13:D6:F0:9C:CD:EB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/659d046f-b3bd-38ef-a012-824790ac4ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:50:0a:db:7c:ff:26:e9:40:66:d5:5d:96:19:a2:d4:8f:a7: 7b:a4:53:ff:cd:01:2f:22:6e:2b:bc:da:1f:de:9f:10:e8:11: 54:f2:ce:d6:9d:40:dd:61:fa:fb:ab:f3:17:c8:90:93:ab:ee: 86:c4:a1:22:19:f9:03:85:f6:25:b4:69:c6:60:f3:01:2b:99: 6b:83:76:fe:c9:8a:6b:f7:b4:21:b6:05:a3:4b:55:ab:ea:67: 17:1d:39:59:a2:35:74:38:db:cf:09:ae:b8:4a:58:08:fb:db: a3:99:a6:20:7d:13:28:ff:7c:a7:d2:81:34:4f:3a:d2:ca:e3: 88:8e:66:b4:68:7a:db:12:0e:84:b2:c2:a3:d4:b1:ba:c6:33: 19:dd:90:20:52:59:88:d8:db:69:62:cf:6b:2a:d4:7c:a6:06: 35:f5:7f:ed:1c:57:05:68:51:48:d3:b0:c9:03:6c:3a:63:46: 5d:0d:ff:35:fe:6e:82:7a:0f:01:38:9c:88:82:31:4f:fe:2c: 99:a9:4d:b3:62:d6:92:71:79:ca:bd:1e:bd:25:e1:c7:8e:19: fa:10:18:87:35:b2:68:53:3a:ef:49:f4:c9:9d:b6:ed:e1:cc: 6f:28:5f:63:4e:b4:22:11:0f:12:06:b9:1c:ac:9d:f1:1b:5f: aa:22:3d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUHQlyAwwecMNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGNhZDI2YWItYTEyNi00MmQ2LWEzYzAtYTVlNjAxOTJiN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMakBR5oIDKeETnbG/wCal2k3v/aoEiq4gDk bQZG3ZszvD0jZXVThJszEWXe/Va39jqO8jIygOm9p1oeyuLKP9vikGyrhxQg0wux ErfpbwJ/riVkMozsO9A+FsHLj3LWoThkuQCSlMFlvYqXPv6NHDcFi73EI07d7ijf nJ6+mJ813tS/b7XlS8lsP49cDEEr1Kcfal/+tBSrl+kUnde4n1VWCd7iwbN40ut9 /X2QmaVFiG9phffOIEhczMPZywjwxFBXq2Vx0sx4EufTzCOZGRFHqQie1sFbJpW8 0VoVFAC+dkP2GQLA1d0VY7T8MK9RFVpKKEUKPSa4gDT0g5LWuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1ZNNU/GQ+rM8IxCrAT1vCczetFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjU5ZDA0NmYtYjNiZC0z OGVmLWEwMTItODI0NzkwYWM0YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRQCtt8/ybpQGbVXZYZotSPp3ukU//NAS8ibiu82h/enxDoEVTyztad QN1h+vur8xfIkJOr7obEoSIZ+QOF9iW0acZg8wErmWuDdv7Jimv3tCG2BaNLVavq ZxcdOVmiNXQ4288JrrhKWAj726OZpiB9Eyj/fKfSgTRPOtLK44iOZrRoetsSDoSy wqPUsbrGMxndkCBSWYjY22liz2sq1HymBjX1f+0cVwVoUUjTsMkDbDpjRl0N/zX+ boJ6DwE4nIiCMU/+LJmpTbNi1pJxecq9Hr0l4ceOGfoQGIc1smhTOu9J9Mmdtu3h zG8oX2NOtCIRDxIGuRysnfEbX6oiPYc= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:38 2025 by rpki-client