$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa File: 6667b337-699c-315a-9ac6-ee1509be617b.roa (raw, json) Hash identifier: RzNmbq2Z7CSUQerqKTyFWX+YawsFVaTZJa1OZhGplQ8= Subject key identifier: A7:71:1E:BC:75:3F:43:62:04:51:BB:7D:5F:E1:B6:A1:43:32:9F:DA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EBA360CC36A9C1CFCB80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397217 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:eb:a3:60:cc:36:a9:c1:cf:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=def27e18-fc91-4042-8bde-b90207d0871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:91:2f:3c:b8:71:48:d7:5e:3a:80:d9:da: d6:98:fc:1c:24:e6:ec:1a:93:8c:f9:87:eb:10:fc: 48:22:88:37:1d:77:0d:3a:6e:59:9d:65:5c:0a:86: 72:1b:96:10:f1:ea:a3:0a:52:4e:90:c1:1c:b5:c2: dc:61:6e:f4:2c:55:0d:fc:03:70:f2:d9:76:95:9b: 5f:34:71:e8:3d:66:b1:18:10:ff:c1:b4:df:e9:31: 11:33:d3:96:cc:f3:bc:4b:ce:4f:bc:f6:81:7c:8f: a2:f6:15:7b:f8:b5:89:cf:35:92:9d:1b:ab:10:3f: 00:45:09:3d:9e:b1:57:55:37:89:bf:10:7d:2d:59: f6:c2:00:4d:31:79:56:8b:a4:bc:a8:a4:45:bb:bf: d5:7f:65:0a:07:0a:aa:38:c0:36:f3:88:8f:34:70: 29:e3:b2:ad:47:46:30:09:45:b4:35:a5:11:d4:05: e5:99:bc:de:8e:4a:c1:34:c3:15:ed:0d:2c:a3:15: 9c:06:bf:f2:12:0b:46:2f:f7:dc:df:7f:b1:a0:23: 5d:ef:0d:77:e5:13:71:a4:45:84:e0:23:ab:cd:e6: 14:06:31:1c:08:26:c3:46:aa:24:3b:ca:85:16:41: c0:c8:fd:84:8e:f7:e5:54:c4:4a:67:89:85:10:6b: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:1E:BC:75:3F:43:62:04:51:BB:7D:5F:E1:B6:A1:43:32:9F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6667b337-699c-315a-9ac6-ee1509be617b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:95:c5:bd:ce:62:cf:a2:59:d2:47:fc:3a:f8:d7:e5:d0:56: de:11:d9:28:94:c9:54:88:34:aa:88:f9:03:85:df:8f:70:8f: 84:06:63:11:b4:d3:e6:92:41:34:f0:53:e9:55:36:d4:13:88: d1:b8:e1:8e:f5:3f:2d:94:90:bd:cc:e7:b4:e7:65:23:f3:dc: 42:fa:40:34:f8:8a:4b:b3:9f:f6:55:0a:17:ca:3a:7c:27:0c: 1f:0f:e7:e2:3c:d3:fc:2e:7d:34:33:ea:ec:e5:d4:47:10:45: a7:50:23:d3:f2:50:bf:a3:e9:55:8e:5b:d8:15:10:9d:0f:7b: d1:37:ff:bf:33:5e:42:42:5b:09:3b:91:5d:af:af:1d:3b:43: 80:bf:90:c1:16:ac:ae:18:58:f3:9b:9f:3a:7e:c3:a1:c9:f9: 31:43:cd:cc:a7:ca:1e:6f:f8:4e:86:e0:e5:03:df:27:e7:c3: 9b:20:43:6b:4a:6d:9c:7d:5c:75:d1:bf:fa:1b:39:28:24:6c: e4:c8:cb:af:ba:43:d9:e9:c8:04:3e:09:b3:8f:d0:16:fa:cf: 62:38:4f:2d:34:3d:22:50:85:0e:fb:d0:d6:b4:be:f5:12:26: 8d:f1:84:5d:1d:5e:3e:4a:cb:27:24:e1:af:eb:7f:51:8a:32: 4f:82:c7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuujYMw2qcHPy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGVmMjdlMTgtZmM5MS00MDQyLThiZGUtYjkwMjA3ZDA4NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjqRLzy4cUjXXjqA2drWmPwcJObsGpOM+Yfr EPxIIog3HXcNOm5ZnWVcCoZyG5YQ8eqjClJOkMEctcLcYW70LFUN/ANw8tl2lZtf NHHoPWaxGBD/wbTf6TERM9OWzPO8S85PvPaBfI+i9hV7+LWJzzWSnRurED8ARQk9 nrFXVTeJvxB9LVn2wgBNMXlWi6S8qKRFu7/Vf2UKBwqqOMA284iPNHAp47KtR0Yw CUW0NaUR1AXlmbzejkrBNMMV7Q0soxWcBr/yEgtGL/fc33+xoCNd7w135RNxpEWE 4COrzeYUBjEcCCbDRqokO8qFFkHAyP2EjvflVMRKZ4mFEGs0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdxHrx1P0NiBFG7fV/htqFDMp/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjY2N2IzMzctNjk5Yy0z MTVhLTlhYzYtZWUxNTA5YmU2MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeVxb3OYs+iWdJH/Dr41+XQVt4R2SiUyVSINKqI+QOF349wj4QGYxG0 0+aSQTTwU+lVNtQTiNG44Y71Py2UkL3M57TnZSPz3EL6QDT4ikuzn/ZVChfKOnwn DB8P5+I80/wufTQz6uzl1EcQRadQI9PyUL+j6VWOW9gVEJ0Pe9E3/78zXkJCWwk7 kV2vrx07Q4C/kMEWrK4YWPObnzp+w6HJ+TFDzcynyh5v+E6G4OUD3yfnw5sgQ2tK bZx9XHXRv/obOSgkbOTIy6+6Q9npyAQ+CbOP0Bb6z2I4Ty00PSJQhQ770Na0vvUS Jo3xhF0dXj5Kyyck4a/rf1GKMk+Cx88= -----END CERTIFICATE-----Generated at Sun Apr 6 19:10:36 2025 by rpki-client