$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa File: 6fb09750-945e-32bf-af7e-1f28f074ae1c.roa (raw, json) Hash identifier: A+0Zz13pZ1D/nLO0QFsuYiXL+oYUarpB3t9C2oxQ2qc= Subject key identifier: 06:47:10:3C:D5:9A:DA:A7:78:7A:69:25:B1:72:E1:50:D3:E6:E9:C8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EBB200FA69DCD56B54C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397218 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:eb:b2:00:fa:69:dc:d5:6b:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a57c0a54-2532-4099-81f1-646e1b46229a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:e7:ec:66:b6:43:26:83:27:a1:30:ff:5a: e5:b2:c8:b0:34:47:d7:53:56:78:be:0a:84:69:15: 62:af:74:8d:da:b5:c8:47:7a:90:e4:fa:22:a6:37: 7a:47:1c:56:7c:af:c8:9c:1b:8d:6c:24:ee:8c:4d: 98:f1:f9:cb:3e:86:38:8f:24:91:66:82:9e:fa:69: 35:97:c9:c6:37:0a:3f:fa:d1:8c:7b:f6:81:c8:06: ff:a3:3f:a0:38:f6:03:ba:3a:0a:65:b1:de:d5:f2: 96:5a:e1:cf:e6:07:02:a4:ea:7a:5c:b5:9f:2c:08: 04:60:a2:82:1c:48:c4:9a:f0:2b:f2:0f:8d:a5:62: 7b:9c:69:38:4b:02:a4:7f:e5:af:2a:e5:ee:46:ad: 4d:db:f3:4a:d4:2f:eb:9f:50:a4:0d:59:51:93:b3: db:ae:e0:cb:8a:6c:02:c8:e7:72:d5:71:63:7b:fa: 15:7d:24:89:eb:30:bd:9d:a7:ca:8b:8d:a5:3f:e8: d6:24:23:45:96:62:be:2c:f8:1c:a6:2b:60:f8:ca: 86:87:7e:7e:13:ce:9c:e6:a5:a3:4c:d9:69:10:80: 49:2a:c7:49:9f:8e:82:de:89:62:17:6a:04:e1:7f: bb:d7:c5:78:5e:90:5c:70:5f:e0:05:e4:7c:b3:f4: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:47:10:3C:D5:9A:DA:A7:78:7A:69:25:B1:72:E1:50:D3:E6:E9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:db:ec:d5:f9:b9:4c:14:b3:85:8d:c6:fe:ee:e8:24:04:ae: 6a:91:fb:78:49:57:cb:85:38:e8:03:e4:dc:3c:94:72:b9:55: ed:3a:61:4a:d6:3a:e2:95:b3:ad:a5:4f:a7:34:35:b9:64:5b: f0:08:05:4d:66:fc:2f:ea:bb:e9:a2:14:0f:10:18:d1:d0:bd: b1:17:a8:9a:da:b2:42:61:96:ea:a6:58:41:49:30:a0:06:36: 6f:fe:fa:04:6f:8d:14:61:6a:ff:3e:21:40:56:e6:41:22:8d: c7:56:f3:e3:ac:57:6c:58:f1:71:e8:1d:3f:7e:38:0a:f8:87: 79:0e:d1:e9:b4:23:c5:45:61:3e:b7:0a:80:0b:a0:8e:59:f1: dd:c2:15:cc:6e:a6:ac:9f:31:f3:53:db:f1:e6:43:45:b0:ee: 2c:80:49:86:eb:d0:f9:d0:dd:76:0a:1b:0c:05:e3:83:91:77: 6c:07:b2:ad:aa:ef:c6:56:11:cc:d7:01:79:11:8a:59:24:5e: e2:55:e3:d0:10:f1:c7:3b:c6:05:f6:7d:9b:2a:08:36:f4:27: ff:09:0a:cf:33:08:5e:09:0b:41:d5:2e:43:e0:28:c1:50:e9: 63:6d:05:df:dc:b3:10:7b:41:15:88:d6:89:57:fe:68:80:fd: 9a:25:79:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuuyAPpp3NVrVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTU3YzBhNTQtMjUzMi00MDk5LTgxZjEtNjQ2ZTFiNDYyMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp3n7Ga2QyaDJ6Ew/1rlssiwNEfXU1Z4vgqE aRVir3SN2rXIR3qQ5Poipjd6RxxWfK/InBuNbCTujE2Y8fnLPoY4jySRZoKe+mk1 l8nGNwo/+tGMe/aByAb/oz+gOPYDujoKZbHe1fKWWuHP5gcCpOp6XLWfLAgEYKKC HEjEmvAr8g+NpWJ7nGk4SwKkf+WvKuXuRq1N2/NK1C/rn1CkDVlRk7PbruDLimwC yOdy1XFje/oVfSSJ6zC9nafKi42lP+jWJCNFlmK+LPgcpitg+MqGh35+E86c5qWj TNlpEIBJKsdJn46C3oliF2oE4X+718V4XpBccF/gBeR8s/T4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZHEDzVmtqneHppJbFy4VDT5unIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmZiMDk3NTAtOTQ1ZS0z MmJmLWFmN2UtMWYyOGYwNzRhZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7b7NX5uUwUs4WNxv7u6CQErmqR+3hJV8uFOOgD5Nw8lHK5Ve06YUrW OuKVs62lT6c0NblkW/AIBU1m/C/qu+miFA8QGNHQvbEXqJraskJhluqmWEFJMKAG Nm/++gRvjRRhav8+IUBW5kEijcdW8+OsV2xY8XHoHT9+OAr4h3kO0em0I8VFYT63 CoALoI5Z8d3CFcxupqyfMfNT2/HmQ0Ww7iyASYbr0PnQ3XYKGwwF44ORd2wHsq2q 78ZWEczXAXkRilkkXuJV49AQ8cc7xgX2fZsqCDb0J/8JCs8zCF4JC0HVLkPgKMFQ 6WNtBd/csxB7QRWI1olX/miA/ZoleeY= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:57 2025 by rpki-client