$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa File: 705d7665-e449-3c01-98c8-80ba54fd20a1.roa (raw, json) Hash identifier: zzLl6F8hDdTn2fZiVPlks9vKVBnXazmzdbur94QW3vU= Subject key identifier: A0:6E:B5:F0:7D:8A:68:03:7A:18:E1:09:2B:85:6B:64:1B:9E:B3:1E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD211158E7FAF0709FE2A100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397222 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:11:58:e7:fa:f0:70:9f:e2:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=773efb57-4ca3-47d7-a494-b10a0546fcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:50:07:85:ac:bd:52:3e:55:eb:a3:fb:d4: e5:c6:27:35:6d:ba:2a:8a:55:f8:c5:a0:af:ab:16: ed:fe:43:8f:8d:b3:ba:27:14:b4:5c:35:c0:90:d5: 49:01:8f:8c:5e:5c:be:e8:74:a5:08:91:c9:9b:fa: 30:56:b7:d2:70:b2:d9:27:f8:00:c8:9d:8a:6a:7a: af:7f:b5:da:eb:ea:35:99:e0:eb:ed:e4:e0:5c:b8: f1:9a:70:95:92:bf:f6:64:8a:73:d9:39:68:b0:20: 05:af:a5:81:82:33:7c:4b:fb:c2:4f:13:9a:34:9a: 5b:81:ad:89:07:c2:0b:84:ba:9e:46:91:a1:a5:52: 75:0f:bf:67:c6:80:d7:ec:e0:e9:f0:8d:ee:fc:b6: 2d:5d:8b:b8:86:09:a9:7e:3f:04:4e:db:f5:93:7e: 88:6c:20:92:bd:57:89:a0:2e:4c:cb:b8:70:c8:ee: 00:ff:b0:be:b6:21:d6:8d:4b:cc:bc:74:3b:dd:8c: b8:c1:f4:af:2f:0c:9f:c4:3d:2c:33:8a:b7:3c:21: 39:4a:11:0c:7e:c7:e2:26:7e:84:69:c5:f8:fa:fa: 8b:f9:54:fa:8b:a4:8b:5d:70:f3:4d:11:20:13:a5: 58:cb:69:41:a6:b1:fb:f3:f9:15:9e:22:f4:77:ba: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:B5:F0:7D:8A:68:03:7A:18:E1:09:2B:85:6B:64:1B:9E:B3:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0b:99:d9:30:f0:bb:58:13:7f:d1:3e:7a:d9:e8:50:ba:1a: df:0d:09:b6:c8:37:44:ba:6d:78:c7:6c:eb:43:07:7b:96:59: 3a:35:9f:3c:2a:92:19:fe:7d:4a:8b:40:67:cc:a1:d2:ec:67: e1:c0:ed:80:45:e9:54:e9:ad:9f:21:30:4c:c4:63:9c:63:d0: 8f:e6:3a:c5:16:a1:0c:16:cc:39:d6:cd:c5:1b:49:10:37:2c: dd:5f:55:f9:a6:c5:20:f9:b6:53:d0:71:36:bd:09:42:36:77: fc:3c:c8:f9:1b:20:49:d7:e7:32:73:c0:14:5e:20:55:5b:5e: 57:9c:4b:e8:48:5f:a0:23:15:8d:da:0e:2e:e9:fa:18:8b:fc: 92:96:1d:2d:ae:8d:dc:d4:cc:99:cf:e3:9d:c8:f6:46:d1:2f: 84:3b:31:ed:be:5d:05:4b:19:d3:97:c4:99:85:7a:1b:08:bc: 8b:76:3a:9a:32:1e:b8:62:b0:e4:42:91:bf:b6:04:a0:5a:23: 63:4b:d7:8d:61:5b:ad:2a:11:d1:3e:32:47:ec:ef:b1:24:c5: 41:4f:51:ec:71:1b:15:0c:e4:17:67:32:73:73:30:7d:97:83: 20:f0:5c:54:54:5f:e4:38:9d:a7:89:3f:16:d5:39:f6:6f:dd: a2:44:3c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRFY5/rwcJ/ioQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NzczZWZiNTctNGNhMy00N2Q3LWE0OTQtYjEwYTA1NDZmY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5VQB4WsvVI+Veuj+9Tlxic1bboqilX4xaCv qxbt/kOPjbO6JxS0XDXAkNVJAY+MXly+6HSlCJHJm/owVrfScLLZJ/gAyJ2Kanqv f7Xa6+o1meDr7eTgXLjxmnCVkr/2ZIpz2TlosCAFr6WBgjN8S/vCTxOaNJpbga2J B8ILhLqeRpGhpVJ1D79nxoDX7ODp8I3u/LYtXYu4hgmpfj8ETtv1k36IbCCSvVeJ oC5My7hwyO4A/7C+tiHWjUvMvHQ73Yy4wfSvLwyfxD0sM4q3PCE5ShEMfsfiJn6E acX4+vqL+VT6i6SLXXDzTREgE6VYy2lBprH78/kVniL0d7ovvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKButfB9imgDehjhCSuFa2QbnrMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzA1ZDc2NjUtZTQ0OS0z YzAxLTk4YzgtODBiYTU0ZmQyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYLmdkw8LtYE3/RPnrZ6FC6Gt8NCbbIN0S6bXjHbOtDB3uWWTo1nzwq khn+fUqLQGfModLsZ+HA7YBF6VTprZ8hMEzEY5xj0I/mOsUWoQwWzDnWzcUbSRA3 LN1fVfmmxSD5tlPQcTa9CUI2d/w8yPkbIEnX5zJzwBReIFVbXlecS+hIX6AjFY3a Di7p+hiL/JKWHS2ujdzUzJnP453I9kbRL4Q7Me2+XQVLGdOXxJmFehsIvIt2Opoy HrhisORCkb+2BKBaI2NL141hW60qEdE+Mkfs77EkxUFPUexxGxUM5BdnMnNzMH2X gyDwXFRUX+Q4naeJPxbVOfZv3aJEPBs= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:26 2025 by rpki-client