$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa File: 70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa (raw, json) Hash identifier: d2gLY0OG59OEPJNoxj9sxMX2/AtTv2sdOdQmX3z+hFQ= Subject key identifier: 2C:28:A2:10:11:F7:9C:5E:44:C7:A3:4C:B9:FD:82:EC:35:37:A7:49 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858495C24717A20949F176AB181F8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 397229 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:71:7a:20:94:9f:17:6a:b1:81:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=7fb3cb9a-db7b-4ce0-96b3-6b37da89edc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b6:ee:52:03:04:10:df:2e:39:02:82:d1:d5: e4:10:89:ba:42:e1:30:8c:fb:48:d5:e9:9b:37:00: c2:36:5d:b9:6f:bd:55:51:78:e9:5f:b9:43:95:25: 21:35:a0:d4:81:b7:7b:1f:90:04:4f:81:2f:fb:3b: b9:ae:d0:c3:81:ef:cf:2a:a6:61:28:fd:b7:98:5a: 88:b3:86:b3:a1:aa:c6:b0:68:09:eb:37:b3:eb:9a: 34:83:0f:d1:f9:cb:16:9c:00:24:c2:3f:f4:bb:9a: 57:57:58:a3:37:c9:cb:87:10:07:2c:37:84:75:1b: 01:31:4c:fd:59:91:05:37:c8:eb:a4:aa:ad:4d:fa: 92:58:a7:ab:7c:eb:ab:cf:1c:9f:c7:bc:ba:0a:16: 87:71:fe:8d:89:68:9a:de:ee:c6:2d:64:d5:cc:bb: f8:11:25:0d:e3:89:0a:0b:56:fa:d1:b9:bc:88:ce: 75:3c:d2:43:f6:92:e3:4b:a4:94:63:10:25:05:e9: c3:f7:a4:59:4e:7b:84:8d:21:71:f4:67:22:42:9c: 41:64:d5:63:2c:a5:37:2f:ba:fd:d7:32:17:2f:76: 76:db:7e:5f:fe:94:6b:a3:1a:ee:19:18:b5:c8:d9: 5b:30:43:15:66:68:73:47:47:19:9c:f3:dc:0c:2d: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:28:A2:10:11:F7:9C:5E:44:C7:A3:4C:B9:FD:82:EC:35:37:A7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70ac2e0a-b1d4-3f70-92da-9c298349b8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ca:35:f4:4f:fe:19:b2:9b:bf:a3:aa:68:32:0e:09:45:6b: 0d:68:f6:df:47:ef:be:7f:d2:7a:e0:74:8b:a4:1f:ce:1f:2d: 27:a0:b9:93:10:ff:7c:4e:fa:8a:7d:6f:05:4d:e9:2e:ea:43: 17:a8:fa:84:bd:eb:73:45:24:ad:b4:d3:da:79:38:48:8f:f9: 9b:12:43:00:47:7b:95:cf:9b:9f:22:10:6d:ae:81:b4:00:40: 3c:9c:6c:0d:e7:a3:af:b2:11:70:a3:fa:14:a1:b4:89:11:5b: 7c:13:8c:79:44:83:cb:a2:75:72:fa:e7:b4:7b:ed:17:d8:11: 7f:09:4d:09:10:43:a9:7f:00:8b:44:02:d4:26:cb:bb:ae:1c: 1c:b5:82:01:52:8b:0a:c4:dd:e4:89:94:d1:16:3f:0f:ff:d5: 70:b0:d8:a7:61:61:3c:5d:d7:8a:e4:43:c5:48:c8:3f:56:25: b6:05:04:00:74:35:91:9a:50:f3:2e:65:18:a2:cd:07:d7:e7: 1f:a6:29:88:08:77:8b:c2:34:03:5c:92:9b:49:5f:97:db:46: 8a:30:bc:e4:db:42:02:41:a4:55:95:d9:28:76:c1:58:6d:72: 4c:b1:50:6f:0b:e4:f7:f9:55:49:6a:76:1f:e1:fd:be:45:9d: 5c:51:f9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHF6IJSfF2qxgfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk N2ZiM2NiOWEtZGI3Yi00Y2UwLTk2YjMtNmIzN2RhODllZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LbuUgMEEN8uOQKC0dXkEIm6QuEwjPtI1emb NwDCNl25b71VUXjpX7lDlSUhNaDUgbd7H5AET4Ev+zu5rtDDge/PKqZhKP23mFqI s4azoarGsGgJ6zez65o0gw/R+csWnAAkwj/0u5pXV1ijN8nLhxAHLDeEdRsBMUz9 WZEFN8jrpKqtTfqSWKerfOurzxyfx7y6ChaHcf6NiWia3u7GLWTVzLv4ESUN44kK C1b60bm8iM51PNJD9pLjS6SUYxAlBenD96RZTnuEjSFx9GciQpxBZNVjLKU3L7r9 1zIXL3Z2235f/pRroxruGRi1yNlbMEMVZmhzR0cZnPPcDC368wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwoohAR95xeRMejTLn9guw1N6dJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzBhYzJlMGEtYjFkNC0z ZjcwLTkyZGEtOWMyOTgzNDliOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPKNfRP/hmym7+jqmgyDglFaw1o9t9H775/0nrgdIukH84fLSeguZMQ /3xO+op9bwVN6S7qQxeo+oS963NFJK2009p5OEiP+ZsSQwBHe5XPm58iEG2ugbQA QDycbA3no6+yEXCj+hShtIkRW3wTjHlEg8uidXL657R77RfYEX8JTQkQQ6l/AItE AtQmy7uuHBy1ggFSiwrE3eSJlNEWPw//1XCw2KdhYTxd14rkQ8VIyD9WJbYFBAB0 NZGaUPMuZRiizQfX5x+mKYgId4vCNANckptJX5fbRoowvOTbQgJBpFWV2Sh2wVht ckyxUG8L5Pf5VUlqdh/h/b5FnVxR+R8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:01 2025 by rpki-client