$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa File: 72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa (raw, json) Hash identifier: HLNLnaWvseM59HAzCVuvNh9Fk7UMRfTpjou7dsionNU= Subject key identifier: 74:B9:38:03:D7:6E:54:79:9C:F9:A4:01:1C:B4:9C:F0:E9:54:93:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2103CAE79A6A290D4C4C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397215 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:03:ca:e7:9a:6a:29:0d:4c:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=206b0550-e595-44b7-9911-ac7d00f9610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:eb:3f:26:2e:54:9f:0f:59:7d:2b:01:b5: 57:4f:4d:cf:f7:62:77:37:e1:8e:cb:0f:11:cd:7a: 04:c3:b3:da:fb:86:13:61:c4:1b:56:15:0b:45:b6: 03:1c:67:2f:22:e4:73:98:11:d2:a6:90:4d:23:82: 4f:4d:eb:b6:43:e5:d3:d1:5f:a7:ca:8f:35:e2:e2: 41:01:3e:38:76:48:c3:90:78:24:ef:4d:ec:4e:e6: 1d:d5:f8:6f:95:7b:2e:b8:e5:24:37:d3:e8:d2:e4: 21:57:da:35:19:54:22:ed:e0:05:2e:63:69:0a:f4: cd:d6:f5:01:4a:77:5d:b1:95:d6:c4:4a:86:fd:d4: ff:11:2e:6d:20:78:7c:5f:c1:b3:ec:80:bd:a4:d9: ff:5b:23:46:9b:b6:67:ce:98:6a:ce:45:72:a4:0e: c3:fc:9d:e0:0a:e6:e8:8d:05:53:8c:d4:b6:8f:3d: da:0f:9f:05:8d:5e:1a:6a:a4:7d:80:aa:bb:03:59: 58:3b:90:0c:24:20:e1:00:79:d8:ea:5d:71:28:cf: da:1b:02:9d:52:a5:f9:b1:d4:18:fb:c3:1e:9e:c5: 4e:3a:a1:5f:0a:d8:53:99:fa:9e:26:d5:3f:b2:75: 41:d3:f6:a0:03:e2:be:dd:3c:4d:1e:25:a7:aa:4b: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B9:38:03:D7:6E:54:79:9C:F9:A4:01:1C:B4:9C:F0:E9:54:93:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72048471-2d9e-37a9-85d6-4b0abe5e5c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a1:25:23:a0:3a:4c:cc:9a:fb:a9:10:f5:b7:ee:d0:5d:38: 19:08:ea:17:cf:cb:47:3d:98:69:18:d6:f2:e6:a1:07:57:b2: 6c:55:88:95:85:8c:37:9a:14:04:3f:e2:80:48:e9:88:44:cb: 28:6e:33:d2:fb:56:29:f3:73:1b:37:40:06:2b:d9:57:12:24: 1c:de:25:28:f8:6d:ba:f0:31:cd:d2:36:d7:0c:93:31:0c:29: 2f:85:d4:02:7a:b6:08:ca:89:46:2f:c3:24:be:dd:b2:fc:6d: 0d:d6:c1:d4:53:26:b4:7a:7c:c7:b2:ab:3d:8c:ec:7f:91:ba: 5e:de:d4:62:a0:57:65:8c:8f:e4:83:ae:98:d5:c3:da:bd:8d: 9f:0d:9a:8d:eb:4d:79:57:be:fa:54:a9:25:71:cf:a8:bc:70: 10:55:50:80:c0:de:6a:5c:f8:9a:1f:70:83:4a:7a:aa:3c:e3: 48:7f:e5:56:b6:d8:fd:b2:94:96:9c:64:c0:1e:b6:0a:a3:78: b9:7a:e6:0e:5f:ce:5e:12:92:71:10:19:7a:fa:87:4d:d6:45: 12:bf:b2:6f:99:25:2a:01:e0:58:ab:26:71:eb:39:4a:20:96: e7:96:4d:cf:a8:c8:f4:1f:4f:10:3e:91:56:79:34:e4:aa:ad: 8e:9c:40:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQPK55pqKQ1MTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MjA2YjA1NTAtZTU5NS00NGI3LTk5MTEtYWM3ZDAwZjk2MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaPrPyYuVJ8PWX0rAbVXT03P92J3N+GOyw8R zXoEw7Pa+4YTYcQbVhULRbYDHGcvIuRzmBHSppBNI4JPTeu2Q+XT0V+nyo814uJB AT44dkjDkHgk703sTuYd1fhvlXsuuOUkN9Po0uQhV9o1GVQi7eAFLmNpCvTN1vUB SnddsZXWxEqG/dT/ES5tIHh8X8Gz7IC9pNn/WyNGm7ZnzphqzkVypA7D/J3gCubo jQVTjNS2jz3aD58FjV4aaqR9gKq7A1lYO5AMJCDhAHnY6l1xKM/aGwKdUqX5sdQY +8MensVOOqFfCthTmfqeJtU/snVB0/agA+K+3TxNHiWnqks5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS5OAPXblR5nPmkARy0nPDpVJNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzIwNDg0NzEtMmQ5ZS0z N2E5LTg1ZDYtNGIwYWJlNWU1YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmhJSOgOkzMmvupEPW37tBdOBkI6hfPy0c9mGkY1vLmoQdXsmxViJWF jDeaFAQ/4oBI6YhEyyhuM9L7Vinzcxs3QAYr2VcSJBzeJSj4bbrwMc3SNtcMkzEM KS+F1AJ6tgjKiUYvwyS+3bL8bQ3WwdRTJrR6fMeyqz2M7H+Rul7e1GKgV2WMj+SD rpjVw9q9jZ8Nmo3rTXlXvvpUqSVxz6i8cBBVUIDA3mpc+JofcINKeqo840h/5Va2 2P2ylJacZMAetgqjeLl65g5fzl4SknEQGXr6h03WRRK/sm+ZJSoB4FirJnHrOUog lueWTc+oyPQfTxA+kVZ5NOSqrY6cQOg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:42 2025 by rpki-client