$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa File: 8529e9c6-8071-3257-b2b8-14bf4967071e.roa (raw, json) Hash identifier: xyI/d9AUQWzC35N2sztziqj9QlCiSRW13f4eqM4u3IM= Subject key identifier: 47:C6:24:2E:81:00:5E:69:C8:45:F2:D0:70:15:58:5E:96:6C:7E:66 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996578B4D7C3B3C7B21E100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397218 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:57:8b:4d:7c:3b:3c:7b:21:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=0d249cd5-1041-42ff-b6e1-f776b8689e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:5b:ed:c8:5a:c6:cd:55:9e:6f:e9:82:7d: af:f7:bb:4f:64:0f:90:b8:e2:00:6b:5c:76:37:d7: 0c:5a:cf:2b:ab:73:c9:62:a1:a3:05:61:65:e6:1b: 40:91:48:23:81:be:6d:0c:08:45:cf:7d:e4:f2:d6: 61:5d:f0:8f:e7:99:35:08:22:c2:2d:b5:50:95:55: 0b:f6:0c:7a:f2:fc:3b:20:0a:92:9a:ba:52:f7:5a: 3f:af:8d:55:10:c5:f6:f8:67:ce:70:81:b5:47:4c: d9:41:06:43:de:e2:f4:4f:79:f9:b2:75:62:32:ab: 8f:af:60:e4:c9:84:1a:f5:6a:e5:c6:22:5b:ed:05: 20:49:70:53:37:d4:d5:e7:ac:09:67:8f:36:53:f2: fe:0b:cb:a0:88:2f:66:c6:db:7e:f1:7f:ce:e5:e0: 46:9d:c2:16:26:34:d3:16:f7:d7:a2:52:0f:b1:e2: 4a:6f:18:7b:73:c0:8d:c3:d9:9e:9a:2c:7a:66:c9: 26:92:80:80:aa:bf:8f:1c:09:77:f9:c4:4f:06:3a: cf:9d:fb:1e:a5:4d:4d:c4:38:2c:3f:7f:16:be:8a: 67:55:f0:a3:6f:c1:16:03:22:c9:60:e2:ec:6c:51: 76:76:67:54:8b:4c:42:db:0e:91:b5:69:b8:d7:f0: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:24:2E:81:00:5E:69:C8:45:F2:D0:70:15:58:5E:96:6C:7E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6f:9b:99:8c:6f:b5:48:3b:df:66:09:dd:5f:2f:66:ca:86: 4e:e4:3c:62:ac:8b:f7:ff:7f:aa:60:d1:4b:7c:ff:af:3f:29: 2d:fc:75:1f:01:19:bb:24:d5:13:c0:2c:96:00:e1:c2:2a:3d: 2b:42:7b:1c:98:6c:7d:3e:63:a2:22:dc:c6:a4:2b:a4:eb:88: 40:22:9c:6b:01:92:d3:00:2a:d3:4d:00:c6:05:cf:b5:7b:6c: 44:f4:ba:10:4a:dc:ab:3d:16:2d:c6:c3:67:6e:9f:73:f9:d6: 9f:c1:cb:d6:5c:18:93:70:b3:83:21:0e:4b:d1:21:2f:a9:6e: c4:bb:45:a8:de:14:6a:22:84:25:e0:37:0a:aa:7d:53:26:86: fe:9c:a7:79:bd:4e:8a:2d:3e:68:9c:72:45:58:0c:9c:91:c4: 37:4a:a2:8f:b8:b4:9a:d2:cc:99:23:6e:b6:f5:c0:91:9b:35: 66:a4:53:e1:23:4e:f5:d2:21:8e:8d:22:49:39:2c:8d:89:d3: 31:59:27:2a:e4:16:41:ab:de:5d:46:5a:dc:8f:dc:78:3d:ea: b6:45:54:02:a5:4d:cd:1f:54:96:a6:10:56:4a:ba:bd:70:4a: 6d:50:c8:f1:9f:94:16:f7:87:5c:48:12:07:d4:24:1c:1c:1d: 5e:06:82:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplleLTXw7PHsh4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGQyNDljZDUtMTA0MS00MmZmLWI2ZTEtZjc3NmI4Njg5ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qFb7chaxs1Vnm/pgn2v97tPZA+QuOIAa1x2 N9cMWs8rq3PJYqGjBWFl5htAkUgjgb5tDAhFz33k8tZhXfCP55k1CCLCLbVQlVUL 9gx68vw7IAqSmrpS91o/r41VEMX2+GfOcIG1R0zZQQZD3uL0T3n5snViMquPr2Dk yYQa9WrlxiJb7QUgSXBTN9TV56wJZ482U/L+C8ugiC9mxtt+8X/O5eBGncIWJjTT FvfXolIPseJKbxh7c8CNw9memix6ZskmkoCAqr+PHAl3+cRPBjrPnfsepU1NxDgs P38WvopnVfCjb8EWAyLJYOLsbFF2dmdUi0xC2w6RtWm41/BoxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfGJC6BAF5pyEXy0HAVWF6WbH5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODUyOWU5YzYtODA3MS0z MjU3LWIyYjgtMTRiZjQ5NjcwNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVvm5mMb7VIO99mCd1fL2bKhk7kPGKsi/f/f6pg0Ut8/68/KS38dR8B Gbsk1RPALJYA4cIqPStCexyYbH0+Y6Ii3MakK6TriEAinGsBktMAKtNNAMYFz7V7 bET0uhBK3Ks9Fi3Gw2dun3P51p/By9ZcGJNws4MhDkvRIS+pbsS7RajeFGoihCXg NwqqfVMmhv6cp3m9TootPmicckVYDJyRxDdKoo+4tJrSzJkjbrb1wJGbNWakU+Ej TvXSIY6NIkk5LI2J0zFZJyrkFkGr3l1GWtyP3Hg96rZFVAKlTc0fVJamEFZKur1w Sm1QyPGflBb3h1xIEgfUJBwcHV4GgkI= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:42 2025 by rpki-client