$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8915e280-a98d-34da-9f51-4fc4af019fc1.roa File: 8915e280-a98d-34da-9f51-4fc4af019fc1.roa (raw, json) Hash identifier: I6z9ryNplgryBZd/iueDTSnXoGlLxrh0+YBKlyZPFEA= Subject key identifier: A0:9A:7D:35:51:92:F6:77:71:65:3A:A0:74:2F:0E:51:B7:03:65:4B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584940397762C6C61D0B0172B500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8915e280-a98d-34da-9f51-4fc4af019fc1.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 397222 IP address blocks: 156.154.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:77:62:c6:c6:1d:0b:01:72:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=d19dc8f0-3e4e-46ad-a371-9e0076ffc38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:d6:ad:ae:68:e5:70:a4:1f:af:6e:1a:2b: 5a:bf:4d:cd:4d:49:fa:2d:b4:fd:87:a0:c3:d1:9f: 29:4d:01:5c:dc:93:da:61:7e:4b:42:1b:87:b4:09: 89:ee:cd:88:db:ec:24:0a:cc:6c:79:ba:db:b8:fb: 40:1c:81:6e:df:02:f4:11:c2:42:c2:da:ce:60:f0: bb:23:0c:0e:c5:09:95:9e:07:d6:ba:bc:b8:6a:9a: a3:0c:ff:f8:99:13:ad:c4:4d:62:6e:60:46:df:52: 97:8a:b9:5f:1f:9f:2f:06:80:92:77:81:7e:83:69: 2f:f1:cb:1a:71:75:d4:53:78:de:f9:c0:02:a1:33: a9:2a:0b:f1:f1:69:15:b9:0d:b0:10:43:01:89:63: 02:59:ae:6e:dd:e1:fa:75:43:06:e9:24:af:6c:81: f3:54:0c:43:ef:95:a3:2c:38:ab:4e:55:ff:46:f2: 23:3e:49:e2:f0:7a:ff:3d:5b:ee:81:9b:dd:43:25: 21:0b:1c:9d:ca:fb:48:6a:a9:a2:a2:1a:cd:f4:9a: 47:e5:1d:d4:18:9d:3a:6a:ab:a5:1a:ef:15:80:74: f6:c8:ed:26:d0:c2:e9:b2:b5:40:8c:d8:27:a0:72: c1:fd:b1:d7:83:7e:97:7a:6c:3f:e7:c1:15:3e:86: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9A:7D:35:51:92:F6:77:71:65:3A:A0:74:2F:0E:51:B7:03:65:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8915e280-a98d-34da-9f51-4fc4af019fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f0:bb:04:fc:b8:7e:31:3c:4c:57:b2:61:75:bf:5a:93:dd: 2c:de:18:2c:b7:08:da:fd:8d:2d:35:aa:89:dc:c1:fb:87:85: 3a:ad:14:1c:42:2e:df:34:3c:84:4d:33:f2:1c:d7:e5:ef:ee: fb:35:e4:39:7e:46:7f:5b:15:86:8f:40:58:80:97:d4:c9:6f: 3b:37:3a:a5:40:68:21:28:45:2a:24:7e:a3:64:27:d7:5c:81: 22:1f:ad:5f:81:9d:8d:62:b4:3f:f2:74:45:73:b3:4f:f2:96: 00:32:be:c1:de:80:9d:5f:ba:3b:8c:f5:67:f8:b7:54:bb:93: d1:8c:e6:96:00:38:a4:55:2e:2f:ab:94:1a:97:f4:f0:17:25: 5e:1d:0e:27:85:20:f9:bd:db:a0:5f:c6:8a:73:4d:b9:e2:91: be:61:1c:1d:20:72:77:66:d3:07:23:96:cc:19:f3:bd:f7:aa: bc:29:36:da:5e:1d:3a:f5:b3:fa:07:5a:f9:7d:0e:28:e2:d7: 51:ad:dc:da:b8:1b:fb:82:a6:73:9f:21:a6:11:fc:e7:14:99: 39:9f:1e:f6:4c:5a:57:58:3b:c3:c5:e3:5b:d6:b8:23:15:bb: ec:a8:cb:59:8f:07:a6:a9:04:aa:5e:86:97:20:f6:a6:0e:a6: 6b:4f:11:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXdixsYdCwFytQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZDE5ZGM4ZjAtM2U0ZS00NmFkLWEzNzEtOWUwMDc2ZmZjMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/rWra5o5XCkH69uGitav03NTUn6LbT9h6DD 0Z8pTQFc3JPaYX5LQhuHtAmJ7s2I2+wkCsxsebrbuPtAHIFu3wL0EcJCwtrOYPC7 IwwOxQmVngfWury4apqjDP/4mROtxE1ibmBG31KXirlfH58vBoCSd4F+g2kv8csa cXXUU3je+cACoTOpKgvx8WkVuQ2wEEMBiWMCWa5u3eH6dUMG6SSvbIHzVAxD75Wj LDirTlX/RvIjPkni8Hr/PVvugZvdQyUhCxydyvtIaqmiohrN9JpH5R3UGJ06aqul Gu8VgHT2yO0m0MLpsrVAjNgnoHLB/bHXg36Xemw/58EVPoZtFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCafTVRkvZ3cWU6oHQvDlG3A2VLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkxNWUyODAtYTk4ZC0z NGRhLTlmNTEtNGZjNGFmMDE5ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/wuwT8uH4xPExXsmF1v1qT3SzeGCy3CNr9jS01qoncwfuHhTqtFBxC Lt80PIRNM/Ic1+Xv7vs15Dl+Rn9bFYaPQFiAl9TJbzs3OqVAaCEoRSokfqNkJ9dc gSIfrV+BnY1itD/ydEVzs0/ylgAyvsHegJ1fujuM9Wf4t1S7k9GM5pYAOKRVLi+r lBqX9PAXJV4dDieFIPm926BfxopzTbnikb5hHB0gcndm0wcjlswZ8733qrwpNtpe HTr1s/oHWvl9Diji11Gt3Nq4G/uCpnOfIaYR/OcUmTmfHvZMWldYO8PF41vWuCMV u+yoy1mPB6apBKpehpcg9qYOpmtPEd4= -----END CERTIFICATE-----Generated at Sun Apr 6 00:55:44 2025 by rpki-client