$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1b32e8a-094b-3702-b3f5-43768e568609.roa File: a1b32e8a-094b-3702-b3f5-43768e568609.roa (raw, json) Hash identifier: 4O8aWFKdRddZ0u2mWU69Dw6o1ndvz7ErTsb3TvVvAE0= Subject key identifier: C7:B5:C7:DF:51:68:26:63:40:11:2F:82:7D:13:87:41:89:53:73:86 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210077CF298C1D5F343900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1b32e8a-094b-3702-b3f5-43768e568609.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397226 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:00:77:cf:29:8c:1d:5f:34:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=658bcd8a-556f-4ca5-a5e5-89cf457a9209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:ff:10:61:98:0d:1c:d5:0d:f2:23:90:c8: ca:cb:1f:6d:4c:1f:eb:89:bc:e8:28:88:39:c3:4b: dc:3f:be:97:cc:57:03:55:3c:46:91:11:21:37:0b: b4:b0:35:6b:d6:86:2d:c0:e9:3e:77:82:3f:00:65: 7b:49:33:5d:0c:94:36:c3:99:10:ba:f7:00:9e:e7: 2c:94:e2:31:02:0c:88:b4:5d:73:7e:e9:fa:8b:d5: d7:e7:c8:5a:93:0b:83:ae:13:2d:cf:e9:61:f3:ba: b4:a2:33:4f:95:fa:e3:27:54:e9:f5:c2:33:c6:18: 29:d6:fd:7b:15:78:7f:13:df:c0:14:ff:99:57:89: 4f:49:d7:e4:9d:5b:f9:8e:dc:a5:20:a4:ef:7a:5d: e0:a1:f6:39:be:76:fc:00:5c:3a:4c:c1:93:4e:87: dc:66:03:43:bf:93:21:04:6e:eb:61:5b:19:da:d8: ed:2f:65:6c:2d:60:ad:fb:6d:bd:3b:59:04:88:01: d2:9a:f3:d6:9f:98:1b:b5:ef:4b:2b:44:a9:f4:c4: 84:fc:e1:05:e4:7b:55:3f:79:77:55:5a:2e:d0:52: 4a:2a:93:79:2c:5d:1c:79:d2:72:10:0b:d4:51:83: 01:bd:cd:8a:a9:22:13:34:74:b6:0f:56:56:0e:10: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:C7:DF:51:68:26:63:40:11:2F:82:7D:13:87:41:89:53:73:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1b32e8a-094b-3702-b3f5-43768e568609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b7:47:67:8f:f2:aa:96:10:ee:26:d3:b8:71:ad:33:a5:dc: bd:e8:d7:61:b4:75:9f:72:93:4d:73:55:d5:f4:de:8d:dd:17: 53:11:90:e4:69:74:c7:35:64:72:b9:8f:8a:25:f5:ca:5b:f0: 6c:f5:52:18:08:4e:21:7f:57:9f:92:54:35:93:f8:cb:89:da: f8:af:69:58:19:67:d3:91:29:68:da:70:1a:c8:0d:f5:95:43: 1f:93:81:0f:a8:2c:16:0c:c8:a9:e6:e0:9d:6f:2e:36:71:a2: b6:ea:1f:4d:b4:ac:68:ca:b4:cd:72:88:55:8c:3f:a0:15:da: a5:69:d2:da:1d:f2:b7:f2:97:2c:37:84:b9:c3:7c:6a:46:6d: 6e:f7:b6:6e:04:60:d1:98:a2:3e:5a:9a:40:d3:b4:26:e8:c5: 90:d1:cd:2c:20:d3:cd:13:d1:89:ce:fc:f2:9f:0c:2d:c8:55: 4d:de:37:bd:12:a8:34:66:51:64:56:e2:7d:0f:a7:59:50:0d: 48:bf:b2:e4:67:06:0a:c1:96:64:4d:37:bd:08:e8:9d:67:62: 01:30:2e:53:d0:26:fd:eb:ff:2a:92:93:be:bd:54:95:23:b4: 60:3d:1a:17:48:5d:18:51:97:40:51:7c:73:c4:34:cf:1c:e6: 00:0f:f6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQB3zymMHV80OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NjU4YmNkOGEtNTU2Zi00Y2E1LWE1ZTUtODljZjQ1N2E5MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCP/EGGYDRzVDfIjkMjKyx9tTB/ribzoKIg5 w0vcP76XzFcDVTxGkREhNwu0sDVr1oYtwOk+d4I/AGV7STNdDJQ2w5kQuvcAnucs lOIxAgyItF1zfun6i9XX58hakwuDrhMtz+lh87q0ojNPlfrjJ1Tp9cIzxhgp1v17 FXh/E9/AFP+ZV4lPSdfknVv5jtylIKTvel3gofY5vnb8AFw6TMGTTofcZgNDv5Mh BG7rYVsZ2tjtL2VsLWCt+229O1kEiAHSmvPWn5gbte9LK0Sp9MSE/OEF5HtVP3l3 VVou0FJKKpN5LF0cedJyEAvUUYMBvc2KqSITNHS2D1ZWDhCCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe1x99RaCZjQBEvgn0Th0GJU3OGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTFiMzJlOGEtMDk0Yi0z NzAyLWIzZjUtNDM3NjhlNTY4NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq3R2eP8qqWEO4m07hxrTOl3L3o12G0dZ9yk01zVdX03o3dF1MRkORp dMc1ZHK5j4ol9cpb8Gz1UhgITiF/V5+SVDWT+MuJ2vivaVgZZ9ORKWjacBrIDfWV Qx+TgQ+oLBYMyKnm4J1vLjZxorbqH020rGjKtM1yiFWMP6AV2qVp0tod8rfylyw3 hLnDfGpGbW73tm4EYNGYoj5amkDTtCboxZDRzSwg080T0YnO/PKfDC3IVU3eN70S qDRmUWRW4n0Pp1lQDUi/suRnBgrBlmRNN70I6J1nYgEwLlPQJv3r/yqSk769VJUj tGA9GhdIXRhRl0BRfHPENM8c5gAP9iA= -----END CERTIFICATE-----Generated at Sat Apr 5 20:52:14 2025 by rpki-client