$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa File: a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa (raw, json) Hash identifier: vZOkfaSttZf4DTnbqDqTJCPzLJM1EFr96xoRWls9tns= Subject key identifier: 22:71:CA:2C:02:AC:E6:35:D0:1F:80:0C:9D:6B:90:23:98:B0:95:BC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20EED49BB3811DA0CE3180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397236 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ee:d4:9b:b3:81:1d:a0:ce:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=12d36bf7-681f-4b41-b0f2-31c97170c2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:f0:57:d3:a6:e1:61:03:91:73:c0:e3:58: bc:29:37:26:19:d7:eb:9f:53:bd:b3:8b:a1:64:59: 8a:35:5b:6b:be:8e:c8:55:a9:3f:ec:6d:05:26:32: b0:f1:22:53:f4:31:fa:85:bd:57:3e:80:c2:57:ae: d5:eb:1d:88:b5:98:89:e5:4c:35:ea:bc:6d:aa:8c: 5a:c0:29:59:87:c5:41:a3:89:97:40:09:82:e4:ae: b1:f1:a1:d3:bf:94:db:c1:69:e1:3f:a8:74:19:00: 4d:13:81:07:7f:9c:fb:b7:ef:54:da:81:97:4e:a9: 2c:21:5f:a3:84:d2:fe:f0:77:38:49:ad:7f:f1:d2: 9f:de:57:5a:47:eb:a0:61:d5:dc:8b:ab:0e:5b:16: a5:54:7e:f0:7b:a0:23:25:5c:6a:57:e8:69:10:10: 74:1b:ff:2e:4c:8e:8e:03:17:a9:63:e9:7d:16:a2: 20:9b:ba:f8:c2:e8:d9:3d:54:f5:3e:db:ac:f0:01: 1b:73:f8:3a:22:16:a6:aa:bc:71:6f:e8:e2:2e:96: 8e:9b:c3:17:b0:eb:12:0d:32:20:19:49:87:fe:70: fc:55:3a:e0:0a:b8:5a:49:0f:dc:77:e4:51:9b:b3: 25:3a:59:97:34:11:33:d4:c5:1f:fb:21:f9:92:9c: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:71:CA:2C:02:AC:E6:35:D0:1F:80:0C:9D:6B:90:23:98:B0:95:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6e:4b:d9:f6:e5:99:0e:00:bc:6c:f8:17:16:70:b6:bd:2b: 42:fa:51:54:a7:66:5f:69:1a:f1:c4:af:64:4d:eb:f8:58:a6: 97:98:df:24:2f:95:0f:4c:08:9d:4d:61:63:26:1b:65:48:78: ef:54:a4:e8:ac:f5:88:40:19:08:9a:e7:05:11:5a:cd:9a:f4: 70:2e:8e:57:43:ce:00:0f:38:f5:ca:51:dd:b2:6a:1f:d8:e4: ba:f0:56:af:20:60:9a:8a:ba:fd:f1:92:8b:cb:fd:e1:d5:f8: 55:c9:cd:d2:ce:ca:6b:60:1f:aa:ea:41:3f:97:7a:a4:8a:9b: 36:0c:ab:79:27:d5:47:28:a4:1c:a4:9d:74:1e:f4:00:44:ed: d3:fc:ec:4e:13:4d:bf:2b:45:bc:88:27:40:98:3b:31:66:f9: 41:3a:be:86:d7:c5:37:55:cb:f9:14:f2:a4:15:c4:e2:50:47: 3f:ce:05:86:e4:2f:ac:2c:9e:04:55:68:ef:52:58:22:27:ed: 87:e9:b3:fa:07:81:4c:d6:ed:3d:a8:a6:10:98:e4:9e:97:55: 70:e0:89:9d:0c:64:fe:6d:10:6f:86:c8:37:2d:93:67:c4:f1: a6:a5:2e:38:b4:29:f9:ec:f0:3d:ef:1b:4f:71:06:bd:0b:77: 11:08:da:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IO7Um7OBHaDOMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MTJkMzZiZjctNjgxZi00YjQxLWIwZjItMzFjOTcxNzBjMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqvwV9Om4WEDkXPA41i8KTcmGdfrn1O9s4uh ZFmKNVtrvo7IVak/7G0FJjKw8SJT9DH6hb1XPoDCV67V6x2ItZiJ5Uw16rxtqoxa wClZh8VBo4mXQAmC5K6x8aHTv5TbwWnhP6h0GQBNE4EHf5z7t+9U2oGXTqksIV+j hNL+8Hc4Sa1/8dKf3ldaR+ugYdXci6sOWxalVH7we6AjJVxqV+hpEBB0G/8uTI6O AxepY+l9FqIgm7r4wujZPVT1Ptus8AEbc/g6Ihamqrxxb+jiLpaOm8MXsOsSDTIg GUmH/nD8VTrgCrhaSQ/cd+RRm7MlOlmXNBEz1MUf+yH5kpyCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJxyiwCrOY10B+ADJ1rkCOYsJW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ4Zjc4YTAtOWE5YS0z YWEyLWE4MzctYmFjODQyZTZlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhuS9n25ZkOALxs+BcWcLa9K0L6UVSnZl9pGvHEr2RN6/hYppeY3yQv lQ9MCJ1NYWMmG2VIeO9UpOis9YhAGQia5wURWs2a9HAujldDzgAPOPXKUd2yah/Y 5LrwVq8gYJqKuv3xkovL/eHV+FXJzdLOymtgH6rqQT+XeqSKmzYMq3kn1UcopByk nXQe9ABE7dP87E4TTb8rRbyIJ0CYOzFm+UE6vobXxTdVy/kU8qQVxOJQRz/OBYbk L6wsngRVaO9SWCIn7Yfps/oHgUzW7T2ophCY5J6XVXDgiZ0MZP5tEG+GyDctk2fE 8aalLji0Kfns8D3vG09xBr0LdxEI2nc= -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:01 2025 by rpki-client