$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be50f624-798a-3dbf-83af-8be1a70fc47b.roa File: be50f624-798a-3dbf-83af-8be1a70fc47b.roa (raw, json) Hash identifier: tNDnNIP3pY2hGibRTa+DRUhPD2KCo0hULYjE7QyULpY= Subject key identifier: F1:08:1E:8D:F3:59:F1:3E:14:3E:79:7A:10:6F:19:45:3E:0E:87:9F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99652E6710EDB61E6B6B550 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be50f624-798a-3dbf-83af-8be1a70fc47b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397220 IP address blocks: 156.154.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:52:e6:71:0e:db:61:e6:b6:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=800a4b24-5c5f-4f46-9a80-f7dd21aada3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:69:24:33:fc:d0:e1:55:7f:c1:cc:a4:df: 79:9e:5c:39:d7:91:10:77:1e:a8:6b:ca:37:9c:5d: 0e:52:cd:f1:71:d4:bc:c8:6f:94:d4:34:28:72:e1: 1a:d1:70:66:f3:bd:a4:08:a3:28:79:d0:70:cc:60: 2d:e4:7d:b5:eb:ec:ed:4e:96:c2:2d:3d:3c:73:d8: ae:f5:90:c8:12:cc:a3:83:22:a9:5e:2a:8d:ad:86: e4:52:c4:d3:16:d5:93:2e:ae:01:e9:c1:78:87:07: 54:56:e8:0f:f6:05:99:18:76:4c:af:47:78:75:77: e4:f8:7e:d4:d6:dc:34:02:4d:1e:a8:db:41:48:5c: b4:9b:8c:b4:c4:4a:cd:0d:86:cd:1c:e4:c5:4d:62: 2d:91:3b:fb:43:f9:60:5a:34:3d:fb:51:e7:c4:c6: 0f:1d:c8:3f:4a:49:13:f0:e1:3e:5c:bd:0d:f9:fa: 6f:c5:65:6a:45:81:02:b2:da:63:66:ed:24:ac:45: 4f:eb:e5:d1:a3:66:f4:11:27:8c:bb:bf:85:9e:0a: f0:2e:aa:aa:43:cb:6d:30:a8:c7:41:a3:6e:c3:c0: df:b7:e3:39:a1:8b:ff:15:b9:f3:bd:3c:fa:33:f0: 8c:ca:07:ed:e2:ae:7d:74:c9:56:60:b3:c8:b6:f1: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:08:1E:8D:F3:59:F1:3E:14:3E:79:7A:10:6F:19:45:3E:0E:87:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be50f624-798a-3dbf-83af-8be1a70fc47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bf:09:84:1e:1a:84:1a:58:c2:54:39:b0:e7:21:aa:7c:63: 83:41:95:d3:42:81:75:b1:24:ea:60:34:85:a2:48:cb:49:6c: 64:ba:64:77:bc:87:3b:77:12:ec:2a:75:de:e2:a3:70:5a:4e: e4:3e:d0:c6:c8:f8:30:07:43:d1:3c:9d:e9:1c:f7:f7:c1:22: 55:0f:1c:c0:60:90:03:cd:71:6a:c5:58:87:ea:f6:ab:6a:2f: 50:03:0e:55:cd:05:73:7e:c1:fa:e4:33:ac:cf:0f:7a:95:b7: 5b:87:91:f8:59:f1:52:4b:2a:a5:46:1b:25:62:7b:f1:58:5a: 61:b0:b4:ca:37:e2:46:55:3b:2b:a8:24:64:b7:b3:d6:ca:5e: e9:d6:20:08:45:d9:19:c8:f4:25:9b:7b:66:4e:bc:1d:df:fb: 3e:ec:10:25:fa:7a:59:59:11:57:2a:42:ab:ce:05:4e:68:8c: b8:2e:e1:7d:1c:4a:09:ff:5e:f9:09:16:67:84:5a:90:7a:33: 71:73:07:e6:8f:f2:15:4e:98:f4:9d:ab:72:d2:03:c1:07:aa: c9:fe:bc:24:67:f6:5f:eb:d9:de:6b:0c:33:64:22:e2:e9:4f: 3f:7e:0a:71:9a:d6:35:b5:44:04:53:f0:e2:93:1c:94:11:31: ba:fa:30:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllLmcQ7bYea2tVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODAwYTRiMjQtNWM1Zi00ZjQ2LTlhODAtZjdkZDIxYWFkYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVppJDP80OFVf8HMpN95nlw515EQdx6oa8o3 nF0OUs3xcdS8yG+U1DQocuEa0XBm872kCKMoedBwzGAt5H216+ztTpbCLT08c9iu 9ZDIEsyjgyKpXiqNrYbkUsTTFtWTLq4B6cF4hwdUVugP9gWZGHZMr0d4dXfk+H7U 1tw0Ak0eqNtBSFy0m4y0xErNDYbNHOTFTWItkTv7Q/lgWjQ9+1HnxMYPHcg/SkkT 8OE+XL0N+fpvxWVqRYECstpjZu0krEVP6+XRo2b0ESeMu7+FngrwLqqqQ8ttMKjH QaNuw8Dft+M5oYv/FbnzvTz6M/CMygft4q59dMlWYLPItvEH9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEIHo3zWfE+FD55ehBvGUU+DoefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmU1MGY2MjQtNzk4YS0z ZGJmLTgzYWYtOGJlMWE3MGZjNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq/CYQeGoQaWMJUObDnIap8Y4NBldNCgXWxJOpgNIWiSMtJbGS6ZHe8 hzt3Euwqdd7io3BaTuQ+0MbI+DAHQ9E8nekc9/fBIlUPHMBgkAPNcWrFWIfq9qtq L1ADDlXNBXN+wfrkM6zPD3qVt1uHkfhZ8VJLKqVGGyVie/FYWmGwtMo34kZVOyuo JGS3s9bKXunWIAhF2RnI9CWbe2ZOvB3f+z7sECX6ellZEVcqQqvOBU5ojLgu4X0c Sgn/XvkJFmeEWpB6M3FzB+aP8hVOmPSdq3LSA8EHqsn+vCRn9l/r2d5rDDNkIuLp Tz9+CnGa1jW1RART8OKTHJQRMbr6MDo= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:31 2025 by rpki-client