$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf3ba8a4-74a0-392d-870c-8c13dfbca030.roa File: bf3ba8a4-74a0-392d-870c-8c13dfbca030.roa (raw, json) Hash identifier: 5SQ3dwpclZduD3JrS277IPBt9JHn9PlWMvZwjW3CDIU= Subject key identifier: 7D:72:37:FA:B4:01:C2:B0:F6:D7:57:76:D1:D6:D9:60:07:36:FE:CE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B6428DC21CEBF371DE71D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf3ba8a4-74a0-392d-870c-8c13dfbca030.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397243 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:28:dc:21:ce:bf:37:1d:e7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1f99a5ea-d694-4ef6-8d24-05d38b3a214d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:5f:03:4c:7a:0f:b6:bd:da:52:90:d5:6d: ed:6d:fe:de:5e:a8:ab:da:d3:2b:6b:2d:d9:83:5b: 8a:20:90:75:27:40:78:6a:72:22:d4:86:f7:eb:2a: 07:7a:7f:25:4f:2d:5f:91:1f:2e:ef:d0:e2:e8:86: ad:a6:c4:3b:2e:a7:a7:c3:df:6c:9b:b9:e1:a1:73: 2a:e5:6f:3d:fd:37:61:49:b1:dc:80:8e:36:12:42: 54:3b:b1:e8:57:a3:0c:db:1c:3b:55:df:36:0e:63: 06:f6:c2:9f:63:fb:49:19:bd:30:46:23:2c:ee:05: 52:df:06:25:12:37:71:a6:6c:a8:d4:4e:42:21:68: e1:c7:3a:0a:9e:08:26:25:f7:56:1e:de:59:c4:9f: 99:69:c1:dc:df:5a:b5:38:cb:ef:5d:a3:59:96:17: c9:34:04:da:61:c6:10:0c:cc:2f:a2:59:78:7a:ba: c0:0e:c5:0a:dd:0b:91:79:9c:b7:29:46:ad:a5:52: a1:ff:40:88:aa:6f:8e:a3:ed:68:7c:7a:28:d9:36: bb:e3:b1:02:58:0d:c3:dd:40:02:58:59:74:90:41: db:b9:d3:29:76:3e:ba:05:4d:d7:0c:1b:bd:98:45: 1e:10:16:c6:c1:72:12:52:f5:50:e5:3b:b4:ab:91: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:37:FA:B4:01:C2:B0:F6:D7:57:76:D1:D6:D9:60:07:36:FE:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf3ba8a4-74a0-392d-870c-8c13dfbca030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:44:d1:b8:88:62:4b:ae:ec:4c:7a:56:bb:cc:9e:c6:67:7f: ff:6f:3e:cd:03:65:61:bd:9e:03:db:23:4f:68:2f:c0:8b:45: 23:ba:6a:a5:6e:83:1a:f3:a5:62:51:48:2a:fd:89:af:18:4e: 52:89:dd:a7:34:4d:bb:37:10:c3:3e:87:10:cb:0b:67:ba:34: 8c:5c:f9:cd:71:78:3b:2f:d8:1c:b4:e9:23:5e:6d:cd:28:72: 80:a6:df:62:ca:d6:9d:0a:7b:56:20:c1:a9:4a:61:c5:60:07: a9:68:5c:55:ba:69:b0:f5:f4:9d:f7:d2:15:05:5d:29:dc:6d: 2e:3e:78:ee:4c:0d:9d:97:26:1e:22:85:85:d3:11:b4:61:42: d3:0d:d3:db:6d:8d:2c:75:f5:34:a5:b7:28:ab:27:ba:cf:3e: 0f:86:62:bf:4d:c6:a2:7b:bd:36:f7:5b:87:c2:f9:7e:5e:b0: 84:41:bb:1c:60:b8:0f:7e:24:fd:4f:7a:c1:2b:9a:98:a5:50: 07:58:af:b9:65:ee:37:0c:10:2f:19:24:03:4f:6c:07:6a:72: 0f:63:7f:e7:d2:4f:ce:64:21:13:7d:ac:fa:aa:4b:ba:c6:4d: 9b:51:ce:c1:e4:c6:d7:10:57:9c:3c:72:20:f1:58:cc:c6:14: da:9c:db:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCjcIc6/Nx3nHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MWY5OWE1ZWEtZDY5NC00ZWY2LThkMjQtMDVkMzhiM2EyMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg5fA0x6D7a92lKQ1W3tbf7eXqir2tMray3Z g1uKIJB1J0B4anIi1Ib36yoHen8lTy1fkR8u79Di6IatpsQ7Lqenw99sm7nhoXMq 5W89/TdhSbHcgI42EkJUO7HoV6MM2xw7Vd82DmMG9sKfY/tJGb0wRiMs7gVS3wYl Ejdxpmyo1E5CIWjhxzoKnggmJfdWHt5ZxJ+ZacHc31q1OMvvXaNZlhfJNATaYcYQ DMwvoll4errADsUK3QuReZy3KUatpVKh/0CIqm+Oo+1ofHoo2Ta747ECWA3D3UAC WFl0kEHbudMpdj66BU3XDBu9mEUeEBbGwXISUvVQ5Tu0q5HhewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1yN/q0AcKw9tdXdtHW2WAHNv7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmYzYmE4YTQtNzRhMC0z OTJkLTg3MGMtOGMxM2RmYmNhMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1E0biIYkuu7Ex6VrvMnsZnf/9vPs0DZWG9ngPbI09oL8CLRSO6aqVu gxrzpWJRSCr9ia8YTlKJ3ac0Tbs3EMM+hxDLC2e6NIxc+c1xeDsv2By06SNebc0o coCm32LK1p0Ke1YgwalKYcVgB6loXFW6abD19J330hUFXSncbS4+eO5MDZ2XJh4i hYXTEbRhQtMN09ttjSx19TSltyirJ7rPPg+GYr9NxqJ7vTb3W4fC+X5esIRBuxxg uA9+JP1PesErmpilUAdYr7ll7jcMEC8ZJANPbAdqcg9jf+fST85kIRN9rPqqS7rG TZtRzsHkxtcQV5w8ciDxWMzGFNqc23g= -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:34 2025 by rpki-client