$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa File: c2286d69-6348-360c-8fa0-537662a778e3.roa (raw, json) Hash identifier: UMDZByJSAuptD2oC3+m5vDwX4bYwvvLHEpUWSyj2Ivw= Subject key identifier: 3C:59:D4:CC:F5:3A:9B:61:D7:C8:F4:E7:8F:DF:41:71:48:44:4F:99 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858489076099A4A55A397CA364D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397227 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:09:9a:4a:55:a3:97:ca:36:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=9254f31c-b99d-4d77-94af-42fad0252651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:ad:c0:65:3d:c5:38:0b:97:3b:63:df:59: 0a:7a:f0:7e:ab:ae:d9:8e:4b:ea:d4:25:3d:e6:20: 73:26:52:2e:cd:b2:af:fc:92:cd:63:5f:6a:16:2e: 26:95:e1:cc:ef:a5:99:0e:7d:9c:04:f8:c4:ba:86: d2:f9:0c:a7:a8:14:11:65:57:d4:01:4a:e4:7b:b9: b4:5c:11:31:61:78:03:5f:b1:74:f2:c7:d1:5c:f8: c5:ba:3b:fa:ad:67:55:53:ef:3a:82:9a:d2:53:72: a8:b4:ce:65:8a:b9:86:03:e9:32:68:63:69:c0:72: 61:54:41:79:e9:92:0b:db:ab:f9:11:17:df:96:73: a1:a8:55:77:09:40:8e:0a:d2:07:66:a0:88:c7:ba: ce:70:fd:c2:05:fa:1c:fa:cc:58:ce:6f:78:d7:71: c0:ad:79:5d:a8:d9:8a:b6:50:79:77:05:a8:3d:fa: 56:ef:31:3c:46:8d:f5:b9:49:f4:87:73:cc:38:8b: 58:d6:49:60:32:d4:63:1c:2f:99:71:75:f7:04:11: c2:8d:b0:5c:17:e4:a0:d2:a5:aa:a4:f7:6e:a8:2d: 58:0c:d3:a1:3f:9e:66:64:36:88:79:06:33:04:26: b1:fe:ad:1e:ee:3e:76:e6:2a:b6:27:47:d5:b6:68: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:D4:CC:F5:3A:9B:61:D7:C8:F4:E7:8F:DF:41:71:48:44:4F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f0:39:dd:4b:72:d8:44:9b:d9:69:5f:7a:4c:eb:85:62:81: e9:44:1c:50:6d:1b:ae:b9:e1:f9:35:a6:36:49:e7:73:a6:68: 51:63:db:cb:ba:b1:36:1e:6f:b0:bc:fa:5f:1f:33:7f:28:f5: ef:cf:4a:2a:58:33:16:f1:39:a3:7a:46:6c:6f:97:7e:58:22: 55:2c:cf:6d:21:3d:c0:45:cc:3a:a8:06:48:74:48:90:36:40: 38:55:ac:2b:f3:79:48:26:70:cc:2b:e5:85:6f:bb:2e:43:41: 94:fe:1a:96:de:8d:75:23:88:e3:5e:da:43:bb:22:8e:cd:21: 23:b1:1a:44:23:57:47:c7:3e:15:f6:20:3d:6f:60:82:be:eb: 21:ef:21:e2:92:dc:3c:b0:9c:13:51:8d:34:3a:7c:7d:ac:db: 23:66:30:ce:18:af:a5:46:ad:d4:c7:9f:aa:5a:15:9f:c5:d0: 38:79:05:8d:5c:da:09:99:e2:a8:37:62:d1:2a:1a:63:57:84: ad:1d:27:6d:ae:0f:70:b2:b1:18:54:6d:23:98:38:fa:29:80: c7:4e:0a:f9:4f:5d:fc:ea:f8:93:0d:e5:9c:d5:bf:9e:53:43: 2a:bc:2e:ce:39:90:a9:64:7d:81:aa:e0:54:02:44:c4:79:71: 14:92:44:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgmaSlWjl8o2TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk OTI1NGYzMWMtYjk5ZC00ZDc3LTk0YWYtNDJmYWQwMjUyNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf2twGU9xTgLlztj31kKevB+q67Zjkvq1CU9 5iBzJlIuzbKv/JLNY19qFi4mleHM76WZDn2cBPjEuobS+QynqBQRZVfUAUrke7m0 XBExYXgDX7F08sfRXPjFujv6rWdVU+86gprSU3KotM5lirmGA+kyaGNpwHJhVEF5 6ZIL26v5ERfflnOhqFV3CUCOCtIHZqCIx7rOcP3CBfoc+sxYzm9413HArXldqNmK tlB5dwWoPfpW7zE8Ro31uUn0h3PMOItY1klgMtRjHC+ZcXX3BBHCjbBcF+Sg0qWq pPduqC1YDNOhP55mZDaIeQYzBCax/q0e7j525iq2J0fVtmjOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxZ1Mz1Opth18j054/fQXFIRE+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzIyODZkNjktNjM0OC0z NjBjLThmYTAtNTM3NjYyYTc3OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHwOd1LcthEm9lpX3pM64VigelEHFBtG6654fk1pjZJ53OmaFFj28u6 sTYeb7C8+l8fM38o9e/PSipYMxbxOaN6Rmxvl35YIlUsz20hPcBFzDqoBkh0SJA2 QDhVrCvzeUgmcMwr5YVvuy5DQZT+GpbejXUjiONe2kO7Io7NISOxGkQjV0fHPhX2 ID1vYIK+6yHvIeKS3DywnBNRjTQ6fH2s2yNmMM4Yr6VGrdTHn6paFZ/F0Dh5BY1c 2gmZ4qg3YtEqGmNXhK0dJ22uD3CysRhUbSOYOPopgMdOCvlPXfzq+JMN5ZzVv55T Qyq8Ls45kKlkfYGq4FQCRMR5cRSSREM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:33 2025 by rpki-client