$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4f57ab4-ac95-31c0-9bc0-dab27483f311.roa File: c4f57ab4-ac95-31c0-9bc0-dab27483f311.roa (raw, json) Hash identifier: PmV5xy8RCPhmowccNyw+UgGaxalP1tL+KOz5jZsa4vE= Subject key identifier: 15:90:9D:9E:C5:E4:43:7B:35:08:4C:5A:17:7F:F6:75:44:97:38:74 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963F4DE2B44FE8B6FF3C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4f57ab4-ac95-31c0-9bc0-dab27483f311.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397213 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3f:4d:e2:b4:4f:e8:b6:ff:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d5fc2cac-efd5-478e-9ebc-6fad2b65cb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:88:0e:3c:05:31:9d:75:88:cf:2e:de:7a: af:f7:44:6e:01:24:30:eb:80:0e:b3:ba:80:32:08: c8:0c:5c:e4:52:31:a7:a5:3f:2e:75:89:75:c5:b3: 10:22:25:7b:f7:21:d6:5b:6b:75:a3:68:00:e2:02: 80:d2:9c:b8:b2:8e:a8:8f:3b:9d:6f:a8:34:78:57: e9:85:a0:e0:94:72:44:31:44:a2:9c:49:b6:ff:ba: 56:2e:b8:ee:bc:0c:e6:98:be:b3:57:95:02:4e:1e: 72:5e:3b:72:5b:77:be:f2:68:f2:24:55:8d:66:09: aa:1b:38:2a:f4:ce:c3:2d:1c:b2:1d:94:e8:26:95: 63:c7:5a:62:58:51:37:a1:d2:72:c6:08:b7:69:88: 66:f5:dd:d8:89:1d:71:74:d7:0b:f4:44:ab:50:73: 4d:6c:ba:2a:ce:f7:34:e7:86:ee:36:fe:98:82:0d: 7d:bb:15:0a:0e:6a:60:26:7e:07:66:42:59:a3:e3: c9:e0:9b:3e:d1:61:c6:9a:4f:f5:16:b1:f2:01:b3: ce:54:98:47:b4:15:15:84:4a:ac:67:d7:67:61:41: 2a:55:0b:9d:44:99:e8:50:79:7f:4d:a0:5d:66:76: 5f:f2:7f:38:04:41:9b:86:b2:cc:62:99:fa:3a:03: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:90:9D:9E:C5:E4:43:7B:35:08:4C:5A:17:7F:F6:75:44:97:38:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4f57ab4-ac95-31c0-9bc0-dab27483f311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c1:d7:e3:32:bf:f1:b3:28:40:ec:4d:48:6b:19:e2:44:e0: 15:b1:49:78:b2:76:4d:eb:4d:4b:dd:72:0e:69:cb:77:de:5a: 49:de:91:9e:81:c9:44:28:e0:91:e2:da:28:74:56:52:97:92: d9:8b:b3:dc:43:80:b0:64:58:9b:11:2c:e4:90:96:a9:d0:4c: 73:82:37:df:80:52:67:5a:6e:45:4b:aa:ee:8d:e1:ab:64:e6: f5:b4:8c:81:e5:cf:30:df:dd:4e:3d:b0:cf:12:5c:04:b7:d9: 2c:5a:23:4f:ed:47:18:62:33:9f:ed:c2:05:4f:14:e5:90:dc: 59:37:54:50:96:46:b4:91:09:ea:83:25:99:b8:71:9f:b0:f7: 62:40:69:3c:d0:7b:1c:ec:62:cf:29:28:f6:b4:25:51:51:6c: ac:f6:c1:9c:6c:fb:81:cf:83:84:ab:ae:8a:b0:93:a3:39:e8: 08:04:76:1f:bb:c9:dd:a1:0e:fe:0f:62:ac:7d:c0:bc:63:03: 27:76:a9:d5:aa:c7:30:fb:2a:9a:fc:3e:f8:8e:0f:54:dd:65: a9:7b:e8:1c:b3:af:cd:2b:08:54:b5:7b:9e:f3:09:bd:90:ec: cd:1c:e4:87:92:9a:8c:3a:cc:c2:50:48:61:d4:72:a1:87:56: c0:f8:d3:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj9N4rRP6Lb/PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDVmYzJjYWMtZWZkNS00NzhlLTllYmMtNmZhZDJiNjVjYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0uIDjwFMZ11iM8u3nqv90RuASQw64AOs7qA MgjIDFzkUjGnpT8udYl1xbMQIiV79yHWW2t1o2gA4gKA0py4so6ojzudb6g0eFfp haDglHJEMUSinEm2/7pWLrjuvAzmmL6zV5UCTh5yXjtyW3e+8mjyJFWNZgmqGzgq 9M7DLRyyHZToJpVjx1piWFE3odJyxgi3aYhm9d3YiR1xdNcL9ESrUHNNbLoqzvc0 54buNv6Ygg19uxUKDmpgJn4HZkJZo+PJ4Js+0WHGmk/1FrHyAbPOVJhHtBUVhEqs Z9dnYUEqVQudRJnoUHl/TaBdZnZf8n84BEGbhrLMYpn6OgOOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWQnZ7F5EN7NQhMWhd/9nVElzh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzRmNTdhYjQtYWM5NS0z MWMwLTliYzAtZGFiMjc0ODNmMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLB1+Myv/GzKEDsTUhrGeJE4BWxSXiydk3rTUvdcg5py3feWknekZ6B yUQo4JHi2ih0VlKXktmLs9xDgLBkWJsRLOSQlqnQTHOCN9+AUmdabkVLqu6N4atk 5vW0jIHlzzDf3U49sM8SXAS32SxaI0/tRxhiM5/twgVPFOWQ3Fk3VFCWRrSRCeqD JZm4cZ+w92JAaTzQexzsYs8pKPa0JVFRbKz2wZxs+4HPg4Srroqwk6M56AgEdh+7 yd2hDv4PYqx9wLxjAyd2qdWqxzD7Kpr8PviOD1TdZal76Byzr80rCFS1e57zCb2Q 7M0c5IeSmow6zMJQSGHUcqGHVsD406A= -----END CERTIFICATE-----Generated at Mon Apr 7 13:10:55 2025 by rpki-client