$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa File: c5a038e0-4366-341b-a33f-78fa9268b238.roa (raw, json) Hash identifier: 5HCIODydshxrLivkRTyTdw3h2IeyQ4FXhYLSv4fKdA0= Subject key identifier: 0B:6C:0C:56:43:41:CE:77:6A:6C:B4:B7:90:84:B5:F3:1E:82:B1:93 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B64253F4D40961D20B45D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397214 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:25:3f:4d:40:96:1d:20:b4:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=012ded26-f133-40d8-b82e-9504b5f46701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:c4:a9:02:34:94:74:a8:7b:ee:78:bd:a7: 75:15:5d:39:57:13:a5:2d:92:22:ed:09:e0:ff:c9: a2:3e:1f:a2:dd:b2:bc:b3:86:53:c6:f7:f4:fa:d3: 31:ae:f1:f3:d8:3b:ea:9d:03:b8:d5:bf:45:81:d4: db:5e:5f:5b:de:c7:a4:bb:7d:6b:54:2f:b2:a4:14: 3c:9d:3e:e7:6b:05:84:32:14:d2:b6:5e:68:eb:01: 78:4a:bb:cb:42:2a:91:f4:a9:f3:00:32:99:dd:ff: d1:7e:8f:be:da:06:02:cb:2d:d5:df:53:d8:b8:c2: 69:84:8b:c5:fb:00:28:28:5a:29:2b:c9:f5:d4:4f: 00:4b:8f:7d:0d:f6:ee:56:d0:93:0d:ca:a5:a5:97: 0a:79:ab:c3:3a:e0:10:9b:3e:13:e4:52:df:1c:bf: 55:1a:a0:eb:47:13:5e:a5:92:32:ae:fe:53:68:f3: 4b:ea:cc:40:7e:b7:b8:bc:73:9d:da:df:f6:de:14: 3c:9a:ad:b2:8c:42:c0:03:d1:47:93:94:84:92:1d: 74:7b:ab:05:53:ff:e5:a5:85:fd:f0:4c:1b:1a:b7: d8:ed:69:f9:0a:e7:49:14:42:d0:60:e6:55:c4:81: 3f:6c:d8:98:35:8d:27:af:a0:15:7a:2a:50:ed:3e: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6C:0C:56:43:41:CE:77:6A:6C:B4:B7:90:84:B5:F3:1E:82:B1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:71:ed:bf:b6:05:fb:7c:8e:ff:69:d3:9d:f0:02:e4:79:9e: aa:07:26:12:44:1c:92:58:6e:ea:c8:f6:5d:28:97:0a:a1:c6: 1d:6e:70:c5:92:e7:a2:71:a2:68:aa:ca:b2:82:6a:64:95:88: f5:dd:82:f0:9e:f4:24:c5:fe:b4:5e:d4:e1:af:d4:69:a5:9b: bf:d0:75:f6:43:33:7c:41:c6:dc:3d:8a:07:7f:36:53:af:16: 8a:25:9e:98:84:b0:e5:0d:ba:c7:bc:d4:12:1a:33:0e:40:1e: eb:9c:09:eb:b5:a0:29:d6:c0:9f:6e:5e:22:3c:9b:cc:ec:f7: c6:dc:79:c7:ce:c7:fc:f3:e3:52:1b:29:b9:eb:4d:1d:f9:0a: d8:a0:65:d4:48:a7:dd:31:1d:71:c7:4d:4d:1f:ac:cf:b5:aa: 56:4c:d7:8e:c8:a3:47:97:41:3d:4f:ed:5b:f5:3e:50:3c:39: 2d:b7:71:70:2b:32:34:fc:71:41:34:6a:8e:a8:f1:e9:d6:7c: d3:55:5f:df:f4:be:b8:e9:14:b9:f6:13:56:5c:4d:5a:fb:8a: 6d:b3:ae:4e:b9:89:1a:9c:cd:8b:ec:7d:e4:7f:8a:d8:2f:2a: 70:f0:76:fd:90:67:75:f8:02:92:af:b9:bb:31:dc:a8:4d:ab: 72:bc:a5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCU/TUCWHSC0XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDEyZGVkMjYtZjEzMy00MGQ4LWI4MmUtOTUwNGI1ZjQ2NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngXEqQI0lHSoe+54vad1FV05VxOlLZIi7Qng /8miPh+i3bK8s4ZTxvf0+tMxrvHz2DvqnQO41b9FgdTbXl9b3seku31rVC+ypBQ8 nT7nawWEMhTStl5o6wF4SrvLQiqR9KnzADKZ3f/Rfo++2gYCyy3V31PYuMJphIvF +wAoKFopK8n11E8AS499DfbuVtCTDcqlpZcKeavDOuAQmz4T5FLfHL9VGqDrRxNe pZIyrv5TaPNL6sxAfre4vHOd2t/23hQ8mq2yjELAA9FHk5SEkh10e6sFU//lpYX9 8EwbGrfY7Wn5CudJFELQYOZVxIE/bNiYNY0nr6AVeipQ7T6gGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtsDFZDQc53amy0t5CEtfMegrGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVhMDM4ZTAtNDM2Ni0z NDFiLWEzM2YtNzhmYTkyNjhiMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtx7b+2Bft8jv9p053wAuR5nqoHJhJEHJJYburI9l0olwqhxh1ucMWS 56JxomiqyrKCamSViPXdgvCe9CTF/rRe1OGv1Gmlm7/QdfZDM3xBxtw9igd/NlOv FoolnpiEsOUNuse81BIaMw5AHuucCeu1oCnWwJ9uXiI8m8zs98bcecfOx/zz41Ib KbnrTR35CtigZdRIp90xHXHHTU0frM+1qlZM147Io0eXQT1P7Vv1PlA8OS23cXAr MjT8cUE0ao6o8enWfNNVX9/0vrjpFLn2E1ZcTVr7im2zrk65iRqczYvsfeR/itgv KnDwdv2QZ3X4ApKvubsx3KhNq3K8pa4= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:40 2025 by rpki-client