$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa File: d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa (raw, json) Hash identifier: x1qw+OczHG6E4W9/K1NRrRNuXx2ty8JcDjfpCz3V/tQ= Subject key identifier: DB:ED:B0:16:77:1C:7C:9E:2D:7B:78:BF:40:6A:B2:66:0C:F6:EA:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963F95EF35077EFEB66C48 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397218 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3f:95:ef:35:07:7e:fe:b6:6c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=24795a04-bd4d-44bb-ba34-9d81714d947b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:7b:06:22:20:82:2a:a0:c8:aa:37:d9:79: 2d:91:05:54:4e:24:a0:02:82:7c:f0:8d:55:d3:ec: 6e:f9:a0:0b:7b:1a:ee:dd:c8:2d:15:f2:ca:e3:07: f1:43:de:f7:c6:d8:a9:f8:6c:55:74:25:4f:50:6b: 13:9f:70:42:37:8c:52:b7:40:f9:1a:f8:e7:86:85: f0:45:ac:62:98:0b:55:6a:3c:9f:9f:cb:06:0b:7b: 0c:0c:4c:8c:78:da:c7:6c:c5:85:b0:d4:56:3c:f1: cb:8d:89:69:70:34:2f:31:3f:4e:f8:9b:14:91:ff: e5:36:e7:0f:02:62:39:9b:a1:ef:2a:43:f1:95:da: 28:f7:ad:a2:11:32:1c:71:eb:e5:8d:97:4a:83:20: a4:5a:a9:a6:af:89:49:60:56:14:28:ab:35:43:72: 77:ce:73:6b:6e:de:e3:d0:06:ee:0b:8c:ce:90:2c: 10:e9:0d:7c:89:a8:cb:7f:59:f4:27:2a:22:e2:65: d0:5b:06:b9:6d:c8:22:8f:38:20:83:39:c9:10:42: 67:51:4e:db:24:da:d5:50:d6:32:2c:be:89:54:0a: 5a:ec:20:68:da:8c:37:84:06:d5:04:37:97:a3:16: 23:be:6e:62:da:77:26:15:69:a9:3f:ea:0b:fc:58: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:ED:B0:16:77:1C:7C:9E:2D:7B:78:BF:40:6A:B2:66:0C:F6:EA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e1:f7:d8:38:3f:d0:da:c3:1a:03:ae:66:0c:94:e6:81:03: 63:45:39:bd:74:92:3e:d7:26:5e:a0:a4:ad:96:95:50:9a:19: 3e:d0:48:30:32:5f:34:06:8d:6e:b1:7b:1f:04:01:4b:d9:d4: 37:ed:af:86:8a:56:6d:57:e4:c1:39:3d:8e:9b:5e:12:b5:fd: 2a:37:79:80:e7:de:03:0f:6e:9d:29:bf:cb:07:9d:20:00:01: 5b:b2:35:00:0e:46:52:dd:3d:75:15:be:98:81:aa:5d:49:75: 9e:f2:bd:12:80:8a:36:27:6b:75:b7:ce:71:a2:2b:fa:a9:51: 47:24:25:85:cc:f3:b0:93:70:a8:e6:bf:20:be:25:ab:58:c2: 58:5f:7c:5d:22:22:02:4a:f5:e0:03:2f:80:a7:16:85:e8:ec: 9b:b8:53:4c:df:6e:5a:0c:77:f7:7b:e0:cf:84:93:d1:5e:b5: 2f:b8:a8:43:1b:da:f8:7d:42:12:cc:54:e8:10:85:f9:4c:3a: 5a:4f:ab:9e:92:4b:e0:3e:35:ad:3b:b1:88:17:58:62:29:39: 9c:f2:70:40:0b:e3:6e:1c:67:e6:aa:06:77:8c:d6:b6:33:8a: f7:d0:34:69:5f:0f:6f:4a:48:f7:47:07:56:47:a9:3f:1e:98: 85:bd:6a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj+V7zUHfv62bEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQ3OTVhMDQtYmQ0ZC00NGJiLWJhMzQtOWQ4MTcxNGQ5NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1l7BiIggiqgyKo32XktkQVUTiSgAoJ88I1V 0+xu+aALexru3cgtFfLK4wfxQ973xtip+GxVdCVPUGsTn3BCN4xSt0D5GvjnhoXw RaximAtVajyfn8sGC3sMDEyMeNrHbMWFsNRWPPHLjYlpcDQvMT9O+JsUkf/lNucP AmI5m6HvKkPxldoo962iETIccevljZdKgyCkWqmmr4lJYFYUKKs1Q3J3znNrbt7j 0AbuC4zOkCwQ6Q18iajLf1n0Jyoi4mXQWwa5bcgijzgggznJEEJnUU7bJNrVUNYy LL6JVApa7CBo2ow3hAbVBDeXoxYjvm5i2ncmFWmpP+oL/FhzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvtsBZ3HHyeLXt4v0BqsmYM9uoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRjZGE5ZDctNzlmNS0z Nzg4LWE4YmUtNTBkM2RkZTljMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfh99g4P9DawxoDrmYMlOaBA2NFOb10kj7XJl6gpK2WlVCaGT7QSDAy XzQGjW6xex8EAUvZ1Dftr4aKVm1X5ME5PY6bXhK1/So3eYDn3gMPbp0pv8sHnSAA AVuyNQAORlLdPXUVvpiBql1JdZ7yvRKAijYna3W3znGiK/qpUUckJYXM87CTcKjm vyC+JatYwlhffF0iIgJK9eADL4CnFoXo7Ju4U0zfbloMd/d74M+Ek9FetS+4qEMb 2vh9QhLMVOgQhflMOlpPq56SS+A+Na07sYgXWGIpOZzycEAL424cZ+aqBneM1rYz ivfQNGlfD29KSPdHB1ZHqT8emIW9ago= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:53 2025 by rpki-client