$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa File: d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa (raw, json) Hash identifier: ZyQffFM7BjG12QDyyaLHAay1p/XxzBREGnidKHrToP8= Subject key identifier: 5B:4D:1D:F8:DC:D3:B4:B9:AD:A6:F9:F5:60:C0:8A:1C:FC:83:F7:48 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E1FD90A2E1F27A42B780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397243 IP address blocks: 156.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e1:fd:90:a2:e1:f2:7a:42:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=cf1655c9-d23d-4775-a75c-71fff2fdfc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:c8:a1:7e:f6:0a:4a:bd:30:b9:3f:f3:36: c0:b3:46:c3:d3:76:85:ec:f9:fe:ba:83:74:cf:38: 39:93:95:fe:e3:d6:f6:63:70:95:a9:ce:d7:db:75: 16:96:b9:f6:94:ea:27:5c:4b:17:cc:10:46:ee:62: 5a:25:b7:23:65:04:d6:92:67:6c:8b:1f:91:fc:af: 48:21:4c:50:ab:65:0f:ca:4d:e8:3a:4e:1f:cd:7b: f1:44:72:f4:28:9b:36:60:f2:9a:ae:f6:ff:b1:98: 92:2f:b5:cf:6d:77:93:0f:ab:d7:1e:21:52:07:e4: e5:ab:10:49:f7:41:f1:94:ef:dd:18:c1:bb:92:99: 9f:f8:7c:ac:19:29:18:58:2c:60:5b:10:61:2a:0c: c0:e0:89:fa:60:44:19:eb:6b:26:1f:85:f6:8a:ea: d5:51:9b:33:20:ed:45:13:f4:32:c2:f7:41:ca:24: 0b:ee:46:db:f9:60:09:d1:57:eb:e8:e4:6a:f3:bb: 5b:7b:e9:28:f9:9d:a8:45:04:52:15:98:d2:3b:86: f4:1c:61:be:c1:95:7f:04:69:bd:1c:d0:2e:88:90: 6c:2c:a3:ba:1f:a0:26:f4:e4:a9:a1:da:70:8e:87: ec:e1:6b:f6:a6:0d:3f:02:e3:5a:06:04:05:1a:0c: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:1D:F8:DC:D3:B4:B9:AD:A6:F9:F5:60:C0:8A:1C:FC:83:F7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:88:56:73:62:1f:f8:01:c8:a4:8f:2a:a5:e2:1b:ca:f1:b9: e9:49:96:05:11:1c:ac:dd:3c:cd:d6:a3:19:4c:db:10:62:2b: 69:d9:3a:dc:87:8e:52:95:5e:a7:47:60:5a:59:0f:04:98:10: f0:99:75:af:7a:97:ba:f6:72:95:23:f5:55:77:7b:ba:7c:e7: 1e:f5:ee:25:ac:7f:65:8c:11:89:6c:c0:40:13:4e:ad:93:34: 4c:81:d7:1b:99:d3:2a:0e:a5:ee:b8:1d:de:01:24:61:ae:7e: 09:9f:eb:aa:c8:d9:0e:e6:2f:93:f8:90:a6:ca:8e:f9:0b:34: 93:46:c6:9b:7f:1a:0c:02:65:ce:5f:96:49:af:40:35:25:58: 98:3e:0e:f5:21:88:6c:b1:74:77:4b:9d:f9:b8:32:b5:96:e6: f9:e3:f0:77:ca:cc:cc:59:49:09:ae:5a:49:ad:fb:2e:43:66: f4:9f:b8:bc:6a:da:d9:fe:4b:e1:90:e8:f0:ee:fb:26:51:20: fb:b1:77:11:b0:de:80:eb:ea:79:c4:19:18:ad:09:03:16:09: b3:ab:2d:d4:5a:a5:32:a5:33:2d:18:b2:b3:37:de:42:58:c1: 25:cf:17:65:e2:7b:bf:c9:6a:6d:45:ad:84:14:fa:33:b0:45: 50:ef:e5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuH9kKLh8npCt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Y2YxNjU1YzktZDIzZC00Nzc1LWE3NWMtNzFmZmYyZmRmYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r/IoX72Ckq9MLk/8zbAs0bD03aF7Pn+uoN0 zzg5k5X+49b2Y3CVqc7X23UWlrn2lOonXEsXzBBG7mJaJbcjZQTWkmdsix+R/K9I IUxQq2UPyk3oOk4fzXvxRHL0KJs2YPKarvb/sZiSL7XPbXeTD6vXHiFSB+TlqxBJ 90HxlO/dGMG7kpmf+HysGSkYWCxgWxBhKgzA4In6YEQZ62smH4X2iurVUZszIO1F E/QywvdByiQL7kbb+WAJ0Vfr6ORq87tbe+ko+Z2oRQRSFZjSO4b0HGG+wZV/BGm9 HNAuiJBsLKO6H6Am9OSpodpwjofs4Wv2pg0/AuNaBgQFGgxOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtNHfjc07S5rab59WDAihz8g/dIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDlkZWVhYTktOGExZC0z YzAxLWI1YTItNTM0NzUzZTI2OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuIVnNiH/gByKSPKqXiG8rxuelJlgURHKzdPM3WoxlM2xBiK2nZOtyH jlKVXqdHYFpZDwSYEPCZda96l7r2cpUj9VV3e7p85x717iWsf2WMEYlswEATTq2T NEyB1xuZ0yoOpe64Hd4BJGGufgmf66rI2Q7mL5P4kKbKjvkLNJNGxpt/GgwCZc5f lkmvQDUlWJg+DvUhiGyxdHdLnfm4MrWW5vnj8HfKzMxZSQmuWkmt+y5DZvSfuLxq 2tn+S+GQ6PDu+yZRIPuxdxGw3oDr6nnEGRitCQMWCbOrLdRapTKlMy0YsrM33kJY wSXPF2Xie7/Jam1FrYQU+jOwRVDv5WI= -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:34 2025 by rpki-client