$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df07f6a4-5955-3080-a83c-a7bd39df8f57.roa File: df07f6a4-5955-3080-a83c-a7bd39df8f57.roa (raw, json) Hash identifier: tHNfNL3cL6edSkfySv89row0BleQDivgffHr66Xn0oo= Subject key identifier: 8C:55:7E:4F:BB:FD:65:43:09:53:CD:1F:FF:F5:42:27:09:38:D6:B1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584940397714B2563296C5A08980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df07f6a4-5955-3080-a83c-a7bd39df8f57.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 397216 IP address blocks: 156.154.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:77:14:b2:56:32:96:c5:a0:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=10210d8a-0a56-40e5-abbd-77d97b7fc694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:27:29:95:30:8f:4e:42:fc:59:af:b2:9d: b5:21:df:db:a1:7f:14:e0:c2:b5:48:90:55:0a:d6: bd:e4:a2:02:85:40:46:cf:10:50:bc:d2:1f:26:f5: 91:e2:e8:f8:43:03:b5:64:c3:bf:c0:99:17:91:35: e5:0f:c4:e8:58:3a:f3:9c:ac:2a:10:e5:c6:dc:89: 43:68:5d:dd:a2:18:38:c4:55:d8:d8:c1:bf:df:cd: 17:80:62:e0:44:4a:40:23:8f:ff:a7:b4:d8:24:46: ca:4f:59:f9:65:cf:a9:c7:b3:5a:6c:4c:fb:9c:66: ee:f4:da:6a:a3:6b:da:f8:d9:bb:ee:6a:3c:d9:d1: b2:de:6e:2b:1c:f7:3a:7f:d5:16:3f:37:45:85:2d: ff:dd:59:61:88:e2:a1:00:e4:a5:d7:2d:04:5d:29: a1:b7:cf:e3:49:8c:28:f9:d1:af:f0:16:25:0f:4c: 49:e7:66:03:47:5d:52:28:b4:de:bc:68:0e:5b:c5: ea:c5:c1:b6:9b:f8:bc:3f:18:32:f4:df:a3:6b:c4: 03:1d:82:32:e1:f9:21:33:a5:4f:ae:08:b9:e1:66: 00:ef:e9:ec:98:4f:8c:0b:ff:91:2b:ab:d2:57:58: d1:3a:70:e2:74:15:84:ff:02:1f:da:68:75:82:24: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:55:7E:4F:BB:FD:65:43:09:53:CD:1F:FF:F5:42:27:09:38:D6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df07f6a4-5955-3080-a83c-a7bd39df8f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f5:2e:ad:d4:7e:16:a1:52:6f:63:81:bd:7d:a7:a4:60:d8: 1c:ca:bb:b7:d3:4d:5e:e2:b8:70:3e:73:92:02:00:ae:ba:05: bd:93:f9:f8:06:c0:8c:7c:11:a9:86:33:c2:a3:12:13:bb:df: 1d:2c:8a:12:a1:3e:ad:44:e1:c1:d3:06:43:57:a4:80:41:b0: 53:e4:a7:e7:5c:cc:fa:9c:91:5e:99:60:6e:d6:9c:ec:20:85: 1b:31:53:e1:0b:68:2c:4c:14:dd:4a:b0:ad:a9:5e:b7:d6:f3: 8f:0c:92:e6:9b:3d:d5:36:9f:76:f0:71:97:46:43:4c:32:09: ab:63:f4:35:32:02:a1:08:8f:a5:81:4f:91:59:dd:c5:5b:fa: d9:3e:a6:1e:ea:00:57:6e:a7:98:bf:1c:67:c3:1d:b3:5a:c0: 91:b5:f7:7c:cf:59:56:5e:f3:2e:ec:5a:54:47:29:06:9d:3e: d3:c2:49:53:1b:a4:ae:cf:82:70:e2:24:cd:f3:94:55:77:53: 25:53:67:ba:9f:39:14:bf:7b:cc:70:a9:c1:15:15:16:24:61: 88:28:ce:dc:16:35:c3:15:a6:9d:72:c8:9c:a9:88:f9:94:26: 25:04:89:3c:24:24:4e:21:9b:da:e5:9c:61:03:7b:9f:a2:d6: 82:86:0c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXcUslYylsWgiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MTAyMTBkOGEtMGE1Ni00MGU1LWFiYmQtNzdkOTdiN2ZjNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKMnKZUwj05C/Fmvsp21Id/boX8U4MK1SJBV Cta95KIChUBGzxBQvNIfJvWR4uj4QwO1ZMO/wJkXkTXlD8ToWDrznKwqEOXG3IlD aF3dohg4xFXY2MG/380XgGLgREpAI4//p7TYJEbKT1n5Zc+px7NabEz7nGbu9Npq o2va+Nm77mo82dGy3m4rHPc6f9UWPzdFhS3/3VlhiOKhAOSl1y0EXSmht8/jSYwo +dGv8BYlD0xJ52YDR11SKLTevGgOW8XqxcG2m/i8Pxgy9N+ja8QDHYIy4fkhM6VP rgi54WYA7+nsmE+MC/+RK6vSV1jROnDidBWE/wIf2mh1giRbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxVfk+7/WVDCVPNH//1QicJONaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGYwN2Y2YTQtNTk1NS0z MDgwLWE4M2MtYTdiZDM5ZGY4ZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf1Lq3UfhahUm9jgb19p6Rg2BzKu7fTTV7iuHA+c5ICAK66Bb2T+fgG wIx8EamGM8KjEhO73x0sihKhPq1E4cHTBkNXpIBBsFPkp+dczPqckV6ZYG7WnOwg hRsxU+ELaCxMFN1KsK2pXrfW848MkuabPdU2n3bwcZdGQ0wyCatj9DUyAqEIj6WB T5FZ3cVb+tk+ph7qAFdup5i/HGfDHbNawJG193zPWVZe8y7sWlRHKQadPtPCSVMb pK7PgnDiJM3zlFV3UyVTZ7qfORS/e8xwqcEVFRYkYYgoztwWNcMVpp1yyJypiPmU JiUEiTwkJE4hm9rlnGEDe5+i1oKGDOs= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:45 2025 by rpki-client