$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa File: df6727da-fd25-3bc0-a428-19aa6a820332.roa (raw, json) Hash identifier: k21N1tdbXou1QkJNZEyiHUFZTztFIcc5pITDZtDJzi8= Subject key identifier: 42:E5:B5:53:D7:8A:8F:1A:72:0B:6A:13:54:6A:21:63:CB:ED:E0:9F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965EFD5276E542BEED4A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397242 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5e:fd:52:76:e5:42:be:ed:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=264fd9ce-9f43-49d2-8506-ac13bfbea563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:de:05:95:ed:6a:46:74:c8:f7:45:66:25: 62:1e:8c:d2:eb:dc:7d:0a:14:15:be:e6:c4:13:de: b3:14:c5:57:cf:f0:a3:16:9b:d1:f7:cf:ce:9a:56: 2b:cd:e9:00:89:7e:85:59:1c:a6:26:c0:9d:4a:c2: 25:cb:12:3e:f2:15:52:0c:13:d8:6e:8b:71:bd:fe: 16:81:da:d3:d7:07:3d:ef:a7:cd:f5:79:44:a9:d5: d5:f5:0b:e4:3b:20:83:54:fb:fb:bd:4e:d0:0e:da: ab:dd:77:9f:a5:07:f7:39:e7:5e:79:8b:18:6e:02: 3e:f3:a6:d2:92:ab:65:97:20:d9:21:7a:df:28:de: 0c:47:6f:84:fa:1a:0f:94:4d:99:32:39:07:3e:1e: de:ad:44:d6:94:41:32:8d:94:01:44:52:d9:88:eb: 8e:47:17:ff:81:17:80:ed:72:97:e4:b1:91:7b:cb: 71:d0:a4:01:89:9a:01:f5:ab:a7:23:9f:e0:35:15: 2f:6c:09:dd:d2:fd:82:5e:5a:5c:aa:85:4a:69:8e: 86:fa:b5:39:b2:be:17:98:42:a2:2d:90:ac:b4:a5: 41:0b:42:44:75:17:98:02:bc:79:61:3a:10:47:82: b6:60:f7:de:33:32:ac:5a:8d:fd:35:2d:96:3b:24: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E5:B5:53:D7:8A:8F:1A:72:0B:6A:13:54:6A:21:63:CB:ED:E0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c7:1b:3d:46:e3:10:51:a9:9b:aa:50:5b:4d:eb:b7:75:bb: c3:83:75:46:ee:18:8a:95:7a:b4:a3:0c:0e:8a:a3:1c:c6:b9: d5:03:87:45:a4:3c:f6:07:52:01:5a:08:94:f8:dc:e1:36:c5: bd:2a:7d:6a:33:83:45:96:48:6d:d2:69:25:6a:8f:31:4f:9d: dd:44:4f:8a:18:27:76:4a:fa:f5:2d:2f:26:22:7d:14:b3:2a: bc:bd:9c:da:c6:f6:da:85:6f:d8:77:ed:5c:a5:d2:9a:41:a2: 9e:37:6e:dc:ab:f4:af:01:c9:67:61:39:80:28:ce:4e:82:de: b6:c1:01:83:35:1d:46:ed:4c:29:c6:d8:04:c9:21:fb:68:dc: 26:cc:3d:ba:82:cd:9d:68:e3:37:95:3a:6d:67:e3:8f:33:63: b8:6e:d7:28:aa:e1:06:96:13:e2:dc:24:d0:0e:06:ce:dd:82: b4:ad:55:28:4f:f9:49:03:9c:64:bf:1b:91:36:5b:b3:e3:a8: 94:7b:48:6e:f7:c5:3f:8c:4c:24:a8:1e:7a:88:b8:ab:14:22: 72:b2:06:71:aa:66:d4:31:4f:74:42:58:12:ba:0a:82:a8:41: 40:15:05:10:9a:0f:65:6d:b5:d8:7b:46:1d:98:9a:2c:3d:39: 58:ce:3e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll79UnblQr7tSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjY0ZmQ5Y2UtOWY0My00OWQyLTg1MDYtYWMxM2JmYmVhNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz/eBZXtakZ0yPdFZiViHozS69x9ChQVvubE E96zFMVXz/CjFpvR98/OmlYrzekAiX6FWRymJsCdSsIlyxI+8hVSDBPYbotxvf4W gdrT1wc976fN9XlEqdXV9QvkOyCDVPv7vU7QDtqr3XefpQf3OedeeYsYbgI+86bS kqtllyDZIXrfKN4MR2+E+hoPlE2ZMjkHPh7erUTWlEEyjZQBRFLZiOuORxf/gReA 7XKX5LGRe8tx0KQBiZoB9aunI5/gNRUvbAnd0v2CXlpcqoVKaY6G+rU5sr4XmEKi LZCstKVBC0JEdReYArx5YToQR4K2YPfeMzKsWo39NS2WOyQyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELltVPXio8acgtqE1RqIWPL7eCfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY2NzI3ZGEtZmQyNS0z YmMwLWE0MjgtMTlhYTZhODIwMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnHGz1G4xBRqZuqUFtN67d1u8ODdUbuGIqVerSjDA6KoxzGudUDh0Wk PPYHUgFaCJT43OE2xb0qfWozg0WWSG3SaSVqjzFPnd1ET4oYJ3ZK+vUtLyYifRSz Kry9nNrG9tqFb9h37Vyl0ppBop43btyr9K8ByWdhOYAozk6C3rbBAYM1HUbtTCnG 2ATJIfto3CbMPbqCzZ1o4zeVOm1n448zY7hu1yiq4QaWE+LcJNAOBs7dgrStVShP +UkDnGS/G5E2W7PjqJR7SG73xT+MTCSoHnqIuKsUInKyBnGqZtQxT3RCWBK6CoKo QUAVBRCaD2Vttdh7Rh2Ymiw9OVjOPjk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:02 2025 by rpki-client