$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa File: ea85d689-f412-3ca9-8467-a0a4c846db6e.roa (raw, json) Hash identifier: K5enZaOMHqSrqkwcHQx09FiEEWEvnSXeZlBL2hw7WUg= Subject key identifier: 49:00:8C:E8:E5:C4:72:E8:D3:34:A5:2F:11:7E:97:26:9B:7B:CD:58 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2106DFA8CF9A0F11900A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:06:df:a8:cf:9a:0f:11:90:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=670cd932-0b1a-4c62-b8f9-dff558888609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:a9:ea:8d:ce:12:e3:6e:08:5a:16:bd:03: f6:09:bd:4f:9a:2d:e2:c3:25:a7:02:25:18:6b:68: e7:c6:4f:c1:29:9c:1d:48:f5:8b:75:80:3f:b4:fc: 07:2e:b4:64:e0:2f:57:0e:26:3b:6f:f1:e1:0b:47: 6c:02:4c:ad:bb:45:f2:71:c2:a4:df:84:34:55:8e: 02:88:aa:c1:69:c3:4b:dc:b5:36:8e:8c:cf:57:53: ea:6b:bc:fa:06:03:85:87:c1:96:1d:be:1a:14:56: 97:31:ee:2d:91:c5:91:5b:7e:39:e6:bc:09:99:57: 47:31:e3:9e:68:8c:39:1a:82:e1:0f:46:d1:1f:ce: 88:05:36:28:2d:a3:48:1c:67:ed:2a:ee:31:66:d1: 9e:16:c0:fa:88:23:49:13:8e:1b:61:0f:27:02:16: 87:7c:e4:c7:fc:80:7a:88:4f:06:7e:c7:38:49:44: 4d:0d:42:16:42:7a:ff:5b:c3:2e:c1:a9:80:58:7e: 09:43:a6:50:82:0d:f3:8a:81:cf:78:58:62:19:11: 2d:86:60:3b:ba:c9:87:75:89:8c:af:36:bb:ab:ec: 51:7e:fa:68:e2:ef:0f:a5:d7:4a:ec:df:c8:e7:a8: 19:95:e7:78:70:a6:1c:75:b4:9d:0a:05:3c:0f:f5: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:8C:E8:E5:C4:72:E8:D3:34:A5:2F:11:7E:97:26:9B:7B:CD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9a:1d:30:d9:36:81:14:9c:d2:b5:3e:1d:82:df:3e:56:70: 75:27:f6:b3:14:42:32:86:2d:33:7f:eb:7c:7f:27:8d:d5:b0: 62:54:e2:07:ab:15:3a:02:12:81:f1:c1:12:f1:f4:f8:e9:bf: bc:29:ef:5c:5c:8f:d4:a7:e3:35:a0:20:05:66:79:a2:51:68: 18:8b:f7:7c:37:c6:65:ae:c1:76:18:0d:40:20:a7:d2:32:83: 0b:81:b6:d9:8c:65:80:6e:2f:f2:3d:7d:73:19:bc:81:e8:ec: 3d:d7:a5:07:8c:e9:00:14:80:36:37:62:6b:22:7d:2a:da:b3: 36:d7:f2:b5:0e:a9:5c:4d:21:10:98:1b:61:47:b8:9c:34:12: 92:2b:6f:17:5e:33:1c:04:76:27:f8:62:68:c6:d0:23:16:b1: 11:7e:c1:33:23:b4:a6:46:76:78:3a:26:73:01:81:70:de:ab: c6:fc:28:a3:b4:91:a4:82:a1:a6:9e:0c:cd:2b:44:c3:8f:60: df:68:c6:99:6f:11:bd:42:3b:26:bc:1d:e8:bf:31:0c:24:51: 74:68:d8:d2:f8:7e:2d:46:94:7c:14:a7:fe:c7:27:71:4c:0a: ab:9b:6a:2d:b3:55:7e:fa:88:c4:e3:bb:d8:6f:8d:c1:dd:7a: a4:d2:fe:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQbfqM+aDxGQCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NjcwY2Q5MzItMGIxYS00YzYyLWI4ZjktZGZmNTU4ODg4NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir+p6o3OEuNuCFoWvQP2Cb1Pmi3iwyWnAiUY a2jnxk/BKZwdSPWLdYA/tPwHLrRk4C9XDiY7b/HhC0dsAkytu0XyccKk34Q0VY4C iKrBacNL3LU2jozPV1Pqa7z6BgOFh8GWHb4aFFaXMe4tkcWRW3455rwJmVdHMeOe aIw5GoLhD0bRH86IBTYoLaNIHGftKu4xZtGeFsD6iCNJE44bYQ8nAhaHfOTH/IB6 iE8Gfsc4SURNDUIWQnr/W8MuwamAWH4JQ6ZQgg3zioHPeFhiGREthmA7usmHdYmM rza7q+xRfvpo4u8PpddK7N/I56gZled4cKYcdbSdCgU8D/X5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkAjOjlxHLo0zSlLxF+lyabe81YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWE4NWQ2ODktZjQxMi0z Y2E5LTg0NjctYTBhNGM4NDZkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyaHTDZNoEUnNK1Ph2C3z5WcHUn9rMUQjKGLTN/63x/J43VsGJU4ger FToCEoHxwRLx9Pjpv7wp71xcj9Sn4zWgIAVmeaJRaBiL93w3xmWuwXYYDUAgp9Iy gwuBttmMZYBuL/I9fXMZvIHo7D3XpQeM6QAUgDY3YmsifSraszbX8rUOqVxNIRCY G2FHuJw0EpIrbxdeMxwEdif4YmjG0CMWsRF+wTMjtKZGdng6JnMBgXDeq8b8KKO0 kaSCoaaeDM0rRMOPYN9oxplvEb1COya8Hei/MQwkUXRo2NL4fi1GlHwUp/7HJ3FM Cqubai2zVX76iMTju9hvjcHdeqTS/uA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:30:20 2025 by rpki-client