$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f00e0585-db0c-3fa0-b869-caba09d2176f.roa File: f00e0585-db0c-3fa0-b869-caba09d2176f.roa (raw, json) Hash identifier: Q7big6fMQvx6tX8uYD4O6JCtwK/kiVaNHONCueRfi+g= Subject key identifier: CC:3C:B6:85:BC:F2:CA:1D:13:D6:DB:97:A3:19:B3:F0:DC:D9:CF:D7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964FAD5B7B61E70F419D8E Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f00e0585-db0c-3fa0-b869-caba09d2176f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397219 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4f:ad:5b:7b:61:e7:0f:41:9d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=cfc7f31b-8cd8-4794-a877-6106f3b303f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:db:5c:91:93:cd:0f:48:44:ad:5d:a8:59: 97:7d:c9:3f:59:0b:2a:34:ff:23:7d:e7:60:f7:fb: 47:0d:46:a9:9c:bf:b7:3e:d3:5f:fa:76:a3:1f:9d: 15:d1:96:9e:1c:55:01:9c:d1:17:19:95:c4:6a:ca: 37:65:d7:55:b2:5c:9c:39:bc:d9:48:2c:82:6f:f0: 26:05:3e:8b:2f:e2:0d:01:e5:15:b0:6f:20:07:56: 9e:c8:0a:bf:fe:9f:94:86:3f:7d:5f:ee:f7:ee:f4: 61:9d:ad:3b:e0:78:57:bd:b4:e7:84:92:44:f1:aa: e1:b4:97:2a:a3:49:cb:1a:9a:d0:1c:b4:d5:2f:36: d6:80:0a:a9:b2:dc:1d:ab:1e:6b:85:61:7b:d8:7f: 90:cd:84:f8:ee:b1:8f:eb:93:00:47:b2:f5:2b:ee: 66:8b:f8:58:68:7a:3d:61:31:1e:2f:10:3c:89:16: 96:b9:ae:fc:1b:41:fa:33:d4:0e:7c:6a:e0:69:da: 5a:4f:24:9e:da:66:ab:84:03:41:0f:7a:52:41:27: fa:7e:48:6f:01:9b:cd:dc:28:d9:a9:41:80:7c:76: b4:b6:e2:0b:9b:a5:fa:de:35:07:79:a1:d6:0c:0a: 51:18:1c:e7:d9:bf:20:c5:98:48:7d:fe:b1:a7:c2: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3C:B6:85:BC:F2:CA:1D:13:D6:DB:97:A3:19:B3:F0:DC:D9:CF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f00e0585-db0c-3fa0-b869-caba09d2176f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:46:08:70:0b:2d:1a:d6:26:79:52:98:c7:a6:85:93:4d:71: 11:4f:3a:1f:49:2a:29:7b:43:21:e1:d9:55:7a:af:4f:b9:d6: 57:e9:a1:97:5c:7d:ed:76:9d:45:30:cf:31:9d:f1:71:93:95: 35:74:11:72:2c:08:da:90:a3:c5:34:bf:38:17:9f:df:ed:6f: 4d:d6:9c:4b:d7:c4:6a:97:38:6d:bc:01:0d:07:1e:1e:68:e8: c2:bf:8c:5c:d0:04:1b:c2:29:a5:35:ba:c8:97:08:f4:8d:83: 75:a1:22:cd:fb:f1:7c:d1:e7:6f:9d:99:6b:d7:89:42:2b:87: e8:d9:04:cf:7d:c4:9e:0a:46:64:ed:eb:ef:cf:cf:a1:48:31: d7:60:d9:c1:43:27:ff:7b:f1:fb:08:3e:c5:4d:cf:e9:20:a1: 4b:e9:58:f2:68:58:23:9a:60:25:6a:1f:a9:4a:0c:4a:14:4f: db:5b:80:4f:bb:ee:23:12:26:c2:9d:02:c7:46:9a:d1:99:69: 1b:0a:51:89:86:6d:30:5b:9d:aa:26:9d:27:cb:d0:32:6d:4a: 0b:6b:3e:32:7e:13:db:ab:0c:4d:6f:a3:4d:b1:f2:b8:9b:3e: ec:1a:ec:cc:b7:c5:e3:50:17:35:f7:bc:a8:56:a8:75:7b:50: 0a:3d:29:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk+tW3th5w9BnY4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2ZjN2YzMWItOGNkOC00Nzk0LWE4NzctNjEwNmYzYjMwM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiTbXJGTzQ9IRK1dqFmXfck/WQsqNP8jfedg 9/tHDUapnL+3PtNf+najH50V0ZaeHFUBnNEXGZXEaso3ZddVslycObzZSCyCb/Am BT6LL+INAeUVsG8gB1aeyAq//p+Uhj99X+737vRhna074HhXvbTnhJJE8arhtJcq o0nLGprQHLTVLzbWgAqpstwdqx5rhWF72H+QzYT47rGP65MAR7L1K+5mi/hYaHo9 YTEeLxA8iRaWua78G0H6M9QOfGrgadpaTySe2marhANBD3pSQSf6fkhvAZvN3CjZ qUGAfHa0tuILm6X63jUHeaHWDApRGBzn2b8gxZhIff6xp8Lm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw8toW88sodE9bbl6MZs/Dc2c/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjAwZTA1ODUtZGIwYy0z ZmEwLWI4NjktY2FiYTA5ZDIxNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlGCHALLRrWJnlSmMemhZNNcRFPOh9JKil7QyHh2VV6r0+51lfpoZdc fe12nUUwzzGd8XGTlTV0EXIsCNqQo8U0vzgXn9/tb03WnEvXxGqXOG28AQ0HHh5o 6MK/jFzQBBvCKaU1usiXCPSNg3WhIs378XzR52+dmWvXiUIrh+jZBM99xJ4KRmTt 6+/Pz6FIMddg2cFDJ/978fsIPsVNz+kgoUvpWPJoWCOaYCVqH6lKDEoUT9tbgE+7 7iMSJsKdAsdGmtGZaRsKUYmGbTBbnaomnSfL0DJtSgtrPjJ+E9urDE1vo02x8rib Puwa7My3xeNQFzX3vKhWqHV7UAo9KTY= -----END CERTIFICATE-----Generated at Sun Apr 6 00:04:25 2025 by rpki-client