$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f20ea8aa-9288-341e-b30b-21b4f02a8b2a.roa File: f20ea8aa-9288-341e-b30b-21b4f02a8b2a.roa (raw, json) Hash identifier: NSgdyfVMmXH92UlzTVQ5rC5uFBi6jPK5llRivmyYYWI= Subject key identifier: 95:7B:6E:C5:DD:DB:DD:95:00:2C:2F:01:1D:0D:03:E0:34:15:46:85 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210D632564C7DA513CBD00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f20ea8aa-9288-341e-b30b-21b4f02a8b2a.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397219 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0d:63:25:64:c7:da:51:3c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=0f52c5b6-94a6-4ffb-aab7-dc94d0a78751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:ef:30:5b:69:7f:b6:7e:88:e8:e0:0e:48: 7a:f6:11:71:85:a9:51:38:44:1c:96:a0:46:22:c7: 46:01:aa:b3:4a:19:c9:42:21:77:f7:56:f6:d1:55: 35:e1:37:6b:f9:45:37:79:1b:73:a7:5a:f7:86:66: b2:85:b5:6f:31:a4:b0:68:d2:b9:e2:d6:1e:77:c3: 13:04:80:94:d5:66:11:b7:c0:de:7d:ec:db:b5:98: 38:3c:01:c6:df:44:7d:71:81:cb:02:f1:1d:94:e4: 81:9f:d8:d6:07:a7:59:be:cf:b5:0d:92:9e:b6:36: ba:ac:86:7c:ad:b5:5e:c2:88:8e:bb:93:6a:da:b4: 41:3d:fa:c0:90:8b:24:1e:3c:dd:3e:c6:24:c0:8c: 06:c3:3e:2f:83:ca:48:41:f4:5c:ec:15:ae:8e:1a: e6:47:fa:a3:53:a7:ee:11:0e:73:fc:5b:d0:e9:1b: 7d:60:8d:11:27:0a:0c:1c:53:0d:4f:bf:b2:54:f0: 04:00:bf:57:ed:9e:11:40:be:2a:9d:49:24:4d:c8: f1:8f:27:ba:33:02:27:3e:0e:37:c4:a6:a9:eb:29: dd:85:ae:38:e0:09:6b:30:5c:17:bc:cf:f7:e2:c3: 2f:3b:ba:a5:cf:7d:f6:a8:f6:c6:aa:d6:8c:3e:fd: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:6E:C5:DD:DB:DD:95:00:2C:2F:01:1D:0D:03:E0:34:15:46:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f20ea8aa-9288-341e-b30b-21b4f02a8b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f3:95:23:57:e4:36:e2:fd:34:31:28:cc:f8:23:6d:43:c1: 69:cd:40:33:e7:4e:fb:6f:95:1d:82:b1:bc:30:bb:2b:3a:fb: 08:30:ed:40:62:1a:d7:e7:82:ca:0e:c8:83:fc:2d:5c:cd:6b: 0b:a0:c8:4f:f2:88:c0:6b:79:0b:28:1d:0b:1a:2b:37:60:26: 00:b4:ff:b4:07:5f:bc:94:87:53:70:ae:bd:2c:2c:c3:05:45: 29:70:75:6f:0b:4e:dd:17:bb:b6:5e:c7:d9:60:5f:74:25:a1: c4:ac:2a:0c:8e:14:e9:d5:6d:49:11:e7:fb:c3:50:f9:0b:eb: b1:0f:58:c3:9b:20:e1:91:70:5e:25:68:a0:53:17:78:c6:ed: 94:02:cc:e9:83:6a:81:b1:7c:c3:30:7e:a5:7b:d2:68:f7:70: 72:51:07:16:75:d7:bf:53:42:4f:e6:43:0c:4f:b5:8d:a5:a0: be:2c:a2:4c:4c:b5:89:c5:69:17:cb:73:d3:d9:5c:74:2f:d7: 37:e1:f9:bd:aa:fb:a4:cf:1c:df:58:d2:16:51:a2:4d:4e:36: bd:c4:a7:ee:66:03:20:78:2c:f0:6b:3d:06:48:09:70:9c:bc: 16:5b:fd:c4:f1:72:9e:31:4c:66:95:99:b9:11:52:42:07:25: 53:8e:f8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ1jJWTH2lE8vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MGY1MmM1YjYtOTRhNi00ZmZiLWFhYjctZGM5NGQwYTc4NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqPvMFtpf7Z+iOjgDkh69hFxhalROEQclqBG IsdGAaqzShnJQiF391b20VU14Tdr+UU3eRtzp1r3hmayhbVvMaSwaNK54tYed8MT BICU1WYRt8DefezbtZg4PAHG30R9cYHLAvEdlOSBn9jWB6dZvs+1DZKetja6rIZ8 rbVewoiOu5Nq2rRBPfrAkIskHjzdPsYkwIwGwz4vg8pIQfRc7BWujhrmR/qjU6fu EQ5z/FvQ6Rt9YI0RJwoMHFMNT7+yVPAEAL9X7Z4RQL4qnUkkTcjxjye6MwInPg43 xKap6yndha444AlrMFwXvM/34sMvO7qlz332qPbGqtaMPv32EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV7bsXd292VACwvAR0NA+A0FUaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjIwZWE4YWEtOTI4OC0z NDFlLWIzMGItMjFiNGYwMmE4YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzzlSNX5Dbi/TQxKMz4I21DwWnNQDPnTvtvlR2Csbwwuys6+wgw7UBi GtfngsoOyIP8LVzNawugyE/yiMBreQsoHQsaKzdgJgC0/7QHX7yUh1Nwrr0sLMMF RSlwdW8LTt0Xu7Zex9lgX3QlocSsKgyOFOnVbUkR5/vDUPkL67EPWMObIOGRcF4l aKBTF3jG7ZQCzOmDaoGxfMMwfqV70mj3cHJRBxZ1179TQk/mQwxPtY2loL4sokxM tYnFaRfLc9PZXHQv1zfh+b2q+6TPHN9Y0hZRok1ONr3Ep+5mAyB4LPBrPQZICXCc vBZb/cTxcp4xTGaVmbkRUkIHJVOO+CE= -----END CERTIFICATE-----Generated at Sun Apr 6 07:39:25 2025 by rpki-client