$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa File: f3b1c337-d3d1-3299-a075-1393289e4d21.roa (raw, json) Hash identifier: jqKIEOx+/IvFZuOIHCzuokoWn5iYiII5YpQKniaGiL4= Subject key identifier: CF:C1:B7:F0:72:04:B9:46:43:47:56:5D:DA:30:7E:C8:EB:77:53:B5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210B3D75F01B898EC59680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397213 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0b:3d:75:f0:1b:89:8e:c5:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=43ed6661-4bd5-4797-8e6b-11257a515df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:68:12:d5:ac:94:59:c4:d3:23:95:19:ca:66: 6e:f2:64:94:33:61:cc:57:3c:95:da:b1:32:37:81: 97:af:ad:38:a0:f4:8e:ff:21:43:b5:a9:c0:14:c1: ce:7e:c9:9f:ac:68:36:5b:dd:09:16:c1:3b:a9:bf: 71:17:12:98:d7:72:96:fe:c0:0f:23:9a:77:63:df: ea:17:a7:d0:ce:9b:7a:13:1f:ab:0e:8b:04:99:ae: 81:48:7c:c5:99:55:4c:9d:67:ec:2d:64:25:d4:5b: af:ff:8c:35:34:bb:42:c2:ae:1f:35:9c:12:3e:cc: e0:3b:a0:c3:1f:84:47:85:96:a1:fb:9c:bb:38:ac: 64:c8:04:89:4a:ab:7d:72:80:0a:f7:41:99:82:45: be:da:11:88:5b:45:d4:79:1e:d0:02:0b:c8:f0:7e: 3a:c4:58:7f:01:fb:c8:9c:aa:f7:af:03:8b:40:ae: 0b:32:a6:b5:19:be:43:a1:70:f7:1c:d1:31:43:51: 69:c8:61:ee:d4:7a:1c:d6:2e:82:98:e3:ae:7c:58: 9f:14:9b:b2:de:83:2a:18:82:1c:69:63:61:c6:8d: 51:b3:a4:a4:08:b6:5e:17:b3:75:68:71:73:a3:22: 24:de:7e:53:9e:aa:aa:f3:f3:34:51:63:9d:e0:da: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:B7:F0:72:04:B9:46:43:47:56:5D:DA:30:7E:C8:EB:77:53:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3b1c337-d3d1-3299-a075-1393289e4d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7f:be:0a:90:53:88:0d:b5:ba:bb:c6:0b:36:82:bd:0b:87: 53:d7:ea:83:9f:65:19:d3:38:83:f1:1f:e2:55:65:e8:a4:6e: 3e:b0:03:b4:0f:29:ff:3a:c1:d7:92:4e:f2:dc:ee:b6:49:5f: 5e:15:3e:27:ae:fa:5a:10:39:c5:30:44:eb:0a:11:f5:63:a4: 1a:8b:4f:b5:0f:90:98:e4:0d:fc:81:1c:2a:87:da:b7:cb:28: 4e:c5:99:c5:03:77:8f:eb:4c:32:cc:bf:47:c3:42:16:98:45: 4e:5b:0f:29:46:28:a7:08:62:c6:95:57:f2:9a:45:29:64:35: b2:78:ca:57:68:d7:fb:d5:9a:09:fa:ef:ae:97:44:31:12:56: bf:28:0f:02:0a:f3:92:86:03:a3:98:bb:8a:bc:57:6a:25:8b: d4:e1:e5:74:9e:bf:5d:96:06:36:1d:42:29:9d:67:4f:45:87: ec:4c:c9:44:cd:9e:9c:9a:89:dd:81:13:9c:e8:0f:cd:cf:42: aa:47:9f:13:be:96:b0:9b:9b:bc:9d:ac:18:8d:f4:be:3f:4a: 6a:6a:83:b9:c4:24:ee:c5:a2:78:4f:b7:f4:ec:17:31:6b:c6: be:b7:4f:bb:51:e2:9f:99:af:23:60:51:6b:dd:c5:e6:68:72: 3f:7f:f3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQs9dfAbiY7FloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NDNlZDY2NjEtNGJkNS00Nzk3LThlNmItMTEyNTdhNTE1ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2gS1ayUWcTTI5UZymZu8mSUM2HMVzyV2rEy N4GXr604oPSO/yFDtanAFMHOfsmfrGg2W90JFsE7qb9xFxKY13KW/sAPI5p3Y9/q F6fQzpt6Ex+rDosEma6BSHzFmVVMnWfsLWQl1Fuv/4w1NLtCwq4fNZwSPszgO6DD H4RHhZah+5y7OKxkyASJSqt9coAK90GZgkW+2hGIW0XUeR7QAgvI8H46xFh/AfvI nKr3rwOLQK4LMqa1Gb5DoXD3HNExQ1FpyGHu1Hoc1i6CmOOufFifFJuy3oMqGIIc aWNhxo1Rs6SkCLZeF7N1aHFzoyIk3n5Tnqqq8/M0UWOd4NrkRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Bt/ByBLlGQ0dWXdowfsjrd1O1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjNiMWMzMzctZDNkMS0z Mjk5LWEwNzUtMTM5MzI4OWU0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt/vgqQU4gNtbq7xgs2gr0Lh1PX6oOfZRnTOIPxH+JVZeikbj6wA7QP Kf86wdeSTvLc7rZJX14VPieu+loQOcUwROsKEfVjpBqLT7UPkJjkDfyBHCqH2rfL KE7FmcUDd4/rTDLMv0fDQhaYRU5bDylGKKcIYsaVV/KaRSlkNbJ4yldo1/vVmgn6 766XRDESVr8oDwIK85KGA6OYu4q8V2oli9Th5XSev12WBjYdQimdZ09Fh+xMyUTN npyaid2BE5zoD83PQqpHnxO+lrCbm7ydrBiN9L4/Smpqg7nEJO7FonhPt/TsFzFr xr63T7tR4p+ZryNgUWvdxeZocj9/83o= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:45 2025 by rpki-client