$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f74e7813-2eb4-3696-aea9-d2d7a75a80f1.roa File: f74e7813-2eb4-3696-aea9-d2d7a75a80f1.roa (raw, json) Hash identifier: bsjRyzpg0PBEyrMJBYnlzOo1lCmcLU9ZIbwptCOSvU8= Subject key identifier: 86:B7:A1:D7:C2:C3:5D:52:5E:5B:00:50:5D:52:83:65:10:CB:E2:3F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965B4D872CE8F45C229780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f74e7813-2eb4-3696-aea9-d2d7a75a80f1.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397229 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5b:4d:87:2c:e8:f4:5c:22:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=2caf81c0-7676-400d-882d-898b06f51428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:9e:11:85:d8:6a:7d:7d:86:a6:ed:c2:bb: 64:cf:1a:0f:48:f3:29:3d:d4:3b:01:b8:df:e5:5f: a5:41:ed:ff:23:d5:ab:38:79:a9:8b:45:88:f3:23: 5b:e4:da:ed:7a:66:cd:56:4b:68:77:94:2a:41:b2: 84:46:f0:55:9f:53:9d:4a:26:aa:5f:1a:e1:bb:09: 38:b0:17:41:8a:7d:0c:af:05:6f:31:08:1b:d4:81: 3a:3c:70:d5:81:07:7a:93:d0:95:0c:1e:5a:cb:85: 79:cf:45:1d:58:b8:1e:8d:b2:5d:fe:2b:1c:82:f0: fa:6b:57:ad:3d:dd:be:49:c0:62:06:91:27:74:fa: fa:2d:69:e2:68:ef:1a:b2:30:ba:ce:f4:90:10:d0: a5:91:4a:f5:51:67:49:d4:d7:04:66:91:34:01:ef: 15:42:94:57:aa:75:0d:bb:1d:51:ad:dd:6e:57:bf: 87:7c:ca:da:2b:85:8a:c7:e6:58:6b:64:e5:be:54: 94:4a:58:bd:c4:4f:b7:f1:c5:34:8a:37:90:88:91: 2e:92:37:41:05:27:f3:c1:5e:0b:86:4e:f4:61:43: bd:c2:30:42:ad:66:ab:de:07:05:b2:bf:0c:64:a1: 30:52:95:90:bd:ec:ad:b1:01:e4:83:01:46:e9:e6: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:A1:D7:C2:C3:5D:52:5E:5B:00:50:5D:52:83:65:10:CB:E2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f74e7813-2eb4-3696-aea9-d2d7a75a80f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:bd:a7:f7:20:49:8f:3f:21:93:61:53:a2:e3:fc:ae:02:a4: 39:d6:41:22:c1:eb:9b:ec:8e:e7:1a:2d:f6:c2:2e:07:2f:10: e8:02:73:2a:40:18:34:1e:8d:56:43:a5:73:e8:e2:d6:cb:ed: 50:a2:44:c3:10:35:8a:c2:d1:b6:b1:c6:7e:63:02:c6:77:3a: e7:3f:21:c5:92:cc:b3:6b:80:20:80:d3:11:a7:52:3c:fc:4f: b9:c6:28:16:10:f7:be:7b:c2:ac:64:b1:60:a8:f1:aa:ba:6d: cc:54:c0:2b:48:fe:92:81:62:36:62:75:61:9d:ca:cf:0e:4f: 0d:a3:f8:57:36:93:e0:3c:f4:03:c6:e1:a1:d5:e0:3c:cb:9a: 2f:f4:35:db:bd:00:bf:82:c9:81:1d:a1:26:b3:25:5f:1e:b8: 28:0a:82:85:f7:a4:45:04:d1:28:6e:d1:cd:ec:0e:1a:33:1e: 4d:f0:2c:e0:b1:0a:13:ce:4a:ad:11:b6:2e:8c:21:05:4c:1c: 81:23:ff:be:88:82:b8:0e:95:5c:dd:2b:37:38:ca:3b:9d:3d: ed:9a:00:b8:7d:24:cc:97:ce:36:25:e4:08:eb:a5:98:90:0b: 49:f5:d8:a0:35:6d:ce:77:06:58:88:05:ab:f6:a7:93:c2:3f: 46:9a:cc:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplltNhyzo9Fwil4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmNhZjgxYzAtNzY3Ni00MDBkLTg4MmQtODk4YjA2ZjUxNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEWeEYXYan19hqbtwrtkzxoPSPMpPdQ7Abjf 5V+lQe3/I9WrOHmpi0WI8yNb5NrtembNVktod5QqQbKERvBVn1OdSiaqXxrhuwk4 sBdBin0MrwVvMQgb1IE6PHDVgQd6k9CVDB5ay4V5z0UdWLgejbJd/iscgvD6a1et Pd2+ScBiBpEndPr6LWniaO8asjC6zvSQENClkUr1UWdJ1NcEZpE0Ae8VQpRXqnUN ux1Rrd1uV7+HfMraK4WKx+ZYa2TlvlSUSli9xE+38cU0ijeQiJEukjdBBSfzwV4L hk70YUO9wjBCrWar3gcFsr8MZKEwUpWQveytsQHkgwFG6eZFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa3odfCw11SXlsAUF1Sg2UQy+I/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjc0ZTc4MTMtMmViNC0z Njk2LWFlYTktZDJkN2E3NWE4MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA69p/cgSY8/IZNhU6Lj/K4CpDnWQSLB65vsjucaLfbCLgcvEOgCcypA GDQejVZDpXPo4tbL7VCiRMMQNYrC0baxxn5jAsZ3Ouc/IcWSzLNrgCCA0xGnUjz8 T7nGKBYQ9757wqxksWCo8aq6bcxUwCtI/pKBYjZidWGdys8OTw2j+Fc2k+A89APG 4aHV4DzLmi/0Ndu9AL+CyYEdoSazJV8euCgKgoX3pEUE0Shu0c3sDhozHk3wLOCx ChPOSq0Rti6MIQVMHIEj/76IgrgOlVzdKzc4yjudPe2aALh9JMyXzjYl5AjrpZiQ C0n12KA1bc53BliIBav2p5PCP0aazNo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:16:09 2025 by rpki-client