$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f827ab90-5593-3394-ab70-0d6458789d5b.roa File: f827ab90-5593-3394-ab70-0d6458789d5b.roa (raw, json) Hash identifier: VewhPOEbJRPWkkfBhnxsqSi/BuzwBfeVxs5Ps+uaogk= Subject key identifier: 3A:38:13:CC:D9:7B:F0:4A:AA:F2:9A:20:35:E1:69:24:B4:7F:4E:A8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246ECEF208360B27C3978C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f827ab90-5593-3394-ab70-0d6458789d5b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397241 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ec:ef:20:83:60:b2:7c:39:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bdc7f046-575f-45c6-b79a-310c7ebff308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:b8:36:d1:ad:fb:32:27:e6:b2:25:f5:49: 7d:cb:4d:8f:0f:75:f6:76:97:7f:b4:01:8e:2e:de: fa:d6:07:46:a5:e0:9c:d6:24:d7:33:1e:47:09:f4: da:f9:40:ea:8b:d4:65:cf:fe:94:bf:c7:c3:8b:1a: f8:a3:81:c8:4c:00:77:84:1d:07:1d:21:3c:74:11: 0e:c3:9e:6d:ec:f1:18:53:86:34:8f:94:78:34:9c: 23:e8:6d:13:2e:3d:22:f3:5f:8c:13:ad:c5:af:69: 79:8f:d2:9c:d9:05:11:37:0e:4d:c3:a9:a5:0c:0b: bb:f6:4f:ed:d5:c1:61:f6:2a:1e:a0:ba:35:7a:44: 43:bf:16:a0:4a:5e:3a:2a:d9:f1:18:08:cf:e4:73: 42:7d:13:03:ae:d7:30:35:79:ff:5a:00:73:9c:54: d8:a5:a0:15:87:fd:4e:ee:f1:3f:06:57:c6:5e:c5: c7:ff:1d:fc:f5:da:9c:19:47:e8:22:9c:f7:51:9a: e2:a3:62:9f:b7:40:88:98:f1:29:cc:82:f6:08:86: 9e:73:36:56:87:c3:48:dd:0b:81:71:3e:fd:1c:e2: 05:b3:44:55:99:ce:ba:1a:02:f8:5d:d6:40:a3:23: 1a:76:4e:aa:b6:13:32:a9:1a:63:40:90:dc:9d:d6: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:13:CC:D9:7B:F0:4A:AA:F2:9A:20:35:E1:69:24:B4:7F:4E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f827ab90-5593-3394-ab70-0d6458789d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c9:f7:37:f1:0c:83:11:75:43:bb:b7:67:b3:1b:6c:81:7e: 50:77:9c:97:a6:64:24:3c:37:1c:e2:01:03:c5:0e:d6:6e:ff: c2:25:6b:c8:7d:e4:95:a8:25:03:e5:25:59:6c:f0:f6:23:7d: 68:e4:6a:d4:b4:84:d9:f1:21:ca:82:21:fe:cd:7d:89:33:79: b9:8d:7e:62:c9:2a:dd:0f:e7:a6:35:88:62:05:29:80:63:a1: 9f:6c:b1:8e:f6:1c:a9:c3:31:12:36:c5:0f:24:17:3b:1c:4c: 97:3f:fe:8b:c7:df:03:75:4c:c2:e9:d0:bb:2b:4f:12:34:9d: e5:17:28:6f:19:72:d6:79:9f:a7:0b:c7:d2:15:8d:c9:a1:93: 4f:75:93:17:fe:77:dd:ed:cf:4a:39:81:30:97:ee:fb:4a:64: 9a:6f:4d:21:84:94:3e:84:cc:61:0e:f0:ab:27:f6:2e:39:19: 62:25:20:eb:e0:83:95:95:ae:04:39:f8:7d:ac:79:50:2f:ee: 0d:aa:8d:62:45:08:e8:ae:1f:9a:0b:69:29:4a:0d:06:85:63: 71:0c:2b:33:ed:b2:40:2d:ff:b8:6c:fe:db:6b:32:ab:ea:52: 85:d1:b2:fb:c5:29:ad:3d:d9:73:a1:20:bf:5e:d4:8c:69:c4: 8f:d9:80:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuzvIINgsnw5eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmRjN2YwNDYtNTc1Zi00NWM2LWI3OWEtMzEwYzdlYmZmMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d64NtGt+zIn5rIl9Ul9y02PD3X2dpd/tAGO Lt761gdGpeCc1iTXMx5HCfTa+UDqi9Rlz/6Uv8fDixr4o4HITAB3hB0HHSE8dBEO w55t7PEYU4Y0j5R4NJwj6G0TLj0i81+ME63Fr2l5j9Kc2QURNw5Nw6mlDAu79k/t 1cFh9ioeoLo1ekRDvxagSl46KtnxGAjP5HNCfRMDrtcwNXn/WgBznFTYpaAVh/1O 7vE/BlfGXsXH/x389dqcGUfoIpz3UZrio2Kft0CImPEpzIL2CIaeczZWh8NI3QuB cT79HOIFs0RVmc66GgL4XdZAoyMadk6qthMyqRpjQJDcndbMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo4E8zZe/BKqvKaIDXhaSS0f06oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjgyN2FiOTAtNTU5My0z Mzk0LWFiNzAtMGQ2NDU4Nzg5ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzJ9zfxDIMRdUO7t2ezG2yBflB3nJemZCQ8NxziAQPFDtZu/8Ila8h9 5JWoJQPlJVls8PYjfWjkatS0hNnxIcqCIf7NfYkzebmNfmLJKt0P56Y1iGIFKYBj oZ9ssY72HKnDMRI2xQ8kFzscTJc//ovH3wN1TMLp0LsrTxI0neUXKG8ZctZ5n6cL x9IVjcmhk091kxf+d93tz0o5gTCX7vtKZJpvTSGElD6EzGEO8Ksn9i45GWIlIOvg g5WVrgQ5+H2seVAv7g2qjWJFCOiuH5oLaSlKDQaFY3EMKzPtskAt/7hs/ttrMqvq UoXRsvvFKa092XOhIL9e1IxpxI/ZgFQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:26:12 2025 by rpki-client