$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa File: fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa (raw, json) Hash identifier: iwv/pbpHpkg89ainXnPn4gkeMQdM7o5zl0ka5KsX16A= Subject key identifier: 3E:BE:FB:D1:9D:8B:DA:59:03:30:72:59:95:D8:36:75:22:83:F5:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964F302942282AD7C58180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397242 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4f:30:29:42:28:2a:d7:c5:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c658f840-3423-47e9-9ef3-7cbbc1cc2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:46:28:41:dd:7e:77:76:8f:59:29:7f:54:69: 76:ab:ac:b0:fc:5c:ba:49:84:fd:53:5c:2b:c6:15: 96:68:98:04:4d:c1:b4:d0:21:10:5f:e3:ed:2a:45: 2d:57:ab:41:60:a8:6d:20:6e:69:d9:99:e2:71:63: 86:de:77:b8:78:17:96:95:7f:ee:69:c7:8a:b2:7a: e6:d1:8e:e6:8e:a3:c8:12:a0:c3:83:d7:b4:0c:8b: bf:48:6f:d0:0a:fe:0e:24:c2:d5:bf:a3:0e:6c:88: 40:c3:11:3f:44:fe:90:42:96:bf:08:93:e3:d0:64: 6d:a3:41:dd:87:3d:f6:87:5f:5d:b8:d8:c1:28:a8: d3:00:82:86:54:33:33:6c:42:41:59:41:7a:f2:f5: 1b:2a:ff:6e:2e:1b:75:d1:c5:af:1a:69:4f:9a:2e: a2:8e:b9:44:3d:aa:aa:f3:8e:4e:57:7d:fe:b8:f9: 24:51:c1:82:dc:6d:70:78:71:5b:b7:ec:76:aa:87: c0:4d:be:c3:33:3d:27:dd:b0:1d:3e:b4:3e:1a:a5: b5:ba:b2:7e:e4:22:a0:80:7a:21:da:7f:e2:8f:84: 9e:1f:cc:92:30:72:1c:dd:f5:43:91:fa:36:37:66: c4:8a:66:17:32:f0:30:39:ad:a3:31:0c:de:1d:9b: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BE:FB:D1:9D:8B:DA:59:03:30:72:59:95:D8:36:75:22:83:F5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:aa:ad:6d:4c:b3:84:57:c7:4e:ba:55:10:2b:00:33:4e:bd: 36:f2:d8:e5:97:06:56:51:fd:fe:a1:d3:42:e2:d9:18:63:f5: cc:c2:03:67:64:94:da:a2:d2:1f:a3:cf:68:ea:72:71:55:f9: 8c:38:f6:b0:4e:7c:61:61:6b:02:33:b8:03:ef:9a:3d:b5:c1: 40:41:2d:cc:6c:64:39:f3:9f:b7:10:42:e9:6d:a5:a4:00:40: 76:f6:e2:df:7d:f6:fe:d5:8d:0d:41:b6:53:12:7f:d8:a2:f7: 06:fb:99:bf:08:ac:46:d1:17:bb:ab:fb:02:29:38:a3:d7:69: 6b:53:ba:08:48:40:c5:dc:c2:07:8f:38:3a:82:cb:1a:2a:e2: 04:93:30:37:45:92:32:99:e6:8d:c7:af:70:d8:0e:04:a8:0f: 6c:66:b2:6b:20:c0:e5:87:21:6e:1d:5c:e5:5a:44:0c:27:a3: eb:86:bb:16:5a:5e:03:73:42:ff:ac:2d:ce:4c:dc:ec:44:0e: 26:66:e8:f3:a8:5f:f0:c0:ba:a9:b5:6e:88:32:0a:15:6d:e4: b4:58:f3:f4:dd:9b:ff:0d:c3:20:4d:97:ce:3c:49:53:eb:e7: bf:3c:be:eb:23:79:36:dc:2d:86:d0:81:eb:c9:d4:51:1c:45: 34:e2:71:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk8wKUIoKtfFgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzY1OGY4NDAtMzQyMy00N2U5LTllZjMtN2NiYmMxY2MyMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEYoQd1+d3aPWSl/VGl2q6yw/Fy6SYT9U1wr xhWWaJgETcG00CEQX+PtKkUtV6tBYKhtIG5p2ZnicWOG3ne4eBeWlX/uaceKsnrm 0Y7mjqPIEqDDg9e0DIu/SG/QCv4OJMLVv6MObIhAwxE/RP6QQpa/CJPj0GRto0Hd hz32h19duNjBKKjTAIKGVDMzbEJBWUF68vUbKv9uLht10cWvGmlPmi6ijrlEPaqq 845OV33+uPkkUcGC3G1weHFbt+x2qofATb7DMz0n3bAdPrQ+GqW1urJ+5CKggHoh 2n/ij4SeH8ySMHIc3fVDkfo2N2bEimYXMvAwOa2jMQzeHZtcAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6++9Gdi9pZAzByWZXYNnUig/UFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmEwYTY3ODAtZGJiYy0z NThkLTliYWQtZDgwMGRmN2E4NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCqrW1Ms4RXx066VRArADNOvTby2OWXBlZR/f6h00Li2Rhj9czCA2dk lNqi0h+jz2jqcnFV+Yw49rBOfGFhawIzuAPvmj21wUBBLcxsZDnzn7cQQultpaQA QHb24t999v7VjQ1BtlMSf9ii9wb7mb8IrEbRF7ur+wIpOKPXaWtTughIQMXcwgeP ODqCyxoq4gSTMDdFkjKZ5o3Hr3DYDgSoD2xmsmsgwOWHIW4dXOVaRAwno+uGuxZa XgNzQv+sLc5M3OxEDiZm6POoX/DAuqm1bogyChVt5LRY8/Tdm/8NwyBNl848SVPr 5788vusjeTbcLYbQgevJ1FEcRTTicf8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:44 2025 by rpki-client