$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa File: fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa (raw, json) Hash identifier: y5Arz273ery/WDF0cHXKiLLcJosbf51SKOb32fZsNnQ= Subject key identifier: 1B:A0:A7:25:69:9C:08:D7:05:1C:6E:90:2A:15:38:36:CA:3F:99:3E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E9EF88F7B6E6DF99F180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397220 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e9:ef:88:f7:b6:e6:df:99:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=33a50eee-101d-4eb5-9e77-1d410915054b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:f1:9f:e9:4e:15:19:d1:87:16:49:f4:36: 9b:4f:75:48:36:cb:b3:4a:41:65:f2:7e:da:9c:ee: 30:ee:31:58:4e:d8:92:d7:d9:69:b7:18:a6:12:8b: 17:d2:7d:91:f3:22:59:66:75:2e:3d:c8:41:96:95: 37:61:a1:2c:17:c6:90:6d:79:13:b0:28:e7:44:e7: 18:22:f6:07:87:4c:92:f5:d1:0b:2e:75:7d:73:84: f3:a6:01:7e:9d:f3:e6:6d:83:d1:c0:52:03:d4:72: 07:23:4d:0b:93:d6:95:c9:f9:30:75:86:25:a8:87: 2f:ec:0e:64:6c:6d:b9:99:c9:83:14:c9:48:f0:0c: 03:12:de:ea:43:14:96:29:43:53:c2:62:0d:3c:33: 4d:10:8c:d4:52:4a:91:2c:63:fd:c7:6d:94:ed:b4: c0:f4:1a:b3:cf:a2:3b:53:2c:ba:b2:1b:59:a7:e2: ef:11:f4:12:85:d2:a2:d6:77:5c:ed:95:1c:e4:8b: c3:1e:cc:93:3e:11:cc:08:6c:3e:d6:96:04:6e:b7: 83:f9:2f:84:e8:2d:f8:f8:1a:43:52:d1:6e:9a:8c: 14:04:44:41:26:d7:d6:4a:75:02:a6:6f:ee:fb:4f: c8:ac:ee:82:04:03:6d:d8:22:ab:db:1a:86:b1:a7: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:A7:25:69:9C:08:D7:05:1C:6E:90:2A:15:38:36:CA:3F:99:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b5:1c:1f:07:26:9f:70:06:8c:e6:3e:90:4f:0f:b6:87:3e: 40:4a:98:d6:74:6a:84:11:ab:3c:2e:08:f9:38:1f:e1:62:ff: 5f:ae:32:35:cd:42:af:e9:72:65:13:4e:02:fa:6c:41:aa:13: 13:4d:6b:ab:51:db:48:ad:87:53:ef:ef:89:43:76:5b:e7:a1: 3a:6c:c3:b3:89:4f:0d:a2:5c:96:03:74:3b:30:a9:44:8f:ce: 07:df:0f:d5:b7:7d:ec:b9:a7:4a:7c:f3:82:7d:2e:dd:1d:d3: dc:ed:ae:0a:bd:f6:78:5f:03:83:35:2f:ad:99:69:c0:5b:fe: 44:1c:9e:5b:4b:c3:09:16:ff:19:08:29:77:f9:9f:01:05:e3: d6:da:b1:18:41:0e:d1:f5:ea:f1:ab:ff:cd:91:0e:34:28:fe: ab:6a:4c:a8:f5:cd:93:55:8b:04:93:66:24:cc:1b:10:87:52: 33:ac:c8:dc:9e:93:b8:f5:03:74:30:28:51:a6:d2:c4:64:80: 71:bc:10:d1:0e:77:f6:7c:64:9c:4c:b4:40:6e:78:cc:84:78: 31:d4:49:0c:00:d3:83:b5:26:2c:34:fb:e7:81:69:bd:53:a1: f2:14:4b:0d:a8:13:95:75:cc:fb:4f:e6:61:06:02:90:d2:cd: f4:bb:9c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRunviPe25t+Z8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MzNhNTBlZWUtMTAxZC00ZWI1LTllNzctMWQ0MTA5MTUwNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHxn+lOFRnRhxZJ9DabT3VINsuzSkFl8n7a nO4w7jFYTtiS19lptximEosX0n2R8yJZZnUuPchBlpU3YaEsF8aQbXkTsCjnROcY IvYHh0yS9dELLnV9c4TzpgF+nfPmbYPRwFID1HIHI00Lk9aVyfkwdYYlqIcv7A5k bG25mcmDFMlI8AwDEt7qQxSWKUNTwmINPDNNEIzUUkqRLGP9x22U7bTA9Bqzz6I7 Uyy6shtZp+LvEfQShdKi1ndc7ZUc5IvDHsyTPhHMCGw+1pYEbreD+S+E6C34+BpD UtFumowUBERBJtfWSnUCpm/u+0/IrO6CBANt2CKr2xqGsadS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBugpyVpnAjXBRxukCoVODbKP5k+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmRmMGI1MmItYjRmOC0z NjhlLTg5YWUtNDU4NzBhNWYzYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW1HB8HJp9wBozmPpBPD7aHPkBKmNZ0aoQRqzwuCPk4H+Fi/1+uMjXN Qq/pcmUTTgL6bEGqExNNa6tR20ith1Pv74lDdlvnoTpsw7OJTw2iXJYDdDswqUSP zgffD9W3fey5p0p884J9Lt0d09ztrgq99nhfA4M1L62ZacBb/kQcnltLwwkW/xkI KXf5nwEF49basRhBDtH16vGr/82RDjQo/qtqTKj1zZNViwSTZiTMGxCHUjOsyNye k7j1A3QwKFGm0sRkgHG8ENEOd/Z8ZJxMtEBueMyEeDHUSQwA04O1Jiw0++eBab1T ofIUSw2oE5V1zPtP5mEGApDSzfS7nBY= -----END CERTIFICATE-----Generated at Wed Apr 9 18:11:48 2025 by rpki-client