$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: 9KjuvTkdpvRAeQ1jM2zBzIs0Rw5D/J0rsdkAryCrZuw= Subject key identifier: BE:91:68:DC:B2:E8:5F:24:DE:0C:41:22:18:3E:26:07:7B:2A:0D:31 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F43285849350E84E178668833704E5340 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:84:e1:78:66:88:33:70:4e:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bb61d784-dcff-4df2-ac41-65a6a9bf4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:88:23:8d:ae:95:51:aa:63:fb:21:1e:74:b7: 35:ca:d3:dd:8d:12:c2:20:5f:9a:d1:0a:9a:51:ab: b5:a6:f2:f5:95:cb:93:d4:3b:7b:41:67:0f:f4:26: 60:22:d9:e7:37:e4:09:29:a7:7a:9e:b9:3e:bc:3f: b7:f7:12:2b:f1:2b:91:ce:95:d3:9f:6d:00:81:86: b0:34:13:c2:92:52:37:e9:42:7e:1b:70:dc:8d:69: 9d:6d:6a:8b:b6:42:79:c6:22:98:05:a2:4e:df:9a: d2:75:0b:24:0a:5f:30:37:83:e2:7a:3c:10:cc:78: 17:36:77:c6:44:5f:19:ef:df:c6:52:a3:c9:55:15: 99:50:af:57:06:98:e5:5d:56:73:b3:20:a6:5d:65: 3c:95:ef:36:b2:e7:1b:89:fe:8d:ac:ba:09:31:ba: 25:24:e6:11:a7:e1:a3:f1:00:6f:95:3d:78:c0:27: 4f:e9:85:d8:7c:3c:04:1e:a1:2d:50:c5:f1:1f:29: 31:be:b4:94:4b:56:8c:1e:a4:7f:cf:f5:51:e6:8c: b4:15:02:ec:93:f1:cc:35:3a:ba:18:aa:cc:c7:0c: c6:67:4e:bd:f5:45:d3:9b:29:ac:70:84:69:8d:64: be:ec:1a:d3:93:8d:0d:9d:74:1e:8c:75:07:41:ca: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:68:DC:B2:E8:5F:24:DE:0C:41:22:18:3E:26:07:7B:2A:0D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:35:be:1f:49:a5:08:ea:57:94:40:77:21:11:68:55:c1:eb: 88:ab:17:03:a0:d2:d4:b5:b8:15:e1:56:ba:90:6a:2e:b0:c1: bb:46:1b:9b:d4:7e:77:fd:d9:30:e2:50:7a:4a:63:a9:22:9d: dd:64:e6:2b:10:aa:bf:9a:fe:22:a0:a0:31:82:e5:52:65:9a: 7f:62:39:e8:3b:36:4e:02:29:e5:41:c3:4c:e6:7e:22:cf:99: b5:fd:b8:a4:f1:9a:94:cc:7e:b1:e8:8e:73:dd:2c:71:f8:d8: d0:ca:ca:ac:4a:65:09:67:a6:38:72:f6:19:ad:92:4e:d0:1f: 83:af:26:4b:f6:9a:26:af:c8:af:91:ce:c9:37:80:91:dc:ca: 8b:7c:cb:fb:a1:23:ae:53:43:7f:96:38:71:47:f6:26:d0:a2: 1f:3f:c8:e4:56:29:58:8f:5c:49:f7:d3:b0:be:07:7b:0b:ce: bb:db:ac:4f:07:d7:70:6e:96:da:ca:9c:e8:92:5a:be:4f:00: 51:db:08:8b:b4:9b:3b:2f:a6:5d:a6:5a:d7:53:aa:5c:65:06: 0a:14:a9:c5:2b:5f:67:49:d5:b0:b1:f0:0d:18:53:5c:50:6d: 69:f3:18:89:66:09:2d:0f:1a:c9:76:67:c5:13:9b:ac:35:f6: 14:d5:0c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoTheGaIM3BOU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmI2MWQ3ODQtZGNmZi00ZGYyLWFjNDEtNjVhNmE5YmY0NzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74gjja6VUapj+yEedLc1ytPdjRLCIF+a0Qqa Uau1pvL1lcuT1Dt7QWcP9CZgItnnN+QJKad6nrk+vD+39xIr8SuRzpXTn20AgYaw NBPCklI36UJ+G3DcjWmdbWqLtkJ5xiKYBaJO35rSdQskCl8wN4PiejwQzHgXNnfG RF8Z79/GUqPJVRWZUK9XBpjlXVZzsyCmXWU8le82sucbif6NrLoJMbolJOYRp+Gj 8QBvlT14wCdP6YXYfDwEHqEtUMXxHykxvrSUS1aMHqR/z/VR5oy0FQLsk/HMNTq6 GKrMxwzGZ0699UXTmymscIRpjWS+7BrTk40NnXQejHUHQcohtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6RaNyy6F8k3gxBIhg+Jgd7Kg0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG81vh9JpQjqV5RAdyERaFXB64irFwOg0tS1uBXhVrqQai6wwbtGG5vU fnf92TDiUHpKY6kind1k5isQqr+a/iKgoDGC5VJlmn9iOeg7Nk4CKeVBw0zmfiLP mbX9uKTxmpTMfrHojnPdLHH42NDKyqxKZQlnpjhy9hmtkk7QH4OvJkv2miavyK+R zsk3gJHcyot8y/uhI65TQ3+WOHFH9ibQoh8/yORWKViPXEn307C+B3sLzrvbrE8H 13BultrKnOiSWr5PAFHbCIu0mzsvpl2mWtdTqlxlBgoUqcUrX2dJ1bCx8A0YU1xQ bWnzGIlmCS0PGsl2Z8UTm6w19hTVDDw= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:21 2025 by rpki-client