$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa File: 0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa (raw, json) Hash identifier: pE3jxI3Q+bKYz34ZNspA5LxiqeA41IIrPQnOfzPlj0E= Subject key identifier: 9C:D0:24:58:1B:22:5D:DD:D4:CD:08:E3:40:C6:1E:0C:ED:63:0C:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD21026F6315369C4751E4A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397225 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:02:6f:63:15:36:9c:47:51:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=6e21cd9c-caba-4582-aa33-2bf548425acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:97:7d:08:ac:50:86:59:fb:50:26:d9:6e: 56:81:c9:e4:f8:a6:f4:8d:db:ae:49:06:4b:20:b5: 8f:92:2a:ed:21:fc:d3:93:f9:26:7f:80:f3:0d:2a: 31:61:e4:d1:73:8c:76:7e:d7:ba:8c:b4:bd:ea:d9: 5f:62:1f:ea:24:77:83:6e:33:09:37:03:0d:c2:df: 5b:ea:07:cb:8b:5d:98:1d:06:49:41:ee:fd:f6:e0: 34:4f:63:46:2b:d2:fb:bd:2f:23:f1:ce:8b:11:a3: 87:a5:df:45:c3:75:b4:57:6c:a8:a3:1a:f5:52:40: 3b:11:50:07:71:e9:7e:4d:9a:08:fc:36:8c:3f:91: 47:82:d1:31:e3:b5:19:bb:a2:4b:a0:39:5f:d0:93: d2:d6:a7:74:7c:50:0f:c4:4e:7c:d5:06:03:cf:5c: 11:bd:a1:f8:7c:82:a4:d6:b9:10:a2:f0:f2:30:5e: 33:69:aa:92:3f:0a:1d:21:31:e4:9c:a0:3b:14:dc: 48:b9:71:5a:e4:c6:96:b4:ab:27:58:a5:b3:63:eb: 11:af:53:e2:cb:92:69:92:ed:e6:93:2d:81:b2:ef: 2e:0a:0f:41:58:a6:af:ee:d6:a4:b0:69:c0:bc:6a: b4:51:e5:c6:3e:91:01:e8:c9:07:fb:74:32:d8:ab: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:24:58:1B:22:5D:DD:D4:CD:08:E3:40:C6:1E:0C:ED:63:0C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d9:fe:89:51:97:03:64:39:1c:ee:a1:52:cb:ee:f2:65:73: af:d8:90:e8:b6:fb:b2:b7:b7:45:ed:ac:fd:07:63:aa:4f:c2: ef:c4:3c:e3:c3:90:7b:83:cf:2d:e5:4d:ef:8a:eb:9e:41:2b: 8e:ff:00:4e:30:9c:2d:69:84:a1:2b:64:ce:84:1a:40:4e:f0: bd:db:60:72:12:d5:bf:11:73:e8:24:e3:c9:7d:c8:fa:1f:ed: b2:39:33:cf:ea:ec:16:ab:29:d2:1f:9a:ea:86:74:da:c9:b7: 81:c2:d0:1a:b4:fe:3e:6d:c8:fb:c1:f1:b6:bb:8b:b2:fd:9a: e9:e2:37:25:7c:92:2a:28:8f:dd:ef:b3:66:b0:b5:19:d5:46: b0:ac:b2:7b:bc:9c:c3:34:1a:01:e7:71:2d:b8:dc:3a:a9:4d: c5:9d:3e:d8:8d:12:0c:be:76:8c:3b:08:a9:d4:0b:2e:8b:df: c8:ae:db:e0:0a:38:14:a3:25:62:dc:c2:cb:de:1c:78:50:88: 1b:4a:b1:ff:cf:75:1f:79:2e:85:ca:ff:27:14:cb:a7:25:e5: 50:b4:c0:f1:82:7e:91:dc:9e:c8:d8:ef:97:26:56:ec:34:84: 0a:6b:a8:06:68:db:59:6d:02:9b:4a:52:75:61:c7:93:be:48: 0d:e0:4e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQJvYxU2nEdR5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NmUyMWNkOWMtY2FiYS00NTgyLWFhMzMtMmJmNTQ4NDI1YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnqXfQisUIZZ+1Am2W5Wgcnk+Kb0jduuSQZL ILWPkirtIfzTk/kmf4DzDSoxYeTRc4x2fte6jLS96tlfYh/qJHeDbjMJNwMNwt9b 6gfLi12YHQZJQe799uA0T2NGK9L7vS8j8c6LEaOHpd9Fw3W0V2yooxr1UkA7EVAH cel+TZoI/DaMP5FHgtEx47UZu6JLoDlf0JPS1qd0fFAPxE581QYDz1wRvaH4fIKk 1rkQovDyMF4zaaqSPwodITHknKA7FNxIuXFa5MaWtKsnWKWzY+sRr1Piy5Jpku3m ky2Bsu8uCg9BWKav7taksGnAvGq0UeXGPpEB6MkH+3Qy2KsnpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzQJFgbIl3d1M0I40DGHgztYwwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGE5NTBiY2QtODYzMy0z MWZmLWIzMTQtZTRjYmFhYjdkYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPZ/olRlwNkORzuoVLL7vJlc6/YkOi2+7K3t0XtrP0HY6pPwu/EPOPD kHuDzy3lTe+K655BK47/AE4wnC1phKErZM6EGkBO8L3bYHIS1b8Rc+gk48l9yPof 7bI5M8/q7BarKdIfmuqGdNrJt4HC0Bq0/j5tyPvB8ba7i7L9muniNyV8kiooj93v s2awtRnVRrCssnu8nMM0GgHncS243DqpTcWdPtiNEgy+dow7CKnUCy6L38iu2+AK OBSjJWLcwsveHHhQiBtKsf/PdR95LoXK/ycUy6cl5VC0wPGCfpHcnsjY75cmVuw0 hAprqAZo21ltAptKUnVhx5O+SA3gTvQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:19 2025 by rpki-client