$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa File: 1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa (raw, json) Hash identifier: dRwq75WQ6YwrfnTLTSO806tILXSOzvGCS9RRLfe8Mdk= Subject key identifier: 25:E4:B0:06:AA:30:72:0E:EB:58:7A:66:39:04:5C:30:AD:72:2B:FB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2104F73B3D0385D7D9A400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397236 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:04:f7:3b:3d:03:85:d7:d9:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=f9bb4eba-cf41-4b1f-bc37-74f946ea7774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:5b:7f:b5:15:90:d4:cf:d0:46:57:a6:fe: 37:b2:19:12:49:92:f6:c5:40:59:3f:2f:15:f1:82: 5e:8d:8f:a3:22:b5:fb:39:98:3c:04:02:a7:98:5b: 51:dd:0f:f6:f8:7a:de:65:0a:00:9e:33:6a:8f:ea: fc:80:ca:c6:f2:19:e6:ec:63:b1:72:cc:72:92:87: b6:96:6e:70:aa:ff:6f:38:b5:14:26:97:4b:b4:7a: 83:93:d5:60:72:0a:4d:32:e2:6f:97:b1:73:32:6d: d0:e5:8e:ab:a2:91:48:b9:17:38:53:b6:a4:0f:2c: e4:18:f4:dc:57:26:13:be:ce:e9:b3:5e:d6:13:df: ec:49:5b:7c:0e:5a:47:0d:58:a3:7d:c3:a6:84:ac: c8:2d:53:51:ee:ba:52:dd:d5:7b:ec:87:9c:22:8d: 1f:e8:20:cb:1c:d2:43:81:58:bf:20:27:0c:7f:5d: c7:49:d8:3b:1a:2b:65:ef:4f:a7:18:64:eb:b3:87: 97:d0:90:d5:4a:64:f4:93:72:6f:36:a1:30:75:73: cf:6a:61:31:b8:87:62:0a:0a:4b:80:92:98:ff:9c: 28:1b:94:4b:7e:5f:2b:4f:6b:40:f8:49:58:3e:a2: 10:d5:3d:22:f4:d3:60:49:7e:ec:b1:16:a1:72:e3: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E4:B0:06:AA:30:72:0E:EB:58:7A:66:39:04:5C:30:AD:72:2B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b2:c9:8b:1f:ca:00:a7:ae:6a:e9:58:05:d7:20:82:fd:e3: 6d:c0:2a:23:cf:27:77:47:e0:89:45:2c:2b:f3:21:6f:c9:8f: 66:10:8c:4e:54:fc:66:e4:7f:78:85:08:f3:cb:e9:a6:8c:fd: 4c:75:23:fe:34:f8:dc:62:10:79:e4:e6:3e:9e:d4:ce:53:e9: 85:85:18:36:81:fa:b2:3b:37:cd:a6:df:69:91:59:c0:23:5b: bc:a1:93:3d:0e:b3:b3:cf:3c:e5:a4:db:75:8d:96:9c:06:33: bb:36:e3:6a:74:ca:6f:be:11:0a:65:01:45:6c:45:33:f3:61: 36:75:e2:58:da:ad:a0:b0:2e:0d:97:b1:ee:a1:cd:79:2d:90: 55:4e:b0:12:4b:36:1e:60:d8:3d:9c:8d:70:3c:83:3c:77:ad: 35:bd:a2:c9:fe:7a:84:d5:c3:9f:c6:86:ee:5e:d4:25:04:7a: 1d:fe:ac:ee:fa:9e:89:9a:ed:fb:c0:50:3a:36:1f:55:ef:aa: fa:5f:30:0d:87:05:ac:f6:a2:1b:15:de:4c:d0:0a:a7:9f:ac: c3:b9:b2:bf:61:54:af:1b:f6:a7:8a:85:86:da:df:94:94:8b: 6f:2b:0a:85:22:48:84:1d:9e:62:46:bd:2f:5f:47:fb:6d:60: 6f:fd:62:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQT3Oz0DhdfZpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZjliYjRlYmEtY2Y0MS00YjFmLWJjMzctNzRmOTQ2ZWE3Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBdbf7UVkNTP0EZXpv43shkSSZL2xUBZPy8V 8YJejY+jIrX7OZg8BAKnmFtR3Q/2+HreZQoAnjNqj+r8gMrG8hnm7GOxcsxykoe2 lm5wqv9vOLUUJpdLtHqDk9VgcgpNMuJvl7FzMm3Q5Y6ropFIuRc4U7akDyzkGPTc VyYTvs7ps17WE9/sSVt8DlpHDVijfcOmhKzILVNR7rpS3dV77IecIo0f6CDLHNJD gVi/ICcMf13HSdg7Gitl70+nGGTrs4eX0JDVSmT0k3JvNqEwdXPPamExuIdiCgpL gJKY/5woG5RLfl8rT2tA+ElYPqIQ1T0i9NNgSX7ssRahcuPK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXksAaqMHIO61h6ZjkEXDCtciv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWRkYzAxMWYtMjVhNS0z NWJlLWJhZTYtNjFhM2FhNGE5MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqyyYsfygCnrmrpWAXXIIL9423AKiPPJ3dH4IlFLCvzIW/Jj2YQjE5U /Gbkf3iFCPPL6aaM/Ux1I/40+NxiEHnk5j6e1M5T6YWFGDaB+rI7N82m32mRWcAj W7yhkz0Os7PPPOWk23WNlpwGM7s242p0ym++EQplAUVsRTPzYTZ14ljaraCwLg2X se6hzXktkFVOsBJLNh5g2D2cjXA8gzx3rTW9osn+eoTVw5/Ghu5e1CUEeh3+rO76 noma7fvAUDo2H1XvqvpfMA2HBaz2ohsV3kzQCqefrMO5sr9hVK8b9qeKhYba35SU i28rCoUiSIQdnmJGvS9fR/ttYG/9Ytc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:05 2025 by rpki-client