$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59b08619-51f8-30c9-9bc7-1814f7800f9f.roa File: 59b08619-51f8-30c9-9bc7-1814f7800f9f.roa (raw, json) Hash identifier: vSQbivF50IoUoa4jRS4XzZvNYNymb7QET2hW0Gx1vyM= Subject key identifier: 62:E1:96:68:02:14:72:33:D6:06:2F:B3:D0:3E:D2:89:C9:23:B6:83 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DE040A8DA699563F2A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59b08619-51f8-30c9-9bc7-1814f7800f9f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397235 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:04:0a:8d:a6:99:56:3f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b0522966-9861-455d-99e2-2bb21ebf22a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:d8:36:38:36:23:f6:6b:34:f6:a4:e3:22: b1:b9:68:9c:eb:1b:6c:fd:1b:d7:0b:c4:a7:13:bb: a1:57:b1:6e:1d:2d:ab:82:cd:08:54:9e:ac:39:e5: 0b:ac:0b:75:c6:29:f4:26:be:65:22:c2:9c:db:70: 96:cd:d7:6f:06:a6:c9:2f:5c:e9:a3:30:51:c4:69: ba:3f:99:e2:0f:c9:5e:06:01:6c:54:34:63:8a:d8: e6:e2:1d:2f:0f:8a:76:d2:1f:a8:f5:b0:c3:54:96: 79:88:db:d4:29:c8:53:dd:9d:7a:58:49:6a:da:cc: dc:1b:17:67:3a:eb:68:dd:75:45:c8:32:54:8f:f7: bb:8d:52:46:88:21:f4:0c:41:59:b0:ce:5c:3e:65: 09:a0:2e:b8:32:8c:1e:5e:14:15:8c:1a:ba:99:3a: 20:20:c8:b6:93:4c:80:03:31:00:49:91:8f:12:e6: 15:c8:02:ac:26:6f:5c:32:b5:58:0c:68:9b:46:57: 96:cd:1f:fd:4a:a4:3c:e9:61:d2:f0:03:fd:17:05: 01:ab:aa:a9:05:c0:95:42:78:bc:67:c0:73:13:27: 30:2a:3a:c3:ca:18:6d:9d:a7:f4:1b:96:4d:a4:44: 0d:36:c2:c5:35:d0:fe:ac:e0:e2:7a:1c:2b:d4:7b: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E1:96:68:02:14:72:33:D6:06:2F:B3:D0:3E:D2:89:C9:23:B6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59b08619-51f8-30c9-9bc7-1814f7800f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e1:a3:9e:db:4c:2f:ad:8c:8c:c5:e1:35:e9:20:74:64:e0: 30:3d:53:d3:bd:49:ff:82:55:ab:b6:c5:c9:72:87:54:05:ef: 9e:62:0d:f1:30:90:32:78:09:d9:1b:d7:fb:fa:e0:0d:9a:cb: 55:74:f1:8c:17:d0:9c:19:5b:ae:00:6c:27:56:29:b7:87:59: 6e:30:5e:cd:de:b1:66:0e:0c:e7:da:8f:71:de:36:70:73:93: ac:10:76:d0:65:30:94:17:9a:67:78:69:41:2c:78:c4:bd:09: 90:8b:1f:37:92:d0:52:43:2f:1e:fb:be:17:71:bf:c3:15:bf: b1:ce:e3:8a:ea:3f:35:db:db:18:7e:1d:11:ff:77:41:e6:b6: d9:dd:0f:14:86:ed:08:8d:b3:e5:45:13:8f:c1:53:3e:bd:2a: 7b:8e:d3:d3:a0:54:d1:4e:ae:11:69:dc:ef:bb:4e:1d:ac:3c: 01:b4:ed:f3:a2:31:60:d3:aa:04:31:ce:32:cc:ef:9c:63:6a: 05:0e:75:7d:8b:17:64:43:71:e4:3c:78:bd:e5:a8:b6:80:c6: 95:75:8e:02:50:25:05:d2:a4:68:ba:9a:07:da:44:78:e7:51: 9e:8b:9d:fc:3c:29:73:ea:61:a7:2f:8d:31:b3:74:3f:dc:d5: f5:26:af:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt4ECo2mmVY/KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YjA1MjI5NjYtOTg2MS00NTVkLTk5ZTItMmJiMjFlYmYyMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ibYNjg2I/ZrNPak4yKxuWic6xts/RvXC8Sn E7uhV7FuHS2rgs0IVJ6sOeULrAt1xin0Jr5lIsKc23CWzddvBqbJL1zpozBRxGm6 P5niD8leBgFsVDRjitjm4h0vD4p20h+o9bDDVJZ5iNvUKchT3Z16WElq2szcGxdn Outo3XVFyDJUj/e7jVJGiCH0DEFZsM5cPmUJoC64MoweXhQVjBq6mTogIMi2k0yA AzEASZGPEuYVyAKsJm9cMrVYDGibRleWzR/9SqQ86WHS8AP9FwUBq6qpBcCVQni8 Z8BzEycwKjrDyhhtnaf0G5ZNpEQNNsLFNdD+rODiehwr1HvDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLhlmgCFHIz1gYvs9A+0onJI7aDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTliMDg2MTktNTFmOC0z MGM5LTliYzctMTgxNGY3ODAwZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLho57bTC+tjIzF4TXpIHRk4DA9U9O9Sf+CVau2xclyh1QF755iDfEw kDJ4Cdkb1/v64A2ay1V08YwX0JwZW64AbCdWKbeHWW4wXs3esWYODOfaj3HeNnBz k6wQdtBlMJQXmmd4aUEseMS9CZCLHzeS0FJDLx77vhdxv8MVv7HO44rqPzXb2xh+ HRH/d0HmttndDxSG7QiNs+VFE4/BUz69KnuO09OgVNFOrhFp3O+7Th2sPAG07fOi MWDTqgQxzjLM75xjagUOdX2LF2RDceQ8eL3lqLaAxpV1jgJQJQXSpGi6mgfaRHjn UZ6Lnfw8KXPqYacvjTGzdD/c1fUmr5s= -----END CERTIFICATE-----Generated at Fri Mar 14 07:58:17 2025 by rpki-client