$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e144230-3f2e-3fba-bcdd-5381d0f254b2.roa File: 5e144230-3f2e-3fba-bcdd-5381d0f254b2.roa (raw, json) Hash identifier: xM+BAlU+/dbAfVqRyiufsndNTKjbqnHscgHi+HKnyRA= Subject key identifier: 05:01:A0:A1:76:F1:ED:1D:EB:CD:13:81:71:23:D4:70:B0:EB:97:A8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858486C2B29D8D76DE46FF095F3C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e144230-3f2e-3fba-bcdd-5381d0f254b2.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 397240 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:29:d8:d7:6d:e4:6f:f0:95:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=4ddc0a57-2586-48ab-8add-ff05ea7d373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:52:70:f5:b3:5c:74:a7:c7:e7:18:dd:71: 75:a4:cd:e2:a0:f6:6d:25:68:40:8f:8d:5e:d4:0d: e8:f4:85:a2:19:d8:ad:fb:22:11:e5:d4:da:42:17: 36:67:6a:39:6e:3a:6c:1a:ed:88:e7:f0:8d:63:e1: 7b:06:46:86:4c:53:ff:05:dc:99:80:22:c0:9e:84: ac:83:2e:35:4b:f6:19:44:a4:5b:e5:c7:67:d0:a3: a4:6b:44:6c:bf:ef:e1:76:d3:5b:3f:a8:c5:59:d0: 7f:55:09:64:e7:38:04:58:03:2f:23:d4:3b:d5:4c: a2:52:3f:9e:78:5a:3f:ed:b5:0e:03:fe:cc:1a:c3: 43:37:05:70:44:db:fa:77:4c:47:7d:0b:65:a4:19: 19:41:bb:95:29:29:8d:fa:79:92:38:91:90:65:b6: f5:26:6d:6b:de:c4:33:0f:8a:41:18:c1:c2:26:1f: 0f:6d:a5:74:38:50:64:40:f5:0b:59:15:1d:c4:f1: 93:59:57:56:95:2d:e5:72:36:44:a6:e1:5f:b8:19: 68:08:d7:25:d8:41:3a:57:5c:0f:33:3d:72:e4:b6: fa:b9:31:ae:a7:cc:e6:37:c6:1b:ac:a1:30:51:69: e4:ec:16:d7:39:b2:ba:15:98:5a:1f:a1:44:e9:f3: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:A0:A1:76:F1:ED:1D:EB:CD:13:81:71:23:D4:70:B0:EB:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e144230-3f2e-3fba-bcdd-5381d0f254b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bd:56:5f:e3:69:01:d2:13:f8:f4:2d:b2:b0:97:06:14:8d: be:e3:6b:d4:52:c8:e5:30:13:f0:71:58:e5:b7:c9:ad:e0:92: f1:15:f2:4e:f0:f6:c7:22:6f:ae:59:53:b9:94:98:6c:65:0a: 04:5c:2a:d6:bb:b2:50:a6:5f:c8:17:89:47:75:da:0f:79:de: 81:4c:24:34:28:6a:e6:e9:3f:80:e2:d6:8b:a1:1f:a7:20:a1: 67:22:7a:2e:6d:06:ab:d5:2c:a5:b2:eb:a8:09:ea:13:72:bd: 86:54:71:c5:5f:47:85:0d:4c:a6:fe:db:84:43:19:b2:a1:8e: 1d:2f:94:33:15:d0:e2:83:75:0a:56:b4:9b:63:42:59:1f:a0: cd:f1:2c:c6:7e:94:9d:42:e5:0e:31:d8:80:04:04:d9:c2:2d: db:be:58:b9:b6:73:2e:50:8d:a7:78:4b:9d:97:4f:d2:06:b9: b7:69:41:84:1d:8e:3e:c3:f7:ec:4b:24:4f:86:c4:ac:77:ec: 59:69:d6:6a:40:e6:42:d0:44:f1:76:9a:50:df:95:6d:48:e9: f6:fe:2b:39:08:5d:63:7a:9a:4e:20:f3:e5:7c:81:34:f6:83: f7:aa:40:f7:e8:d9:03:40:6a:72:f1:69:c9:1b:ed:b9:58:f9: c5:4e:6e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKynY123kb/CV88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk NGRkYzBhNTctMjU4Ni00OGFiLThhZGQtZmYwNWVhN2QzNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrpScPWzXHSnx+cY3XF1pM3ioPZtJWhAj41e 1A3o9IWiGdit+yIR5dTaQhc2Z2o5bjpsGu2I5/CNY+F7BkaGTFP/BdyZgCLAnoSs gy41S/YZRKRb5cdn0KOka0Rsv+/hdtNbP6jFWdB/VQlk5zgEWAMvI9Q71UyiUj+e eFo/7bUOA/7MGsNDNwVwRNv6d0xHfQtlpBkZQbuVKSmN+nmSOJGQZbb1Jm1r3sQz D4pBGMHCJh8PbaV0OFBkQPULWRUdxPGTWVdWlS3lcjZEpuFfuBloCNcl2EE6V1wP Mz1y5Lb6uTGup8zmN8YbrKEwUWnk7BbXObK6FZhaH6FE6fNNgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUBoKF28e0d680TgXEj1HCw65eoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWUxNDQyMzAtM2YyZS0z ZmJhLWJjZGQtNTM4MWQwZjI1NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy9Vl/jaQHSE/j0LbKwlwYUjb7ja9RSyOUwE/BxWOW3ya3gkvEV8k7w 9scib65ZU7mUmGxlCgRcKta7slCmX8gXiUd12g953oFMJDQoaubpP4Di1ouhH6cg oWciei5tBqvVLKWy66gJ6hNyvYZUccVfR4UNTKb+24RDGbKhjh0vlDMV0OKDdQpW tJtjQlkfoM3xLMZ+lJ1C5Q4x2IAEBNnCLdu+WLm2cy5Qjad4S52XT9IGubdpQYQd jj7D9+xLJE+GxKx37Flp1mpA5kLQRPF2mlDflW1I6fb+KzkIXWN6mk4g8+V8gTT2 g/eqQPfo2QNAanLxackb7blY+cVObrM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:50 2025 by rpki-client