$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72652981-ea67-3d1d-8ed9-fd23b5b4aefe.roa File: 72652981-ea67-3d1d-8ed9-fd23b5b4aefe.roa (raw, json) Hash identifier: cAdVU0Qzr3TK7Ito1rWb5679BvgqCPQHCa6jUayAKnc= Subject key identifier: 9F:35:71:26:52:7C:A9:89:0F:D2:0E:30:70:D8:39:B3:AE:2E:8C:B9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965987CC6BEED9A72B4880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72652981-ea67-3d1d-8ed9-fd23b5b4aefe.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397228 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:59:87:cc:6b:ee:d9:a7:2b:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=cc3a8ffb-9b2b-483d-9718-a955de2967a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:5c:e2:a3:0c:bd:49:16:5a:ba:3c:a6:f1: 76:b3:0a:a2:fb:0c:c3:57:9b:2b:07:2e:33:c8:47: a4:a2:8d:1a:f6:3d:60:b9:18:dd:32:ef:7a:1a:62: 43:84:a2:63:96:18:b9:88:84:5a:56:6e:8a:5b:c0: 4a:de:ba:45:11:d2:13:8f:b9:ea:f6:e0:62:d4:f9: 3a:e8:4d:0d:5e:63:43:f6:5d:cd:ab:a8:2a:b6:d3: 47:65:10:ae:a4:14:38:6c:94:74:0f:0a:45:2c:90: fc:74:2f:00:ba:eb:bc:ed:14:ce:dc:d6:b1:1a:50: 96:40:3b:2f:ce:38:ea:76:2e:68:30:bf:9c:8e:13: d0:a7:44:df:a1:e2:67:1c:be:19:e9:3d:ba:72:33: d8:e3:5e:14:69:06:f3:c5:65:2b:e8:96:5e:2b:6c: 6c:5a:03:61:3c:b0:e3:ca:d2:55:7c:67:5f:66:8c: 86:f5:7e:06:d0:b8:e3:79:e9:78:32:c4:5d:89:63: a2:74:87:8f:42:b2:3c:1c:dd:6d:c9:15:8b:45:a5: 65:7f:74:eb:5c:71:01:44:20:b7:77:5f:b6:ba:64: ee:5d:08:ad:92:1b:79:42:b7:03:bf:b1:d4:8a:de: ba:44:d3:fb:55:2e:cc:91:11:e4:aa:1c:64:c4:65: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:35:71:26:52:7C:A9:89:0F:D2:0E:30:70:D8:39:B3:AE:2E:8C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72652981-ea67-3d1d-8ed9-fd23b5b4aefe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3f:70:a7:92:d1:c6:f8:44:ff:80:66:b6:71:f9:17:4a:80: 95:e9:90:e2:25:17:37:3b:69:f0:eb:81:6a:b5:cc:a9:39:98: 5e:40:01:9a:3e:97:73:d7:d6:48:40:a1:f0:89:97:e5:ad:91: 4b:1d:09:0b:5e:6c:aa:aa:8c:19:41:99:fe:a6:6f:dc:5e:2d: 1f:f5:4b:06:5e:86:d9:a0:f8:1c:41:43:a1:57:8c:15:63:1c: 94:15:fd:6e:ee:da:b6:23:70:b3:64:db:5f:79:fa:05:01:8a: 2d:81:ae:d5:da:fe:9d:fc:1e:ed:fe:b1:95:c9:dc:9a:f7:32: dc:aa:53:25:1e:49:d9:a6:b8:4d:d1:b2:c2:bb:45:45:13:3d: b1:03:50:cb:44:ed:61:47:db:82:be:97:62:41:2a:92:c4:fd: c1:34:d9:ca:5d:a0:41:77:ac:ed:28:15:a7:69:ef:5b:0c:5c: 2a:61:9a:3c:db:e4:2d:65:39:7b:96:99:45:92:b8:42:64:9a: d5:e4:bb:79:b9:f1:97:1d:f4:6c:4a:92:d8:4f:b9:e0:4c:82: 5b:61:91:25:9b:62:7d:00:f1:1f:f5:4e:1f:6e:22:bb:06:8c: 30:8a:3c:5e:89:cc:3d:bc:72:d2:a0:87:44:b7:27:e7:1d:64: 4a:d7:eb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllmHzGvu2acrSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2MzYThmZmItOWIyYi00ODNkLTk3MTgtYTk1NWRlMjk2N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xc4qMMvUkWWro8pvF2swqi+wzDV5srBy4z yEekoo0a9j1guRjdMu96GmJDhKJjlhi5iIRaVm6KW8BK3rpFEdITj7nq9uBi1Pk6 6E0NXmND9l3Nq6gqttNHZRCupBQ4bJR0DwpFLJD8dC8Auuu87RTO3NaxGlCWQDsv zjjqdi5oML+cjhPQp0TfoeJnHL4Z6T26cjPY414UaQbzxWUr6JZeK2xsWgNhPLDj ytJVfGdfZoyG9X4G0Ljjeel4MsRdiWOidIePQrI8HN1tyRWLRaVlf3TrXHEBRCC3 d1+2umTuXQitkht5QrcDv7HUit66RNP7VS7MkRHkqhxkxGV2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ81cSZSfKmJD9IOMHDYObOuLoy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzI2NTI5ODEtZWE2Ny0z ZDFkLThlZDktZmQyM2I1YjRhZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI/cKeS0cb4RP+AZrZx+RdKgJXpkOIlFzc7afDrgWq1zKk5mF5AAZo+ l3PX1khAofCJl+WtkUsdCQtebKqqjBlBmf6mb9xeLR/1SwZehtmg+BxBQ6FXjBVj HJQV/W7u2rYjcLNk2195+gUBii2BrtXa/p38Hu3+sZXJ3Jr3MtyqUyUeSdmmuE3R ssK7RUUTPbEDUMtE7WFH24K+l2JBKpLE/cE02cpdoEF3rO0oFadp71sMXCphmjzb 5C1lOXuWmUWSuEJkmtXku3m58Zcd9GxKkthPueBMglthkSWbYn0A8R/1Th9uIrsG jDCKPF6JzD28ctKgh0S3J+cdZErX678= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:46 2025 by rpki-client