$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa File: 828ba51e-8e44-3e85-b79a-94a913c838e4.roa (raw, json) Hash identifier: GDSNx54uPVUfsacpDZanaY97SkU1DiJyY7dW3QAR3oI= Subject key identifier: 9E:CA:16:8A:9D:6F:30:F1:B3:6B:0D:CA:B3:EC:7B:16:BB:58:0E:E3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E92F12CADD53021FAE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397239 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e9:2f:12:ca:dd:53:02:1f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5801f67c-3983-4606-b94e-060af55127d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:0c:09:7e:35:f1:4d:fd:b7:f1:b5:68:16: 85:ad:36:b4:cb:f2:99:2d:37:6d:6b:cc:75:73:d0: 1e:a1:c2:f8:d4:26:27:8f:f1:48:a9:4d:45:5a:9b: ca:20:d7:a0:f9:5e:d7:c9:2e:dc:3d:d3:2e:28:cd: f0:97:51:eb:2f:63:26:92:ab:dd:61:e8:d6:0d:50: 65:d3:91:95:ba:09:76:f9:34:3a:9c:22:e2:10:93: 54:17:33:c6:43:ee:2e:b5:1e:96:ce:7d:89:81:d0: fd:bc:54:a0:83:ec:0e:b3:c8:fb:01:38:a0:27:26: 5a:41:ad:00:06:ab:19:db:ef:f8:d6:bc:62:01:48: de:2f:08:42:07:85:45:43:6e:53:a0:13:0f:2e:51: 31:6c:76:6f:e1:7a:c6:6e:ff:4e:be:f6:f6:26:c6: f7:0b:a8:b8:42:43:cb:94:b8:0d:46:e7:a5:ca:52: 22:e2:7c:eb:f6:5b:7f:f9:96:cf:8d:73:fe:ff:db: b9:65:08:2f:78:0d:a8:3c:49:97:62:2d:bd:93:7d: 30:24:6b:47:02:d5:15:6d:7a:65:af:ed:99:6f:5a: 3a:57:be:bd:b2:24:61:10:5b:4b:54:83:e7:74:fb: 98:e3:17:ba:f3:41:e4:c9:89:8e:0a:77:ae:47:9a: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CA:16:8A:9D:6F:30:F1:B3:6B:0D:CA:B3:EC:7B:16:BB:58:0E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:52:b0:19:18:17:75:66:53:03:39:0a:d5:31:a2:ce:cf:09: e6:2a:42:a6:e1:46:11:a7:ef:e4:11:28:78:70:e6:f1:a9:38: a4:7f:f0:36:37:6f:6a:8e:38:22:28:01:be:dc:8d:f1:0b:82: ba:4d:4c:7e:d4:56:bb:56:30:b1:7c:98:ab:b4:e7:29:37:a0: a0:11:98:fc:27:97:74:1d:79:7c:3b:a1:aa:8c:75:44:bd:ce: c1:6e:fe:df:83:7f:e0:0f:35:fa:65:ff:df:1e:1d:a7:18:6b: 02:9d:c3:c9:2b:cf:5d:8c:e2:e1:52:9a:eb:c1:98:94:fb:25: 64:85:7f:9c:69:fb:93:31:4a:0a:0a:18:fd:b3:6f:3c:86:f7: bd:73:aa:18:3c:c4:d6:df:bf:d6:45:20:1b:3d:6e:5f:19:2d: 7e:d8:c1:79:b8:bd:ae:ee:aa:a6:4b:1c:24:6e:15:42:26:81: e7:96:07:b8:de:88:0f:b3:58:01:67:b3:31:42:5b:4f:2c:8a: f3:ed:5f:5f:18:dc:9a:cd:19:34:96:f3:52:6b:f5:dc:d5:10: 67:1c:37:91:46:84:3b:b6:12:35:62:1c:0e:2d:2f:23:92:da: 84:ba:e2:a3:6e:35:d1:64:7d:81:79:ed:b7:ad:98:d2:43:dd: 00:05:aa:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRukvEsrdUwIfroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTgwMWY2N2MtMzk4My00NjA2LWI5NGUtMDYwYWY1NTEyN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiAMCX418U39t/G1aBaFrTa0y/KZLTdta8x1 c9AeocL41CYnj/FIqU1FWpvKINeg+V7XyS7cPdMuKM3wl1HrL2MmkqvdYejWDVBl 05GVugl2+TQ6nCLiEJNUFzPGQ+4utR6Wzn2JgdD9vFSgg+wOs8j7ATigJyZaQa0A BqsZ2+/41rxiAUjeLwhCB4VFQ25ToBMPLlExbHZv4XrGbv9Ovvb2Jsb3C6i4QkPL lLgNRuelylIi4nzr9lt/+ZbPjXP+/9u5ZQgveA2oPEmXYi29k30wJGtHAtUVbXpl r+2Zb1o6V769siRhEFtLVIPndPuY4xe680HkyYmOCneuR5o10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7KFoqdbzDxs2sNyrPsexa7WA7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODI4YmE1MWUtOGU0NC0z ZTg1LWI3OWEtOTRhOTEzYzgzOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1SsBkYF3VmUwM5CtUxos7PCeYqQqbhRhGn7+QRKHhw5vGpOKR/8DY3 b2qOOCIoAb7cjfELgrpNTH7UVrtWMLF8mKu05yk3oKARmPwnl3QdeXw7oaqMdUS9 zsFu/t+Df+APNfpl/98eHacYawKdw8krz12M4uFSmuvBmJT7JWSFf5xp+5MxSgoK GP2zbzyG971zqhg8xNbfv9ZFIBs9bl8ZLX7YwXm4va7uqqZLHCRuFUImgeeWB7je iA+zWAFnszFCW08sivPtX18Y3JrNGTSW81Jr9dzVEGccN5FGhDu2EjViHA4tLyOS 2oS64qNuNdFkfYF57betmNJD3QAFqlw= -----END CERTIFICATE-----Generated at Fri Mar 14 07:58:32 2025 by rpki-client