$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa File: 89361e25-b928-3290-a7dd-e7b676ca8c69.roa (raw, json) Hash identifier: lpIYcqKSTouTktiFeUShrTEEms9FbPN/EmsfOYMneOk= Subject key identifier: 63:35:37:8A:52:9E:54:05:68:8E:79:F1:7F:80:E8:B6:BA:1A:E2:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858487CEB5CDE002CCF34C7DB3080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 397234 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:5c:de:00:2c:cf:34:c7:db:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=609bb7a9-c589-4c93-8fb6-b176bf103eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:d7:6d:d1:c0:cf:df:67:03:48:5d:df:fa: b7:ab:c3:e9:d2:8b:1b:6b:7a:f2:cd:d7:a0:93:9a: 5d:95:1f:1c:1a:6d:12:de:b3:f6:5b:d2:f2:07:eb: e1:6d:5e:18:e8:81:61:76:c7:95:99:47:5d:1a:19: 82:cc:51:95:43:48:9d:49:e4:30:7f:6d:a6:d8:20: 2f:8d:a3:68:09:21:e1:4b:e5:b4:25:27:fe:71:e5: 14:3e:f3:8c:c9:a4:60:13:c5:50:7f:5f:5d:3b:6f: f8:c2:97:ae:fa:79:63:74:be:c1:de:46:04:8d:09: 8f:40:67:43:45:b7:97:63:d3:f1:a9:f4:68:d6:a0: 0d:32:a7:6e:8e:6f:ec:32:f9:23:63:38:75:96:86: de:14:01:61:4f:46:80:fa:ed:8e:56:c6:2f:b6:94: 44:ab:37:20:1b:72:bb:ba:6d:61:db:3a:43:60:40: 96:9a:8d:21:a0:aa:01:be:8a:4a:b8:40:4e:23:5f: 8d:eb:93:48:30:1d:a9:4e:c9:c3:40:6d:84:61:41: c8:db:56:2b:fd:3b:ce:df:5c:e3:23:be:79:cc:69: d6:4d:3a:1c:f7:d9:29:71:10:38:4e:8f:a2:e6:9d: 9d:e1:d6:b8:ca:4d:46:1e:eb:a5:8a:ca:8c:2a:99: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:37:8A:52:9E:54:05:68:8E:79:F1:7F:80:E8:B6:BA:1A:E2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9e:63:88:bd:58:79:c4:6b:7b:75:0a:6f:ef:19:33:80:b2: 53:c3:e0:44:88:7c:b7:80:66:4d:99:58:3f:0c:14:e3:2e:fe: d3:a5:51:20:dd:22:5b:30:b8:16:c9:26:9b:bb:42:83:30:05: 20:ec:0d:6e:9d:96:f0:03:e8:33:de:9d:13:1f:d7:3c:f9:0b: 0e:e7:39:82:bd:87:6b:db:5b:b6:ae:71:fb:c7:32:e0:ff:d2: 95:5b:b8:0e:96:40:44:f2:a4:fb:1c:f3:a3:af:43:6a:77:79: af:eb:27:80:9d:d8:60:37:ce:52:07:eb:87:ad:9c:10:4a:85: 49:3f:17:de:da:06:10:99:ef:2c:09:c4:4b:77:c7:ba:16:b7: 01:73:7a:e6:99:65:12:1e:80:72:6e:77:89:76:71:66:04:f9: ad:35:c4:a9:6e:3a:16:2e:67:32:b2:44:07:e8:d8:03:f5:ee: 5b:31:64:2a:af:66:5e:e7:7e:a0:a6:27:0b:78:7c:83:db:05: ca:98:b1:d7:2a:ca:e9:d5:cc:11:dc:09:ac:96:d7:34:85:14: 35:57:14:12:76:43:7c:41:4d:24:d2:ab:df:30:b2:67:23:eb: 02:58:96:63:8d:84:de:fa:c2:6d:1c:8c:91:a6:d0:9d:c6:b9: 80:29:78:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh861zeACzPNMfbMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjA5YmI3YTktYzU4OS00YzkzLThmYjYtYjE3NmJmMTAzZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo97XbdHAz99nA0hd3/q3q8Pp0osba3ryzdeg k5pdlR8cGm0S3rP2W9LyB+vhbV4Y6IFhdseVmUddGhmCzFGVQ0idSeQwf22m2CAv jaNoCSHhS+W0JSf+ceUUPvOMyaRgE8VQf19dO2/4wpeu+nljdL7B3kYEjQmPQGdD RbeXY9PxqfRo1qANMqdujm/sMvkjYzh1lobeFAFhT0aA+u2OVsYvtpREqzcgG3K7 um1h2zpDYECWmo0hoKoBvopKuEBOI1+N65NIMB2pTsnDQG2EYUHI21Yr/TvO31zj I755zGnWTToc99kpcRA4To+i5p2d4da4yk1GHuulisqMKpmhQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM1N4pSnlQFaI558X+A6La6GuJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkzNjFlMjUtYjkyOC0z MjkwLWE3ZGQtZTdiNjc2Y2E4YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaeY4i9WHnEa3t1Cm/vGTOAslPD4ESIfLeAZk2ZWD8MFOMu/tOlUSDd IlswuBbJJpu7QoMwBSDsDW6dlvAD6DPenRMf1zz5Cw7nOYK9h2vbW7aucfvHMuD/ 0pVbuA6WQETypPsc86OvQ2p3ea/rJ4Cd2GA3zlIH64etnBBKhUk/F97aBhCZ7ywJ xEt3x7oWtwFzeuaZZRIegHJud4l2cWYE+a01xKluOhYuZzKyRAfo2AP17lsxZCqv Zl7nfqCmJwt4fIPbBcqYsdcqyunVzBHcCayW1zSFFDVXFBJ2Q3xBTSTSq98wsmcj 6wJYlmONhN76wm0cjJGm0J3GuYApePM= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:04 2025 by rpki-client