$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa File: c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa (raw, json) Hash identifier: laV6gmua3M+4QcoM0dxSpBSDxB2u865L5qr///KGgq8= Subject key identifier: A1:2A:94:77:6C:1C:24:EC:C3:C3:C0:C9:C6:99:26:C3:E9:1C:58:66 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964DC466C0374DB30EFEC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 19905 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4d:c4:66:c0:37:4d:b3:0e:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=921059e3-7523-40c3-a51d-76a7cecf6746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:ca:56:d6:96:98:7d:5b:15:2c:15:ee:75: c4:00:b9:2c:c0:10:07:fb:5c:f5:04:28:02:52:91: 26:21:1b:02:48:30:c3:f2:d3:5e:ca:90:22:72:72: 68:e5:05:41:4d:55:cf:63:c5:5b:36:ce:2b:07:fd: 44:4f:85:52:28:d7:d0:61:9d:9c:d0:1f:bf:2a:0f: c7:8f:20:68:7d:dc:b2:26:60:57:0f:b8:4e:08:e0: b2:ca:c0:89:5b:35:29:3c:95:5c:4a:41:86:4c:8f: de:33:cd:45:5b:91:5d:0c:61:d6:97:2c:10:9e:6d: 49:71:d3:ed:9b:20:91:1f:f6:c3:66:89:ba:a3:4b: ed:2f:5b:33:f0:e3:aa:6b:b2:6a:ee:a4:50:23:6f: e1:89:4c:52:70:36:49:7a:f1:da:50:95:43:da:cf: b9:02:8c:14:d9:05:ab:22:1e:6a:13:ec:d2:bc:e2: 02:bf:0e:49:9a:d0:bb:7f:0d:e3:34:cf:15:6a:53: f5:03:a1:02:bd:90:8e:55:3a:c1:80:b5:c7:2e:89: 86:b8:a9:e8:70:24:99:98:9c:7b:20:b3:96:2e:52: d5:cb:f6:01:18:88:d9:86:df:6d:b6:d4:d5:52:0d: e6:7d:b8:67:2d:f8:54:4c:72:a2:d8:b3:f1:80:6a: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:94:77:6C:1C:24:EC:C3:C3:C0:C9:C6:99:26:C3:E9:1C:58:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5b:56:0e:95:a3:ce:a4:15:5c:8c:46:74:a6:fa:a5:63:5c: 32:76:43:2e:f5:03:95:b5:c5:76:49:9b:64:05:65:1f:e5:30: 62:c6:bd:7e:aa:60:cc:13:4e:3d:b3:b1:69:d2:65:c5:ff:f1: 27:60:a7:fd:8e:31:7f:50:53:bd:1e:d8:b3:fb:fd:48:b6:34: 11:a7:76:a6:9b:82:92:d1:75:a6:74:30:5f:bc:f1:1d:40:ba: 06:c3:24:84:38:a1:5e:2b:b4:70:4c:08:77:52:c9:6b:28:82: 7b:10:16:5d:34:68:a5:94:8b:22:50:cd:b7:db:87:8f:84:23: 76:a4:8d:fa:57:46:eb:40:0e:87:5f:f4:d6:19:c5:c0:f5:fe: c6:c3:02:bb:3a:2a:11:8e:44:78:73:81:f4:f6:3f:7a:e2:a5: fc:93:5a:d8:33:18:b5:80:1b:53:ff:be:9e:76:a9:5f:3c:8b: 7d:31:31:af:44:b2:cf:90:fc:ed:1e:7b:b3:b2:86:05:f1:40: 3c:c7:39:09:bc:84:be:2b:fb:d1:b3:25:1a:81:09:cd:66:6d: 62:77:9e:4a:4d:a1:6a:c1:8a:a9:b2:51:2b:ab:f0:e5:34:84: 46:76:26:b8:33:1b:aa:e5:6e:aa:dd:93:d5:db:31:16:9d:3f: fe:bf:16:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk3EZsA3TbMO/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTIxMDU5ZTMtNzUyMy00MGMzLWE1MWQtNzZhN2NlY2Y2NzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9XKVtaWmH1bFSwV7nXEALkswBAH+1z1BCgC UpEmIRsCSDDD8tNeypAicnJo5QVBTVXPY8VbNs4rB/1ET4VSKNfQYZ2c0B+/Kg/H jyBofdyyJmBXD7hOCOCyysCJWzUpPJVcSkGGTI/eM81FW5FdDGHWlywQnm1JcdPt myCRH/bDZom6o0vtL1sz8OOqa7Jq7qRQI2/hiUxScDZJevHaUJVD2s+5AowU2QWr Ih5qE+zSvOICvw5JmtC7fw3jNM8ValP1A6ECvZCOVTrBgLXHLomGuKnocCSZmJx7 ILOWLlLVy/YBGIjZht9tttTVUg3mfbhnLfhUTHKi2LPxgGp5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEqlHdsHCTsw8PAycaZJsPpHFhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzY1Yjk1NDktMTQ4Ny0z YWM1LTkyMDUtZDdmZDA5YjBlMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpbVg6Vo86kFVyMRnSm+qVjXDJ2Qy71A5W1xXZJm2QFZR/lMGLGvX6q YMwTTj2zsWnSZcX/8Sdgp/2OMX9QU70e2LP7/Ui2NBGndqabgpLRdaZ0MF+88R1A ugbDJIQ4oV4rtHBMCHdSyWsognsQFl00aKWUiyJQzbfbh4+EI3akjfpXRutADodf 9NYZxcD1/sbDArs6KhGORHhzgfT2P3ripfyTWtgzGLWAG1P/vp52qV88i30xMa9E ss+Q/O0ee7OyhgXxQDzHOQm8hL4r+9GzJRqBCc1mbWJ3nkpNoWrBiqmyUSur8OU0 hEZ2JrgzG6rlbqrdk9XbMRadP/6/FmI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:40 2025 by rpki-client