$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa File: fe84c893-9f78-3be7-a108-1de405957045.roa (raw, json) Hash identifier: 3bjvNhFxPuo5c9GSrDv/24sR8hBnfFSEu+//RUOc6DQ= Subject key identifier: 4E:A2:3B:15:9E:B0:65:57:B4:6A:62:B2:78:22:A6:23:C2:C1:FF:5F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848907605D7831B79A986798780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 19905 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:05:d7:83:1b:79:a9:86:79:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=db53696b-3b77-44e9-884e-c6b783c2b159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:9e:5a:f2:09:b8:44:75:f4:b8:f5:49:bf: a9:e5:4f:c4:da:a5:5d:d9:80:40:e0:a2:8e:83:a8: 8b:52:e9:38:de:12:3b:5d:41:ca:37:5e:27:72:f7: f8:fd:fa:ee:ce:94:6f:b0:d6:d5:e9:6c:81:63:7b: de:38:d1:d3:5a:29:03:95:a9:c3:19:81:7b:09:53: 61:d7:43:a0:75:95:de:24:e8:0d:0d:78:63:66:6f: 26:ae:27:68:0f:6e:2f:89:f0:46:f9:d5:5a:d9:fa: 1d:91:a9:7d:8f:b5:c6:81:f1:89:10:09:11:a0:48: 4a:e9:ea:d3:23:77:bb:cd:d6:fb:61:66:83:fe:23: a9:d8:b6:6d:c7:96:bf:5e:69:19:63:fc:ec:0f:c2: 9c:9f:59:fb:e5:f2:04:68:de:08:75:4c:f6:af:c4: a3:88:93:28:58:be:58:1a:6c:2a:77:25:a6:36:f4: db:54:4f:55:0d:97:b3:2e:43:71:84:73:89:e4:2d: 6c:ef:bd:97:af:95:41:56:5e:c5:72:e9:a4:e5:ce: f1:2b:cc:50:e5:32:3e:d9:23:c5:50:93:0a:2e:75: fa:e9:9f:dc:0e:77:25:2c:5b:da:a4:64:f7:e0:68: 80:78:ea:cc:12:d0:98:0b:f1:1b:bb:97:dd:33:7f: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:3B:15:9E:B0:65:57:B4:6A:62:B2:78:22:A6:23:C2:C1:FF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2b:51:c6:34:c5:4d:c9:3c:c0:57:d7:99:0d:ec:00:ba:f8: 8e:00:f3:92:ac:ab:05:38:4f:ee:60:2f:58:09:28:b9:61:17: 6f:c0:02:51:3a:20:04:fc:b5:94:c1:7f:67:35:3a:36:45:8c: be:73:6a:fa:ec:b3:e4:90:22:de:da:a9:15:01:50:4f:e0:15: d4:cb:e7:17:aa:5b:98:87:25:b6:84:df:e4:7d:12:ca:8e:6d: 1f:3b:83:76:f8:9d:97:02:57:31:0f:a9:25:5f:60:a8:6e:65: de:55:27:a0:02:f6:91:21:db:21:bc:da:9f:34:a9:b0:f5:70: d6:bc:d2:cf:df:32:82:5d:9b:4b:c6:4d:d8:7c:70:98:7f:d3: 13:32:f2:8e:fc:85:25:85:df:03:b5:a0:df:3f:9b:d1:01:76: 2f:84:d8:09:06:87:84:ef:d5:c2:2f:2e:6e:8c:af:8c:e6:a5: 26:34:80:53:b7:9f:94:8d:81:7b:2c:ee:02:b5:f4:c9:e9:c1: 9b:99:d1:b5:88:a1:00:d5:89:e1:1c:99:75:de:9a:02:33:aa: d5:25:b0:19:0d:29:5e:30:63:6f:f1:77:20:12:37:45:b9:10: 5c:be:22:dd:87:15:16:b7:28:63:04:2e:00:2b:3a:17:47:f9: 2b:86:5e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgXXgxt5qYZ5h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZGI1MzY5NmItM2I3Ny00NGU5LTg4NGUtYzZiNzgzYzJiMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPieWvIJuER19Lj1Sb+p5U/E2qVd2YBA4KKO g6iLUuk43hI7XUHKN14ncvf4/fruzpRvsNbV6WyBY3veONHTWikDlanDGYF7CVNh 10OgdZXeJOgNDXhjZm8mridoD24vifBG+dVa2fodkal9j7XGgfGJEAkRoEhK6erT I3e7zdb7YWaD/iOp2LZtx5a/XmkZY/zsD8Kcn1n75fIEaN4IdUz2r8SjiJMoWL5Y GmwqdyWmNvTbVE9VDZezLkNxhHOJ5C1s772Xr5VBVl7Fcumk5c7xK8xQ5TI+2SPF UJMKLnX66Z/cDnclLFvapGT34GiAeOrMEtCYC/Ebu5fdM3/0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6iOxWesGVXtGpisngipiPCwf9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmU4NGM4OTMtOWY3OC0z YmU3LWExMDgtMWRlNDA1OTU3MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEErUcY0xU3JPMBX15kN7AC6+I4A85KsqwU4T+5gL1gJKLlhF2/AAlE6 IAT8tZTBf2c1OjZFjL5zavrss+SQIt7aqRUBUE/gFdTL5xeqW5iHJbaE3+R9EsqO bR87g3b4nZcCVzEPqSVfYKhuZd5VJ6AC9pEh2yG82p80qbD1cNa80s/fMoJdm0vG Tdh8cJh/0xMy8o78hSWF3wO1oN8/m9EBdi+E2AkGh4Tv1cIvLm6Mr4zmpSY0gFO3 n5SNgXss7gK19MnpwZuZ0bWIoQDVieEcmXXemgIzqtUlsBkNKV4wY2/xdyASN0W5 EFy+It2HFRa3KGMELgArOhdH+SuGXlE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:11:05 2025 by rpki-client