$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10bae92e-71dd-34eb-87ac-b02b879e546b.roa File: 10bae92e-71dd-34eb-87ac-b02b879e546b.roa (raw, json) Hash identifier: j9awUxWYeitsBX0SVeUtaDk59twR2vEv5tpOEmHDULk= Subject key identifier: 4E:7F:10:F6:17:81:DC:D1:AD:63:7D:68:E4:F5:43:F9:AC:21:F9:9A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0656F377C5AED85F7400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10bae92e-71dd-34eb-87ac-b02b879e546b.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397222 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:06:56:f3:77:c5:ae:d8:5f:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=bce79a7f-888e-46e6-99d6-314aec8e9ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:1b:18:89:29:b0:d8:6c:13:af:23:6d:38: 5b:df:15:0d:63:41:f6:79:f5:d9:a0:22:d2:18:e6: 91:9f:69:e8:2c:ae:e4:ef:d0:87:b7:59:e0:09:a8: 4e:90:67:72:2c:1c:95:94:4c:a3:76:94:91:42:c4: fe:51:13:7d:1a:cc:17:90:62:cf:26:36:f2:7b:bf: c9:32:65:08:cd:8d:33:12:e9:d5:91:72:39:c5:7c: ea:25:cd:be:65:29:8c:05:1c:48:82:8c:d4:a0:bf: 46:d6:28:57:4b:43:ee:97:3a:87:0c:af:ec:12:9b: 40:61:70:9d:52:67:86:73:31:8b:08:df:89:cd:b1: fd:d4:26:45:da:a0:4b:0e:9e:e9:c8:bf:61:03:81: d0:e6:f1:05:69:a0:bc:d0:a3:80:b2:24:58:d7:a5: a9:49:e1:31:7d:cf:4a:ed:6f:af:ef:40:ea:ee:6a: fc:14:39:71:eb:88:99:99:57:47:02:53:2c:4e:95: f0:73:04:8b:c6:a0:64:89:3a:a2:51:30:c3:dc:f7: 03:72:74:75:56:63:e3:c6:6d:0b:71:4e:53:4d:26: 69:80:92:d9:b7:90:32:60:be:33:bc:30:94:fb:25: d9:77:40:28:ea:cf:4c:9e:3c:91:f1:6f:d2:43:03: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:10:F6:17:81:DC:D1:AD:63:7D:68:E4:F5:43:F9:AC:21:F9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10bae92e-71dd-34eb-87ac-b02b879e546b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:97:48:d7:55:3f:09:d5:d7:14:c0:61:7b:fc:ac:78:68:00: bd:77:25:61:b0:a6:36:27:3a:e9:8f:fd:f7:1f:30:af:13:e0: bf:13:73:58:0a:d5:c5:78:3c:bf:6e:6b:5e:e0:12:df:5c:25: 15:65:38:8a:c2:33:a1:6b:79:a3:a1:62:22:ed:78:f9:90:c5: 33:95:06:e7:d1:e0:56:c3:2a:49:51:00:13:ea:20:b6:bc:9f: a5:70:a9:6a:80:12:82:b1:3a:ca:24:b1:f1:7a:dc:ec:9b:37: a9:78:7d:be:7c:6f:43:9f:42:f5:e0:a4:b7:ee:ab:5f:eb:b0: 20:2b:d9:19:cd:68:ce:39:12:0b:90:7d:ec:f1:47:6b:8d:30: 28:c8:81:e5:4c:45:7d:06:cf:a1:94:6c:21:17:e0:a6:19:33: 93:5f:7c:fd:af:72:d8:c0:92:36:eb:46:95:16:3c:db:88:63: a9:bb:4c:9f:ee:43:e1:30:c5:d9:bf:fc:d4:62:5a:e7:2d:a0: f0:ee:bb:69:2a:47:95:52:a0:dd:a3:e2:02:aa:78:a2:df:51: c3:10:e7:8c:b1:d6:4b:81:32:e1:09:c4:4f:c5:27:b8:b4:6b: 21:bf:3b:6a:2b:3c:03:56:d4:97:4f:81:75:c0:6d:aa:94:70: 28:7d:ac:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgZW83fFrthfdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YmNlNzlhN2YtODg4ZS00NmU2LTk5ZDYtMzE0YWVjOGU5YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlYbGIkpsNhsE68jbThb3xUNY0H2efXZoCLS GOaRn2noLK7k79CHt1ngCahOkGdyLByVlEyjdpSRQsT+URN9GswXkGLPJjbye7/J MmUIzY0zEunVkXI5xXzqJc2+ZSmMBRxIgozUoL9G1ihXS0PulzqHDK/sEptAYXCd UmeGczGLCN+JzbH91CZF2qBLDp7pyL9hA4HQ5vEFaaC80KOAsiRY16WpSeExfc9K 7W+v70Dq7mr8FDlx64iZmVdHAlMsTpXwcwSLxqBkiTqiUTDD3PcDcnR1VmPjxm0L cU5TTSZpgJLZt5AyYL4zvDCU+yXZd0Ao6s9MnjyR8W/SQwMlrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5/EPYXgdzRrWN9aOT1Q/msIfmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTBiYWU5MmUtNzFkZC0z NGViLTg3YWMtYjAyYjg3OWU1NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyXSNdVPwnV1xTAYXv8rHhoAL13JWGwpjYnOumP/fcfMK8T4L8Tc1gK 1cV4PL9ua17gEt9cJRVlOIrCM6FreaOhYiLtePmQxTOVBufR4FbDKklRABPqILa8 n6VwqWqAEoKxOsoksfF63OybN6l4fb58b0OfQvXgpLfuq1/rsCAr2RnNaM45EguQ fezxR2uNMCjIgeVMRX0Gz6GUbCEX4KYZM5NffP2vctjAkjbrRpUWPNuIY6m7TJ/u Q+Ewxdm//NRiWuctoPDuu2kqR5VSoN2j4gKqeKLfUcMQ54yx1kuBMuEJxE/FJ7i0 ayG/O2orPANW1JdPgXXAbaqUcCh9rAc= -----END CERTIFICATE-----Generated at Fri May 9 03:48:08 2025 by rpki-client