$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json) Hash identifier: joB21VY6nQnr89WWr+wCal9Opby3mzuUNc/cQnIHbMc= Subject key identifier: 8C:C9:F1:D7:30:43:BE:7D:7E:8C:E7:AE:04:DE:1E:55:E7:53:A5:22 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246F039075553AC4245ED80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397232 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f0:39:07:55:53:ac:42:45:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=cce882ab-9ee7-4588-b438-7f048bd36efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:11:e2:47:1a:f1:e5:83:0f:85:86:d3:9b: 54:50:2f:dd:cc:fe:e4:35:84:1f:36:da:80:b4:3d: e7:f4:8b:32:82:39:21:fe:b7:74:9b:c2:d3:49:0c: c7:58:68:e5:c4:67:1c:6c:61:e4:dc:f7:a7:67:a2: 8c:25:5e:8f:67:48:e8:b1:c5:07:7e:2f:ae:05:a0: 91:cd:c8:7b:4f:b9:9b:62:c1:9f:29:59:ea:1a:99: ba:97:9c:3e:0c:57:15:33:9c:00:e0:2e:a8:b2:d4: 4e:ef:30:56:12:6f:66:92:78:68:76:26:63:67:40: 36:9e:69:f2:80:ae:59:08:44:b9:68:58:cb:d3:f9: d6:c2:79:94:5e:b5:29:20:01:8f:ce:76:90:2a:51: a1:bf:d0:e9:e5:2a:d9:ce:ac:ec:e6:42:1b:f1:15: 2d:62:56:9e:6b:28:9d:f8:b6:cf:24:98:03:5d:6e: b2:d9:ee:b7:f6:cc:42:de:44:63:80:af:0d:70:7a: 7b:5c:d6:77:3a:83:11:af:e3:05:f6:51:5d:16:c1: bf:7d:98:ac:b5:24:d7:04:af:92:a7:ea:7f:77:56: 3c:de:d7:11:ee:78:db:c9:af:23:68:ec:f9:28:7c: c2:c9:ee:d4:49:3f:f6:78:d3:98:a4:13:96:e1:0b: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:F1:D7:30:43:BE:7D:7E:8C:E7:AE:04:DE:1E:55:E7:53:A5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b9:82:d9:77:10:71:fb:c9:fb:de:a0:e2:4c:3b:92:1c:13: 16:23:d8:08:19:ee:36:34:2b:e9:dc:68:2f:72:72:e2:c7:5d: 1b:49:40:e3:d9:02:83:52:1e:2a:7b:02:d7:da:13:1b:24:74: b6:e3:b4:18:3d:e8:18:d9:44:c3:d9:0b:92:e8:f4:cb:a0:8a: 5d:a5:83:b2:3e:3f:5c:f2:8e:60:f0:54:45:1a:b5:ee:9f:28: ee:d9:19:66:da:f8:3b:82:34:35:c4:33:a5:6e:1e:27:78:a7: 45:19:0c:42:55:fc:15:3b:8d:83:d9:51:4a:49:62:44:38:e4: 39:69:25:2b:68:a2:b1:48:0c:18:ec:6d:70:a2:39:52:57:5b: 48:1f:72:a9:a1:c8:30:fd:2a:2d:51:a3:f0:af:89:9b:60:c7: fb:99:e2:67:a2:56:e1:79:72:95:00:81:30:4b:0f:02:29:39: bd:2c:eb:c5:2f:57:77:27:dc:6f:03:e3:30:90:4e:17:df:09: 05:ce:a5:0b:49:d7:5e:7e:4a:73:b2:b2:d9:25:c9:e9:b9:e1: 94:75:3b:cb:85:d5:5a:c9:63:b1:c2:02:a4:31:ca:96:32:ab: f1:35:b1:b5:47:dc:c4:fe:83:4a:08:42:12:ea:b5:ff:d1:15: 9b:4f:37:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvA5B1VTrEJF7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Y2NlODgyYWItOWVlNy00NTg4LWI0MzgtN2YwNDhiZDM2ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVcR4kca8eWDD4WG05tUUC/dzP7kNYQfNtqA tD3n9Isygjkh/rd0m8LTSQzHWGjlxGccbGHk3PenZ6KMJV6PZ0joscUHfi+uBaCR zch7T7mbYsGfKVnqGpm6l5w+DFcVM5wA4C6ostRO7zBWEm9mknhodiZjZ0A2nmny gK5ZCES5aFjL0/nWwnmUXrUpIAGPznaQKlGhv9Dp5SrZzqzs5kIb8RUtYlaeayid +LbPJJgDXW6y2e639sxC3kRjgK8NcHp7XNZ3OoMRr+MF9lFdFsG/fZistSTXBK+S p+p/d1Y83tcR7njbya8jaOz5KHzCye7UST/2eNOYpBOW4QsVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzJ8dcwQ759foznrgTeHlXnU6UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FlNjBlNzAtZTVmZS0z ODAyLWFlNTUtZjY4ZTIzYTE5NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW5gtl3EHH7yfveoOJMO5IcExYj2AgZ7jY0K+ncaC9ycuLHXRtJQOPZ AoNSHip7AtfaExskdLbjtBg96BjZRMPZC5Lo9Mugil2lg7I+P1zyjmDwVEUate6f KO7ZGWba+DuCNDXEM6VuHid4p0UZDEJV/BU7jYPZUUpJYkQ45DlpJStoorFIDBjs bXCiOVJXW0gfcqmhyDD9Ki1Ro/CviZtgx/uZ4meiVuF5cpUAgTBLDwIpOb0s68Uv V3cn3G8D4zCQThffCQXOpQtJ115+SnOystklyem54ZR1O8uF1VrJY7HCAqQxypYy q/E1sbVH3MT+g0oIQhLqtf/RFZtPN5w= -----END CERTIFICATE-----Generated at Fri May 9 08:39:34 2025 by rpki-client