$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa File: 52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa (raw, json) Hash identifier: UZjJH+sjCU6siX/qVwAwGRojzUyscQkCAJsTSQdM2W8= Subject key identifier: B8:FF:F9:59:79:79:FC:60:13:AE:63:53:40:4C:27:F1:F9:9B:8C:C8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF50D2019C3C38AA1B4700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397216 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:50:d2:01:9c:3c:38:aa:1b:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0b950f01-3f60-4867-9b05-85ec764c6cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:9e:87:d2:60:1c:be:0a:ff:bb:a9:1f:c5: de:94:a0:12:a6:3e:38:0d:4b:ab:37:15:3d:68:ca: ca:fb:7e:27:44:c2:0c:80:b2:db:88:37:1c:9e:43: 62:e1:73:28:e6:cb:f9:36:1a:99:e0:4a:ef:9c:31: 5c:85:88:6a:7e:5c:74:e0:03:f9:41:eb:a8:ab:64: 28:3d:10:6b:0b:cb:99:8e:93:b0:70:4c:3a:35:f3: 30:44:44:22:85:1d:72:5b:95:de:fb:d7:f9:95:e9: a4:e2:14:2d:49:dd:10:d6:ae:66:28:ff:2d:66:f1: 3e:42:fe:34:c0:4d:ef:b2:a9:c2:c9:25:89:bc:74: 93:62:86:77:51:dd:5c:36:e9:27:71:80:da:68:39: b5:4d:26:e0:7d:dd:63:08:0f:42:33:e2:b4:b1:67: 89:eb:01:31:26:aa:57:84:d2:ba:82:d2:e0:2a:8e: 0b:8e:c7:dc:d5:18:e4:a1:61:b6:c8:11:5d:c5:44: 1c:f3:24:1f:e5:ef:b6:3a:97:a2:a9:1a:bb:1c:a5: ef:6c:8f:5f:64:0e:00:65:3d:33:90:3a:48:6d:0c: fc:ee:7c:5f:91:49:a7:9e:af:85:b8:e3:84:f1:4c: 25:67:2a:21:c6:27:6f:10:34:e6:70:98:68:ad:3b: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:F9:59:79:79:FC:60:13:AE:63:53:40:4C:27:F1:F9:9B:8C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52b0b9d1-843a-3dad-98a9-4f1dc3134a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:06:37:19:64:54:75:65:7d:3d:c1:60:12:1a:59:87:1e:f2: 51:e7:79:e7:dd:1d:a7:c6:df:62:11:10:67:7a:dc:15:ff:6d: af:dc:b9:4e:59:04:72:4e:6b:ee:fb:bb:19:29:e2:1e:c7:d3: dc:77:02:76:78:3f:d6:79:ab:85:77:1b:04:41:64:2c:04:91: 91:9f:be:b4:30:76:fb:54:a5:8a:77:fd:b9:00:f3:6a:e1:c9: 2d:c2:76:9f:c4:6f:b7:18:f8:ca:8e:75:01:72:1b:f4:7f:f1: b7:ec:5e:30:4c:78:0a:bd:63:af:5f:fa:fd:61:77:c7:f7:43: e3:0f:9a:3a:cc:2f:b8:ac:22:8a:93:a6:99:d0:ec:b4:5e:71: 39:06:02:13:1d:99:5f:37:3f:50:26:8d:d9:30:ad:67:d3:76: 9d:8e:25:6b:3a:d9:3a:0b:06:59:fd:59:57:45:c2:dd:cb:1e: 94:e8:bb:52:a4:7f:69:49:d9:04:30:c0:25:54:b8:b4:ab:99: 2b:46:43:9e:f2:60:08:37:67:cc:a3:14:e4:b7:bd:6b:9d:3e: e5:ef:fd:b7:53:cf:f0:58:a1:bc:09:ac:2b:2b:c1:ac:7c:c7: 78:77:56:ee:5d:f9:6e:1a:f3:32:2a:15:b0:e9:91:e8:de:e2: eb:0c:be:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1DSAZw8OKobRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGI5NTBmMDEtM2Y2MC00ODY3LTliMDUtODVlYzc2NGM2Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiCeh9JgHL4K/7upH8XelKASpj44DUurNxU9 aMrK+34nRMIMgLLbiDccnkNi4XMo5sv5NhqZ4ErvnDFchYhqflx04AP5Qeuoq2Qo PRBrC8uZjpOwcEw6NfMwREQihR1yW5Xe+9f5lemk4hQtSd0Q1q5mKP8tZvE+Qv40 wE3vsqnCySWJvHSTYoZ3Ud1cNukncYDaaDm1TSbgfd1jCA9CM+K0sWeJ6wExJqpX hNK6gtLgKo4Ljsfc1RjkoWG2yBFdxUQc8yQf5e+2OpeiqRq7HKXvbI9fZA4AZT0z kDpIbQz87nxfkUmnnq+FuOOE8UwlZyohxidvEDTmcJhorTswiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj/+Vl5efxgE65jU0BMJ/H5m4zIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTJiMGI5ZDEtODQzYS0z ZGFkLTk4YTktNGYxZGMzMTM0YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIGNxlkVHVlfT3BYBIaWYce8lHneefdHafG32IREGd63BX/ba/cuU5Z BHJOa+77uxkp4h7H09x3AnZ4P9Z5q4V3GwRBZCwEkZGfvrQwdvtUpYp3/bkA82rh yS3Cdp/Eb7cY+MqOdQFyG/R/8bfsXjBMeAq9Y69f+v1hd8f3Q+MPmjrML7isIoqT ppnQ7LRecTkGAhMdmV83P1AmjdkwrWfTdp2OJWs62ToLBln9WVdFwt3LHpTou1Kk f2lJ2QQwwCVUuLSrmStGQ57yYAg3Z8yjFOS3vWudPuXv/bdTz/BYobwJrCsrwax8 x3h3Vu5d+W4a8zIqFbDpkeje4usMvvM= -----END CERTIFICATE-----Generated at Fri May 9 13:50:12 2025 by rpki-client