$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa File: 8409dc48-d96d-387f-b8c6-f8da865cae9e.roa (raw, json) Hash identifier: 2AxEdtO0H79tBvb8F3jewfbXuisI8BrH2OIDQsXwbKY= Subject key identifier: AE:98:32:DC:09:26:DD:95:BD:E1:7F:DE:CD:D2:CC:42:FF:6D:CB:B2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0D312B3C0BA580ADE780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397243 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0d:31:2b:3c:0b:a5:80:ad:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=ec43c20e-4910-4593-b91c-238c33fae976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:61:a1:57:5c:c6:d6:a6:d6:3b:be:3c:6e: 5e:53:bd:1d:3c:a1:b6:e0:57:d8:5c:dd:ec:3e:46: 37:82:a0:5a:02:bd:33:7b:08:a3:75:66:fb:7c:29: e8:a3:d5:92:6d:e9:d8:3f:d7:46:9e:72:04:43:19: d4:36:50:05:fb:cd:78:9e:b8:e2:87:7c:15:81:0e: 85:b1:e8:c4:c6:4f:5a:fb:75:02:a2:e7:0c:c3:0b: 9c:fc:c6:69:4a:0b:cc:a7:ab:39:00:36:a6:64:82: c3:d7:b5:9c:de:a7:df:79:31:1c:cf:20:4f:e7:0c: c3:f9:15:b7:a9:39:47:d9:26:95:ad:a1:0e:66:a3: 28:d5:ea:67:4e:a8:ce:c8:61:5f:b2:52:65:4d:70: 4b:39:29:3b:ba:07:a0:85:af:bc:c1:cf:83:c0:d7: 64:fd:e4:e8:6b:d1:b8:e0:33:61:1f:9a:38:f3:a9: 73:62:e9:dd:e4:25:d8:31:ae:6b:86:71:08:cd:5f: 0d:71:73:94:21:78:7a:02:c5:e3:29:d3:12:97:dc: 8d:c9:c9:69:c7:89:ac:b0:08:78:25:dc:10:7a:d0: e6:e8:59:b8:83:bc:03:9d:f3:6f:49:a4:59:03:70: 49:7f:ff:1b:48:75:46:f6:87:8e:85:95:8e:43:c9: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:98:32:DC:09:26:DD:95:BD:E1:7F:DE:CD:D2:CC:42:FF:6D:CB:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2e:b4:2a:c8:e8:86:47:15:9c:a5:1e:80:82:a3:21:f4:de: 32:b5:ac:17:e9:fa:f5:af:4a:90:62:d2:d5:6d:de:bd:fe:1b: 8b:e5:6c:ae:fe:42:61:48:6b:d1:c8:95:8c:b7:2f:d0:80:a0: 5c:f7:d0:80:34:40:d0:5e:24:0a:1b:42:bf:17:c3:23:d0:93: 85:7f:2e:60:fb:34:03:0d:58:2b:81:e1:51:38:fd:2f:c5:40: 38:30:f8:06:fb:19:87:36:85:08:a4:65:bf:42:d8:fb:53:db: 54:5a:30:1c:47:00:3c:f4:7b:ae:31:83:6d:e7:5a:f7:95:e9: 3f:e6:75:f7:1d:a0:c5:c1:b7:62:3a:4a:54:a8:7c:6a:89:de: 36:cd:f6:1b:45:9b:df:59:5b:26:32:53:9b:25:32:c8:57:d0: 84:6e:89:56:fb:ea:33:0a:3a:a7:67:12:64:db:e7:e9:fd:29: 20:da:41:ee:89:7f:bf:09:a3:65:c0:40:9e:36:dc:af:e8:56: d1:a6:4f:35:28:ba:f6:1e:74:98:15:4d:00:53:d8:87:e6:98: 08:ed:9d:ab:b7:c0:02:d8:d0:a1:13:ca:44:87:cd:7f:28:2b: e0:a1:02:0d:dd:b3:5b:66:a7:43:c7:e7:32:99:8a:e6:2e:ae: 20:7b:f8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWg0xKzwLpYCt54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZWM0M2MyMGUtNDkxMC00NTkzLWI5MWMtMjM4YzMzZmFlOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2xhoVdcxtam1ju+PG5eU70dPKG24FfYXN3s PkY3gqBaAr0zewijdWb7fCnoo9WSbenYP9dGnnIEQxnUNlAF+814nrjih3wVgQ6F sejExk9a+3UCoucMwwuc/MZpSgvMp6s5ADamZILD17Wc3qffeTEczyBP5wzD+RW3 qTlH2SaVraEOZqMo1epnTqjOyGFfslJlTXBLOSk7ugegha+8wc+DwNdk/eToa9G4 4DNhH5o486lzYund5CXYMa5rhnEIzV8NcXOUIXh6AsXjKdMSl9yNyclpx4mssAh4 JdwQetDm6Fm4g7wDnfNvSaRZA3BJf/8bSHVG9oeOhZWOQ8lH4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6YMtwJJt2VveF/3s3SzEL/bcuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODQwOWRjNDgtZDk2ZC0z ODdmLWI4YzYtZjhkYTg2NWNhZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAutCrI6IZHFZylHoCCoyH03jK1rBfp+vWvSpBi0tVt3r3+G4vlbK7+ QmFIa9HIlYy3L9CAoFz30IA0QNBeJAobQr8XwyPQk4V/LmD7NAMNWCuB4VE4/S/F QDgw+Ab7GYc2hQikZb9C2PtT21RaMBxHADz0e64xg23nWveV6T/mdfcdoMXBt2I6 SlSofGqJ3jbN9htFm99ZWyYyU5slMshX0IRuiVb76jMKOqdnEmTb5+n9KSDaQe6J f78Jo2XAQJ423K/oVtGmTzUouvYedJgVTQBT2IfmmAjtnau3wALY0KETykSHzX8o K+ChAg3ds1tmp0PH5zKZiuYuriB7+Is= -----END CERTIFICATE-----Generated at Thu May 8 20:46:51 2025 by rpki-client