$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa File: c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa (raw, json) Hash identifier: M9m0FwfvYsXaY5NkzWwJNt4Lv+eJyvpNid9MJ4ZR/VU= Subject key identifier: D5:CB:36:A1:E0:81:5D:64:F1:AE:D0:32:83:2C:1D:5A:F3:26:03:F2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF4E93F3FA9E974ACE4180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 19905 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:4e:93:f3:fa:9e:97:4a:ce:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=e255cb39-ba18-4502-9014-938aa3b99d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:6c:1e:22:58:73:fa:f6:41:38:b2:64:20: af:27:ab:a4:d6:62:76:a1:84:ee:f5:04:95:70:20: 00:33:1b:81:60:a2:70:74:9f:72:79:41:79:06:fb: 58:89:21:78:c0:2e:e4:28:2b:93:3f:d1:dc:ac:cc: 69:22:c5:1f:ca:05:ce:04:b3:0f:59:75:fe:6d:a0: 50:a4:a4:17:c4:20:3e:67:74:5b:b5:59:41:40:e4: 6f:ed:d7:6a:60:eb:89:0e:c4:0e:20:aa:44:d8:63: 02:4b:20:c6:dc:3d:d6:05:6c:ad:46:34:d5:06:54: 3f:7b:12:cb:b1:0a:89:51:09:1f:9a:7c:26:60:a8: 85:71:a5:47:b8:20:59:83:58:20:86:bf:1d:3d:32: 55:e1:7c:79:a9:0c:d6:84:6b:f8:f2:f2:49:a2:14: 2d:8b:c1:ed:c9:19:25:5f:59:5d:8f:78:7d:ba:ab: f3:22:4f:4b:fe:e6:77:7b:f6:bd:eb:80:d1:ae:b4: 74:a2:56:90:4b:39:92:dc:63:1b:4a:2a:c5:5e:5e: 3e:85:49:20:a1:ac:22:3c:e6:5b:7d:8f:19:af:f6: 97:ce:e3:4e:f0:66:ae:4e:22:76:cb:44:9d:a9:ef: 60:4e:f7:4a:43:09:37:c7:81:e9:9c:ef:d4:a1:d4: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:36:A1:E0:81:5D:64:F1:AE:D0:32:83:2C:1D:5A:F3:26:03:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c65b9549-1487-3ac5-9205-d7fd09b0e09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7c:73:13:4a:e2:c4:3b:aa:d4:5f:aa:e3:60:9d:3c:55:d4: 20:f6:32:ad:33:9c:de:90:b3:3f:36:c0:72:aa:e9:13:d9:54: 63:20:0d:67:37:01:19:5d:85:52:12:ec:d1:83:89:08:f6:80: f4:e7:fc:ed:8e:70:ea:e5:c1:ea:2b:60:c8:50:fc:fa:53:53: 39:5d:17:e0:36:73:c5:08:20:18:54:32:2f:f8:bb:7a:ce:35: 9e:5a:bd:9e:05:7f:8d:ab:d8:7a:2c:fd:05:bc:70:9c:a2:c2: 76:35:c0:5f:77:03:61:5d:ed:a6:a6:51:99:c6:80:96:72:fe: da:c7:69:28:b4:5e:2a:9c:bc:17:74:4f:db:c3:6c:59:9d:d7: dc:63:cb:da:3f:3b:6f:fd:82:a8:5f:f8:2c:f6:5c:11:f9:87: f1:8f:f8:11:1c:65:b8:8a:8b:42:7e:f3:8c:76:fa:f7:df:3d: 27:02:97:b8:eb:76:b8:3f:75:f3:be:10:d9:82:1a:6b:62:49: 2d:1c:71:92:d0:da:d7:13:cf:d9:8a:94:07:ab:96:c6:26:6e: cc:64:66:95:4a:2a:f2:ff:d1:32:73:6c:17:04:44:40:27:ca: d8:d4:5b:42:49:4f:10:4a:79:f7:f8:66:a7:e0:9c:68:00:dd: 0d:d5:8a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz06T8/qel0rOQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTI1NWNiMzktYmExOC00NTAyLTkwMTQtOTM4YWEzYjk5ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNtsHiJYc/r2QTiyZCCvJ6uk1mJ2oYTu9QSV cCAAMxuBYKJwdJ9yeUF5BvtYiSF4wC7kKCuTP9HcrMxpIsUfygXOBLMPWXX+baBQ pKQXxCA+Z3RbtVlBQORv7ddqYOuJDsQOIKpE2GMCSyDG3D3WBWytRjTVBlQ/exLL sQqJUQkfmnwmYKiFcaVHuCBZg1gghr8dPTJV4Xx5qQzWhGv48vJJohQti8HtyRkl X1ldj3h9uqvzIk9L/uZ3e/a964DRrrR0olaQSzmS3GMbSirFXl4+hUkgoawiPOZb fY8Zr/aXzuNO8GauTiJ2y0Sdqe9gTvdKQwk3x4HpnO/UodSBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXLNqHggV1k8a7QMoMsHVrzJgPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzY1Yjk1NDktMTQ4Ny0z YWM1LTkyMDUtZDdmZDA5YjBlMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN8cxNK4sQ7qtRfquNgnTxV1CD2Mq0znN6Qsz82wHKq6RPZVGMgDWc3 ARldhVIS7NGDiQj2gPTn/O2OcOrlweorYMhQ/PpTUzldF+A2c8UIIBhUMi/4u3rO NZ5avZ4Ff42r2Hos/QW8cJyiwnY1wF93A2Fd7aamUZnGgJZy/trHaSi0XiqcvBd0 T9vDbFmd19xjy9o/O2/9gqhf+Cz2XBH5h/GP+BEcZbiKi0J+84x2+vffPScCl7jr drg/dfO+ENmCGmtiSS0ccZLQ2tcTz9mKlAerlsYmbsxkZpVKKvL/0TJzbBcEREAn ytjUW0JJTxBKeff4ZqfgnGgA3Q3ViiQ= -----END CERTIFICATE-----Generated at Tue May 6 23:24:45 2025 by rpki-client