$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb16f501-4939-3a47-819a-58b8d5442e0e.roa File: fb16f501-4939-3a47-819a-58b8d5442e0e.roa (raw, json) Hash identifier: +ZKIRe3YbXHwJkGpawBaMIia6s8UbrqBBzUU7OBd1jU= Subject key identifier: 58:AA:BF:93:AC:59:82:D1:09:25:E6:27:46:3F:94:D7:5E:2F:CD:76 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DB4126F925AA9B301300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb16f501-4939-3a47-819a-58b8d5442e0e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397217 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:db:41:26:f9:25:aa:9b:30:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=9ab49e5a-18b5-429f-99ac-3bfcb6af201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:37:ad:33:f4:60:75:97:e3:c2:f9:2f:c2: 55:da:5f:06:c2:d6:01:3d:f1:16:85:c1:83:04:bc: 97:04:3c:f3:6b:fd:c3:7c:cd:56:af:90:17:2c:d7: e6:c4:5b:54:84:4d:11:18:c1:a0:04:d5:10:ec:dc: 24:e6:86:20:b6:b3:6a:aa:a6:fd:fb:b1:76:a1:31: 91:1d:e9:1a:81:c2:50:07:83:6e:23:94:56:c6:5a: 9a:a0:4a:ab:b3:1c:52:4d:e7:3a:21:29:9f:e2:d3: 4e:dd:4d:64:3f:ee:19:1e:98:4c:5a:ba:76:43:10: 63:f7:11:ee:a8:ec:92:10:98:12:fb:b0:46:a3:6b: 50:e9:99:15:9a:ae:ad:a3:e3:0c:b0:13:3d:26:da: df:c0:02:be:26:f5:42:43:a5:5e:bb:27:d5:5b:c4: e4:8d:16:c6:4c:b2:db:0f:57:04:66:0f:80:d8:42: de:f5:bb:b8:d6:29:0d:c6:4d:e7:77:84:97:b9:69: 0c:33:4e:c7:81:03:41:19:42:25:fc:8c:d2:31:0f: a3:32:b6:01:9e:9b:eb:61:22:8f:a8:c7:8d:cb:7c: 64:1f:11:05:c1:57:e5:b4:f0:d7:28:ef:53:d0:d1: db:39:cd:9c:9a:3e:d8:04:0d:c0:9c:3f:31:f6:33: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:BF:93:AC:59:82:D1:09:25:E6:27:46:3F:94:D7:5E:2F:CD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb16f501-4939-3a47-819a-58b8d5442e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e8:75:09:12:e3:40:05:13:81:77:59:23:49:45:71:35:52: f7:c3:58:34:71:c1:1a:66:bd:a2:c7:7d:91:a6:84:bc:b6:e3: ae:28:ef:9f:ee:f8:c5:0f:c5:7b:4a:d8:ff:4b:cb:9c:0a:00: 10:64:41:e4:66:df:a7:0b:3f:4c:79:0b:94:6c:fd:3c:34:45: 64:9b:f4:2f:55:ff:cf:d9:ac:82:71:7b:fb:00:ab:d6:d6:0c: 49:15:a2:53:a6:b3:7f:ed:f9:66:e1:c1:8d:69:05:ca:86:33: de:31:d5:83:2a:1e:a3:c3:65:78:d0:8c:a0:ec:d4:f8:eb:92: 84:d9:40:5c:33:2e:cd:ee:36:43:f6:9f:f1:60:af:b3:0f:5d: 38:09:11:aa:a6:57:af:9d:53:15:24:ed:70:13:fe:ce:ac:77: 83:ff:2a:5b:31:a3:0f:9c:da:35:de:2a:de:77:84:c9:66:a1: 7d:a2:fc:2c:f0:4e:2d:81:27:a8:cc:8e:e1:d1:9b:2a:2e:eb: 72:9f:29:69:92:07:00:31:b4:67:04:59:55:06:d8:c2:45:9e: 6d:dc:cd:9f:4a:b2:3b:32:42:4a:08:07:3f:76:eb:25:ee:0e: 9b:df:1e:bb:16:4a:12:8b:0a:45:f1:9b:4c:cd:12:62:98:ac: 72:e5:43:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRttBJvklqpswEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OWFiNDllNWEtMThiNS00MjlmLTk5YWMtM2JmY2I2YWYyMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFA3rTP0YHWX48L5L8JV2l8GwtYBPfEWhcGD BLyXBDzza/3DfM1Wr5AXLNfmxFtUhE0RGMGgBNUQ7Nwk5oYgtrNqqqb9+7F2oTGR HekagcJQB4NuI5RWxlqaoEqrsxxSTec6ISmf4tNO3U1kP+4ZHphMWrp2QxBj9xHu qOySEJgS+7BGo2tQ6ZkVmq6to+MMsBM9JtrfwAK+JvVCQ6VeuyfVW8TkjRbGTLLb D1cEZg+A2ELe9bu41ikNxk3nd4SXuWkMM07HgQNBGUIl/IzSMQ+jMrYBnpvrYSKP qMeNy3xkHxEFwVfltPDXKO9T0NHbOc2cmj7YBA3AnD8x9jN2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiqv5OsWYLRCSXmJ0Y/lNdeL812MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmIxNmY1MDEtNDkzOS0z YTQ3LTgxOWEtNThiOGQ1NDQyZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPodQkS40AFE4F3WSNJRXE1UvfDWDRxwRpmvaLHfZGmhLy2464o75/u +MUPxXtK2P9Ly5wKABBkQeRm36cLP0x5C5Rs/Tw0RWSb9C9V/8/ZrIJxe/sAq9bW DEkVolOms3/t+WbhwY1pBcqGM94x1YMqHqPDZXjQjKDs1PjrkoTZQFwzLs3uNkP2 n/Fgr7MPXTgJEaqmV6+dUxUk7XAT/s6sd4P/Klsxow+c2jXeKt53hMlmoX2i/Czw Ti2BJ6jMjuHRmyou63KfKWmSBwAxtGcEWVUG2MJFnm3czZ9KsjsyQkoIBz926yXu DpvfHrsWShKLCkXxm0zNEmKYrHLlQ0M= -----END CERTIFICATE-----Generated at Sat May 10 21:43:28 2025 by rpki-client