$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa File: 103e920d-3da6-33df-9807-8d30787407b9.roa (raw, json) Hash identifier: L2i1ySGyWqlCV7ujkp+T6PNYf/Vw4L6SMgebCXZr2RQ= Subject key identifier: 7E:32:ED:36:07:92:E5:27:81:76:91:33:25:29:4D:9B:60:A6:43:51 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0C9F5D60A5490B30E800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397233 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0c:9f:5d:60:a5:49:0b:30:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=6062bde7-0610-4c92-9688-bd8cd425f0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:00:a8:f8:5b:58:1b:c0:b5:68:32:b6:40: 88:a0:54:85:8c:1e:ac:57:83:92:a1:65:f9:a3:de: 71:64:83:0f:1f:39:86:ea:c1:44:9b:80:c4:fc:28: 71:1e:f4:b7:51:12:9e:df:69:a2:7f:db:e6:f9:62: 07:89:55:3f:f7:b6:0d:00:c5:d0:19:02:de:3e:4b: a7:f7:86:d1:a6:d3:db:29:9e:a8:a8:19:d2:f5:24: be:ee:44:6f:36:22:88:44:b4:2d:e4:ea:77:b7:aa: 44:ae:73:34:67:54:bf:83:fc:da:8b:d1:0b:73:f9: 3d:6b:0b:ba:3b:d1:1f:82:b7:96:10:a9:d5:19:7c: f1:a8:ed:39:49:09:88:19:3a:9c:fc:e5:59:2e:aa: 2d:8e:8e:da:a7:10:59:b8:03:ee:60:45:14:2b:14: 17:42:67:3c:8d:54:6e:13:52:a0:18:58:27:48:fb: 49:fe:4a:c1:f8:9b:e0:8b:10:d6:c9:99:66:7c:b6: 9f:6d:d1:d6:db:92:d0:cd:f2:96:3a:9d:72:2d:b9: 1d:85:67:6c:5d:6f:e3:43:c9:8b:db:27:20:1f:12: 62:2b:07:50:70:f5:d3:06:b9:e4:c2:4a:17:e0:a0: 45:b7:22:48:c5:09:82:0a:a9:20:f5:8f:70:d9:1f: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:32:ED:36:07:92:E5:27:81:76:91:33:25:29:4D:9B:60:A6:43:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:43:5a:ba:f5:a2:49:bf:0e:69:2d:fd:99:b1:89:c5:57:cc: 3d:77:38:5a:db:6f:ce:e4:8e:fc:d4:c1:e6:42:31:4e:2d:f6: 1a:24:c6:6a:ee:21:d1:7d:d0:44:96:01:01:4e:42:6e:2d:ae: b2:33:47:2c:94:b6:5a:c8:56:18:36:db:a8:e6:39:26:ab:2f: 51:b9:47:50:6a:f2:e9:a6:25:84:ff:97:2b:00:2f:96:5f:d9: d0:e2:2b:05:cc:fe:e8:d6:3e:1b:b1:d5:8b:d3:5a:99:45:14: 75:dd:9a:bc:3d:1f:ad:b5:77:cd:6d:fc:a1:04:40:02:e2:51: ea:67:9c:d9:03:fc:b9:bf:1a:5b:b9:9c:10:fc:b8:ba:4f:42: cd:a2:46:76:27:d1:45:72:34:f4:18:6c:e8:73:63:f9:29:82: 1e:31:fb:4e:71:9e:39:9b:29:a2:3e:c5:5e:d1:94:f7:da:87: c3:19:87:87:15:69:1c:79:f2:dd:7e:d4:76:57:e4:73:be:f6: 95:ab:88:3d:12:ed:b3:a4:8d:b1:d5:7c:1e:ea:f1:cb:95:36: 37:ad:16:f5:bb:d4:ab:bf:ef:4c:d4:7a:2a:cd:05:47:20:c0: 55:45:94:0d:70:65:1f:74:b8:de:ba:4d:1a:42:6d:f9:29:8d: e1:2e:0f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgyfXWClSQsw6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NjA2MmJkZTctMDYxMC00YzkyLTk2ODgtYmQ4Y2Q0MjVmMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWoAqPhbWBvAtWgytkCIoFSFjB6sV4OSoWX5 o95xZIMPHzmG6sFEm4DE/ChxHvS3URKe32mif9vm+WIHiVU/97YNAMXQGQLePkun 94bRptPbKZ6oqBnS9SS+7kRvNiKIRLQt5Op3t6pErnM0Z1S/g/zai9ELc/k9awu6 O9EfgreWEKnVGXzxqO05SQmIGTqc/OVZLqotjo7apxBZuAPuYEUUKxQXQmc8jVRu E1KgGFgnSPtJ/krB+JvgixDWyZlmfLafbdHW25LQzfKWOp1yLbkdhWdsXW/jQ8mL 2ycgHxJiKwdQcPXTBrnkwkoX4KBFtyJIxQmCCqkg9Y9w2R+2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4y7TYHkuUngXaRMyUpTZtgpkNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTAzZTkyMGQtM2RhNi0z M2RmLTk4MDctOGQzMDc4NzQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABDWrr1okm/Dmkt/ZmxicVXzD13OFrbb87kjvzUweZCMU4t9hokxmru IdF90ESWAQFOQm4trrIzRyyUtlrIVhg226jmOSarL1G5R1Bq8ummJYT/lysAL5Zf 2dDiKwXM/ujWPhux1YvTWplFFHXdmrw9H621d81t/KEEQALiUepnnNkD/Lm/Glu5 nBD8uLpPQs2iRnYn0UVyNPQYbOhzY/kpgh4x+05xnjmbKaI+xV7RlPfah8MZh4cV aRx58t1+1HZX5HO+9pWriD0S7bOkjbHVfB7q8cuVNjetFvW71Ku/70zUeirNBUcg wFVFlA1wZR90uN66TRpCbfkpjeEuD0I= -----END CERTIFICATE-----Generated at Sun Apr 27 05:45:09 2025 by rpki-client