$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa File: 163cc04d-9b86-356f-a6af-e329a420468e.roa (raw, json) Hash identifier: zCReC/ZcsaLkY8O+AVZTaQx4ObVKPMyhqvTQYXH98/M= Subject key identifier: EB:15:43:CF:9E:78:0D:46:55:45:59:F2:03:69:31:3C:01:6F:AC:68 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0EAB0B9EBE85A1C52E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397234 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0e:ab:0b:9e:be:85:a1:c5:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=4ce4eb9f-9e9d-40f6-9ed9-eb7c56b64983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:b7:07:91:ec:7b:d8:eb:63:f1:a6:41:44: 7d:5b:6e:f2:29:ea:54:84:be:26:25:32:ac:b5:65: 2f:04:79:81:68:69:5d:f7:9f:d2:e0:65:e4:ba:c0: ee:e0:0a:18:52:39:7b:79:c3:64:54:92:42:8f:7b: 04:4a:03:ea:1a:ce:23:1a:77:3e:4b:aa:5a:04:7a: 95:3e:0d:13:f4:12:ab:73:d1:42:50:2f:82:0d:b8: 09:4b:c8:a8:fa:db:48:e1:fc:ba:be:23:6f:40:b5: 14:b6:0b:62:bb:d9:fb:f5:85:8a:3e:31:58:79:1e: 43:75:ff:a7:a4:3c:16:f0:82:ff:ff:21:c0:0c:2d: bc:53:c2:ea:e6:d6:bb:bd:cb:84:6f:51:48:92:74: 50:c5:4d:20:f0:cb:bc:29:6c:1d:f6:2e:51:6d:00: 1b:78:ea:8a:a7:b7:e2:02:4a:0a:68:ee:d4:89:87: 05:b3:ac:31:d0:18:cf:61:24:5f:b0:99:0b:be:49: 23:4a:b0:4e:ed:69:50:4e:52:a8:49:a1:72:e3:c4: ef:3a:ba:b4:8a:5e:fe:4b:f9:6b:5e:56:45:dd:02: b0:e0:7d:7d:9f:71:8d:9d:54:f6:b5:d3:45:4c:7e: 7b:77:7a:f1:a6:79:7e:0a:eb:bc:e7:06:ad:13:db: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:15:43:CF:9E:78:0D:46:55:45:59:F2:03:69:31:3C:01:6F:AC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/163cc04d-9b86-356f-a6af-e329a420468e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:63:a6:28:6e:c5:56:1f:c0:b9:d6:6d:e3:d3:ff:6d:7c:bc: 44:4d:4b:5f:20:cc:79:8b:e6:08:1c:b4:f7:6e:24:ad:26:3e: d4:e9:9f:e2:16:90:e1:7d:8f:de:e7:e1:23:1f:d4:7f:ad:99: 69:af:91:22:dc:1d:c5:b9:cf:cf:71:ac:e3:3f:fc:3b:72:5d: 0f:d0:61:23:bb:3a:7f:25:99:10:b0:a7:7f:a2:70:a2:20:46: 2d:73:ba:9f:ad:b9:7c:f1:4f:3c:c1:3d:0f:f8:14:ce:e6:1f: 20:ba:37:70:94:79:04:fe:71:b9:b3:ba:2d:87:fe:a1:50:00: 7b:fb:b4:c5:80:e8:e7:99:4f:9c:50:6d:92:2a:1b:2a:c9:9f: ad:d2:99:31:02:43:74:62:c4:5b:ca:73:82:88:bd:e1:55:2f: 11:e2:aa:a1:f2:67:2f:31:da:cf:3f:66:18:55:59:2e:24:ec: 14:25:64:f9:dd:33:af:5b:3f:56:4d:54:b0:c5:e6:a2:fd:77: 4b:c9:8e:98:19:d5:5e:9e:aa:0f:8a:95:7b:77:48:2f:93:e6: 02:51:c5:0a:c6:12:7f:a5:31:5f:d9:fe:56:4e:37:72:73:a2: 7a:45:94:6f:21:1c:e7:91:d0:f8:b9:1c:3a:9e:dc:aa:1a:24: 43:37:91:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWg6rC56+haHFLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NGNlNGViOWYtOWU5ZC00MGY2LTllZDktZWI3YzU2YjY0OTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNe3B5Hse9jrY/GmQUR9W27yKepUhL4mJTKs tWUvBHmBaGld95/S4GXkusDu4AoYUjl7ecNkVJJCj3sESgPqGs4jGnc+S6paBHqV Pg0T9BKrc9FCUC+CDbgJS8io+ttI4fy6viNvQLUUtgtiu9n79YWKPjFYeR5Ddf+n pDwW8IL//yHADC28U8Lq5ta7vcuEb1FIknRQxU0g8Mu8KWwd9i5RbQAbeOqKp7fi AkoKaO7UiYcFs6wx0BjPYSRfsJkLvkkjSrBO7WlQTlKoSaFy48TvOrq0il7+S/lr XlZF3QKw4H19n3GNnVT2tdNFTH57d3rxpnl+Cuu85watE9vbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsVQ8+eeA1GVUVZ8gNpMTwBb6xoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTYzY2MwNGQtOWI4Ni0z NTZmLWE2YWYtZTMyOWE0MjA0NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZjpihuxVYfwLnWbePT/218vERNS18gzHmL5ggctPduJK0mPtTpn+IW kOF9j97n4SMf1H+tmWmvkSLcHcW5z89xrOM//DtyXQ/QYSO7On8lmRCwp3+icKIg Ri1zup+tuXzxTzzBPQ/4FM7mHyC6N3CUeQT+cbmzui2H/qFQAHv7tMWA6OeZT5xQ bZIqGyrJn63SmTECQ3RixFvKc4KIveFVLxHiqqHyZy8x2s8/ZhhVWS4k7BQlZPnd M69bP1ZNVLDF5qL9d0vJjpgZ1V6eqg+KlXt3SC+T5gJRxQrGEn+lMV/Z/lZON3Jz onpFlG8hHOeR0Pi5HDqe3KoaJEM3kSc= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:33 2025 by rpki-client