$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa File: 23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa (raw, json) Hash identifier: 2u2fEBbrTt2FWJYcepd9TM1P/rAoXUAgAbDEIWtx5G4= Subject key identifier: 5F:71:A3:2B:A8:21:1F:05:F4:19:36:D6:D1:44:44:D6:2A:EC:EA:52 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DE580F57048CAB3A2780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397242 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:58:0f:57:04:8c:ab:3a:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1287e661-3442-4bf1-8cc7-e248d2aca66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:ef:d5:81:1f:86:67:bd:15:9f:77:e5:9b: 4f:90:9a:c2:d7:0c:05:7b:2e:4f:97:98:85:c8:18: 8e:51:35:e6:51:06:3f:00:e9:7a:e2:6d:f9:2c:3b: 10:dc:a0:73:e3:42:57:a6:4c:79:a0:04:45:ce:4d: 7b:10:f1:21:c3:fb:77:fa:0a:66:27:4d:97:fc:48: c6:e0:02:a6:a0:a5:fb:b5:ed:0e:bd:06:cc:c2:50: d7:2b:9e:4f:08:8a:25:f7:a6:8f:db:4c:58:0d:0c: 68:73:36:dc:a8:24:db:2a:af:62:05:91:9e:06:11: 29:b1:c5:ed:25:17:6f:62:93:36:2a:83:9a:0f:68: b1:cf:55:3f:cb:f7:76:42:34:24:64:5c:19:06:c8: 63:88:3d:ce:ac:25:2f:56:37:3c:cf:de:ed:ea:04: 9c:35:7a:b6:f2:91:e2:1b:fd:5b:cf:08:16:0c:a5: c5:9a:81:05:ad:f9:43:2b:1c:49:89:de:b4:37:66: d6:e8:7c:01:64:4b:22:ee:f2:e9:72:05:40:e2:a7: 93:f0:b7:4e:e3:06:99:e5:cb:6f:71:05:a9:32:57: 9b:05:25:65:bc:5d:51:e9:5e:af:5b:5a:1e:da:cf: c2:52:1b:6f:72:c1:f9:09:b2:1f:c6:7d:97:e2:d4: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:A3:2B:A8:21:1F:05:F4:19:36:D6:D1:44:44:D6:2A:EC:EA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:91:42:0c:da:cd:e3:45:0c:7a:70:62:ab:71:1a:05:28:12: 26:2d:16:80:df:04:53:89:96:06:34:a4:af:a1:95:00:44:61: a2:b1:c7:94:71:19:69:1a:6d:b5:39:93:a6:59:77:67:cb:47: 7a:eb:2a:73:97:a4:db:37:cf:66:12:87:3e:dd:4c:99:b5:ee: 9e:31:16:9b:da:30:c2:28:0f:b4:3f:55:26:66:8d:9a:74:d5: 62:2b:42:99:c7:a8:bc:42:93:46:0c:90:40:c3:9f:c9:2a:79: 0d:61:dd:e9:7c:b6:86:6a:a4:5d:ef:d5:df:67:86:8e:1f:de: 3f:17:86:4c:7d:db:58:4a:d2:a7:9f:e6:6d:3b:2b:41:49:4b: 11:14:23:fb:d2:e7:79:98:db:4c:cb:89:0e:1f:31:40:78:57: 7c:7e:fa:d5:47:0c:23:e4:e8:89:71:61:5c:19:5f:58:ec:1d: e7:b2:d3:59:24:b0:9b:55:e6:07:22:eb:a1:b1:29:50:44:21: 00:3b:c7:0f:9e:9e:10:af:2d:2b:dd:81:42:94:a2:d5:fb:bf: 8f:15:39:63:47:0e:f4:d1:01:7d:50:4f:eb:c6:44:b2:98:0c: 13:c9:f8:58:22:28:96:ea:9a:30:fe:46:82:72:e5:61:c6:f6: 91:6d:bc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt5YD1cEjKs6J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTI4N2U2NjEtMzQ0Mi00YmYxLThjYzctZTI0OGQyYWNhNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit3v1YEfhme9FZ935ZtPkJrC1wwFey5Pl5iF yBiOUTXmUQY/AOl64m35LDsQ3KBz40JXpkx5oARFzk17EPEhw/t3+gpmJ02X/EjG 4AKmoKX7te0OvQbMwlDXK55PCIol96aP20xYDQxoczbcqCTbKq9iBZGeBhEpscXt JRdvYpM2KoOaD2ixz1U/y/d2QjQkZFwZBshjiD3OrCUvVjc8z97t6gScNXq28pHi G/1bzwgWDKXFmoEFrflDKxxJid60N2bW6HwBZEsi7vLpcgVA4qeT8LdO4waZ5ctv cQWpMlebBSVlvF1R6V6vW1oe2s/CUhtvcsH5CbIfxn2X4tSLywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9xoyuoIR8F9Bk21tFERNYq7OpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjNjMGI3ZjAtMWM3Mi0z ZDI4LTgxNzUtMzk4NjdmM2I2ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKRQgzazeNFDHpwYqtxGgUoEiYtFoDfBFOJlgY0pK+hlQBEYaKxx5Rx GWkabbU5k6ZZd2fLR3rrKnOXpNs3z2YShz7dTJm17p4xFpvaMMIoD7Q/VSZmjZp0 1WIrQpnHqLxCk0YMkEDDn8kqeQ1h3el8toZqpF3v1d9nho4f3j8Xhkx921hK0qef 5m07K0FJSxEUI/vS53mY20zLiQ4fMUB4V3x++tVHDCPk6IlxYVwZX1jsHeey01kk sJtV5gci66GxKVBEIQA7xw+enhCvLSvdgUKUotX7v48VOWNHDvTRAX1QT+vGRLKY DBPJ+FgiKJbqmjD+RoJy5WHG9pFtvDo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:26 2025 by rpki-client