$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f9a71af-5f42-3a70-8add-3c23da85856b.roa File: 2f9a71af-5f42-3a70-8add-3c23da85856b.roa (raw, json) Hash identifier: SqgKl25OUh/BwQ/a0RTxxIoMTUy6dV7ZF4Ny8U1GBlw= Subject key identifier: D7:F1:BF:C7:CD:47:6E:29:1E:08:07:08:27:65:78:C6:F5:C7:12:52 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A09BC7DD8B75573182C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f9a71af-5f42-3a70-8add-3c23da85856b.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397218 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:09:bc:7d:d8:b7:55:73:18:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=5d8b3dce-314b-46c9-b00c-88a956081ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:f5:9d:c5:5a:1e:c1:c9:84:97:8c:f0:a3: ac:d5:45:78:72:10:f1:49:01:e6:4e:3e:3d:d9:00: cd:62:2b:a2:0b:d3:d2:43:1f:ed:d7:24:57:49:d2: 9f:0a:24:6b:05:0d:13:ea:c6:57:ce:84:fd:3f:94: c8:34:81:09:76:83:91:91:6c:e2:24:c3:7d:da:0d: 4b:91:0e:04:ff:8d:b6:a5:ba:e8:1b:f2:93:0a:a9: 34:e5:b0:99:a6:8f:83:51:ff:f7:fa:70:67:72:3c: c8:39:03:c2:92:50:6c:a0:c1:4a:a7:8b:db:ad:b6: e8:f6:97:9a:38:9d:8a:73:61:f4:6b:39:5d:f9:e7: c7:6d:82:9a:6d:55:b7:d7:4a:fa:fb:4e:61:ea:4c: 57:74:68:aa:11:0c:e9:cd:c4:f2:4e:28:7e:72:26: 76:35:6f:82:ee:a5:f5:a3:21:99:96:e4:78:88:a2: 11:89:9d:0a:4b:13:4c:7a:53:11:c2:4d:6b:34:bd: 6f:b5:57:a8:41:21:ea:49:21:d3:e4:65:22:82:81: df:c9:89:a7:c0:2f:c3:72:a3:b7:6a:a7:11:62:28: 05:0f:56:a7:2f:21:b6:c8:40:90:0e:66:72:9d:fa: f4:0e:12:4d:1b:bf:03:cc:b2:3d:d7:13:9f:f3:a1: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:BF:C7:CD:47:6E:29:1E:08:07:08:27:65:78:C6:F5:C7:12:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f9a71af-5f42-3a70-8add-3c23da85856b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b3:25:a9:3f:29:38:14:7f:ea:91:7e:32:43:6e:8b:97:d3: e5:bd:34:ec:00:d5:84:eb:b9:39:a0:75:51:eb:90:f5:90:f4: e7:f1:c5:82:14:90:55:06:5e:d5:4e:fc:a4:7e:fc:52:19:13: 52:8e:0a:3d:b9:48:73:00:a6:4f:81:62:2a:e9:d7:ef:f5:ec: 81:b7:57:55:38:98:eb:d5:64:69:1a:e9:fe:14:de:e2:dc:0d: 57:52:0c:70:0d:87:0b:2b:7d:67:6c:88:8b:d8:0c:66:ee:9b: fb:17:62:fe:fd:11:17:86:9b:af:68:08:27:c7:f6:34:5b:be: d1:db:95:0d:a0:04:fc:b9:e6:e4:b2:f5:59:00:eb:37:90:e4: 58:88:ab:c4:2c:b3:c1:1f:53:0a:3c:ba:ca:c1:4f:dd:c5:25: ce:7a:32:54:58:e9:ad:39:ad:99:21:bb:ae:6e:e9:15:36:95: c3:b3:5f:a8:95:f4:b3:41:8c:4b:6a:2a:32:97:17:30:b6:b7: 5a:0a:57:85:be:69:15:c4:03:04:70:82:41:73:6f:42:7f:22: 55:4d:54:2a:4b:15:1b:94:43:fc:a6:e0:b8:89:fa:9a:3b:97: 8e:b7:10:18:e6:33:40:d3:86:4c:7d:e2:c4:15:9c:ad:69:07: c9:7b:ce:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgm8fdi3VXMYLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NWQ4YjNkY2UtMzE0Yi00NmM5LWIwMGMtODhhOTU2MDgxY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohv1ncVaHsHJhJeM8KOs1UV4chDxSQHmTj49 2QDNYiuiC9PSQx/t1yRXSdKfCiRrBQ0T6sZXzoT9P5TINIEJdoORkWziJMN92g1L kQ4E/422pbroG/KTCqk05bCZpo+DUf/3+nBncjzIOQPCklBsoMFKp4vbrbbo9pea OJ2Kc2H0azld+efHbYKabVW310r6+05h6kxXdGiqEQzpzcTyTih+ciZ2NW+C7qX1 oyGZluR4iKIRiZ0KSxNMelMRwk1rNL1vtVeoQSHqSSHT5GUigoHfyYmnwC/DcqO3 aqcRYigFD1anLyG2yECQDmZynfr0DhJNG78DzLI91xOf86FArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfxv8fNR24pHggHCCdleMb1xxJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmY5YTcxYWYtNWY0Mi0z YTcwLThhZGQtM2MyM2RhODU4NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2zJak/KTgUf+qRfjJDbouX0+W9NOwA1YTruTmgdVHrkPWQ9OfxxYIU kFUGXtVO/KR+/FIZE1KOCj25SHMApk+BYirp1+/17IG3V1U4mOvVZGka6f4U3uLc DVdSDHANhwsrfWdsiIvYDGbum/sXYv79EReGm69oCCfH9jRbvtHblQ2gBPy55uSy 9VkA6zeQ5FiIq8Qss8EfUwo8usrBT93FJc56MlRY6a05rZkhu65u6RU2lcOzX6iV 9LNBjEtqKjKXFzC2t1oKV4W+aRXEAwRwgkFzb0J/IlVNVCpLFRuUQ/ym4LiJ+po7 l463EBjmM0DThkx94sQVnK1pB8l7zpw= -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:24 2025 by rpki-client