$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa File: 3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa (raw, json) Hash identifier: y0ZP+VO+3fUZe5OYwb1fkAaIcZ8N6Ep80oqpzKfyyKM= Subject key identifier: 7C:95:FC:5F:90:F6:BA:A7:5C:A3:01:27:4B:16:DE:BD:4F:C7:A4:42 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A06F7EF7BC1ACBC9FEC00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397234 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:06:f7:ef:7b:c1:ac:bc:9f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=34bf963f-15ac-42e1-b2bf-a33ae06953d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:1d:28:bc:42:cf:bc:db:98:a2:33:80:27: f6:74:db:87:ba:bd:15:06:61:df:94:dd:5f:dd:8d: 25:9d:fa:b1:e9:3e:a2:3d:5a:c4:8c:03:c8:16:bb: e1:6b:11:a5:10:10:26:b0:42:ed:9f:3b:d1:1f:de: d7:f9:8c:f0:61:04:dd:b0:92:64:48:ca:14:38:89: 5f:3d:ed:ae:43:40:5c:5e:51:47:e2:4c:f3:eb:37: ff:2e:6c:18:08:5c:fc:e0:cb:34:c8:95:4f:42:db: 1c:32:4d:ea:01:dd:bc:7b:64:81:24:24:cc:b1:82: 4f:63:ae:dd:1c:96:9b:58:ae:69:01:62:99:7e:0e: 7e:be:c1:22:37:78:3b:7b:4d:34:8a:c7:45:ca:5c: e3:8e:ed:97:2c:b8:a4:b2:d4:e7:54:08:e5:eb:31: fc:7d:7a:e7:c7:fa:02:b8:ac:0e:78:25:37:f6:1b: 06:a0:98:ac:d4:d6:17:84:7f:9c:a1:07:b2:fd:79: fc:8e:81:6d:06:ab:50:e9:da:ca:0b:07:a4:e7:20: 4d:99:c2:c1:16:3a:80:bc:a0:d7:17:09:91:76:52: 5b:ed:8d:7f:67:41:25:c0:6d:ba:3e:50:2f:99:ad: 47:af:cc:2f:90:f9:0d:c2:c2:d8:39:ca:fc:89:13: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:FC:5F:90:F6:BA:A7:5C:A3:01:27:4B:16:DE:BD:4F:C7:A4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:57:95:8e:2b:fa:b8:c9:a7:db:65:b9:90:a6:6c:6e:64:81: 68:18:83:44:66:9d:71:28:eb:dd:de:b7:93:d0:95:48:8c:84: 68:c9:69:dc:58:cd:17:65:33:10:05:ae:8a:2e:b6:59:48:a4: da:91:58:d1:5b:97:28:8b:c8:f7:23:a9:ec:35:e3:53:23:d8: 18:12:12:aa:9a:32:df:bc:31:5a:71:25:48:f2:ca:88:85:bd: d2:40:8a:b4:6b:26:bf:1a:ff:95:c2:fa:1a:46:3a:7f:59:0c: 66:fc:73:c7:3e:d3:07:4e:54:7d:52:3c:5f:43:22:f8:89:97: 88:34:4f:b7:72:37:84:50:43:1c:3e:f0:a3:dc:87:6f:91:5e: 74:fa:59:d1:9a:cf:04:30:c3:b3:51:78:e5:97:b7:fb:bf:c1: 63:d7:02:07:58:e0:9f:4f:69:d9:10:fb:30:88:e4:ce:fc:a8: 19:9b:5f:df:44:6b:30:98:e6:73:fe:da:73:09:a5:c8:50:c0: ae:61:dd:11:af:97:2a:7f:30:d0:ea:f0:6c:e5:aa:ef:a5:e7: 97:c2:cc:15:fa:40:17:5d:24:15:c7:24:46:b5:b7:59:a5:55: ff:2d:5e:e5:ab:a5:4e:28:9b:23:7e:0f:4b:7a:8b:20:3a:a6: a9:74:26:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgb373vBrLyf7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MzRiZjk2M2YtMTVhYy00MmUxLWIyYmYtYTMzYWUwNjk1M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTwdKLxCz7zbmKIzgCf2dNuHur0VBmHflN1f 3Y0lnfqx6T6iPVrEjAPIFrvhaxGlEBAmsELtnzvRH97X+YzwYQTdsJJkSMoUOIlf Pe2uQ0BcXlFH4kzz6zf/LmwYCFz84Ms0yJVPQtscMk3qAd28e2SBJCTMsYJPY67d HJabWK5pAWKZfg5+vsEiN3g7e000isdFylzjju2XLLikstTnVAjl6zH8fXrnx/oC uKwOeCU39hsGoJis1NYXhH+coQey/Xn8joFtBqtQ6drKCwek5yBNmcLBFjqAvKDX FwmRdlJb7Y1/Z0ElwG26PlAvma1Hr8wvkPkNwsLYOcr8iRNY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyV/F+Q9rqnXKMBJ0sW3r1Px6RCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk0NzQzN2QtODAzZC0z OWI5LTlkNDgtYjRmM2VjOTBjNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1XlY4r+rjJp9tluZCmbG5kgWgYg0RmnXEo693et5PQlUiMhGjJadxY zRdlMxAFrooutllIpNqRWNFblyiLyPcjqew141Mj2BgSEqqaMt+8MVpxJUjyyoiF vdJAirRrJr8a/5XC+hpGOn9ZDGb8c8c+0wdOVH1SPF9DIviJl4g0T7dyN4RQQxw+ 8KPch2+RXnT6WdGazwQww7NReOWXt/u/wWPXAgdY4J9PadkQ+zCI5M78qBmbX99E azCY5nP+2nMJpchQwK5h3RGvlyp/MNDq8Gzlqu+l55fCzBX6QBddJBXHJEa1t1ml Vf8tXuWrpU4omyN+D0t6iyA6pql0JtY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:49 2025 by rpki-client