$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ab18889-7667-3af3-999d-2e92ebca8f9f.roa File: 3ab18889-7667-3af3-999d-2e92ebca8f9f.roa (raw, json) Hash identifier: GKQeb4jaW7DGiAfIbeQ3zXYW/jZrQ5Ct6Vpzm8lXuIQ= Subject key identifier: B1:7F:5C:19:51:C9:FB:1C:C3:30:A6:C1:09:61:96:A9:85:C4:05:86 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3FEAF996ED7A0A6D8600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ab18889-7667-3af3-999d-2e92ebca8f9f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397233 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3f:ea:f9:96:ed:7a:0a:6d:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=a488dff9-4c51-43af-9677-7e9dafeded43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:9f:62:a0:41:27:ff:ec:c8:27:13:ca:27: 05:d2:ca:60:48:9b:50:d8:26:c5:d8:38:6d:90:5b: ff:7a:61:b5:d8:b1:51:52:22:b6:76:51:6d:68:5a: e4:1d:1a:a0:48:37:ca:25:a7:b5:5f:9c:c7:d4:7e: 99:3b:38:2a:11:96:77:ab:5c:5a:62:c4:17:a2:4c: d1:2e:6c:fa:2a:83:f9:92:fc:b1:34:f5:eb:f2:91: 8c:9c:d7:66:ba:99:5c:e2:a7:4f:6b:b4:9f:b2:3b: 9f:cf:5c:bb:30:86:88:f7:74:e6:5e:93:6c:df:1f: 7b:b1:fb:93:d4:f5:04:ec:5a:17:40:19:1c:e8:85: d6:21:93:9d:cd:0b:68:d4:59:7d:b1:fc:ec:2a:18: 49:5c:57:18:22:2c:63:c6:f6:1e:e7:89:a3:e7:5b: fa:13:cb:c5:fa:62:ea:ab:42:bb:98:b6:f0:e6:83: 47:c8:df:b5:6f:b4:79:ed:16:a5:3a:75:2a:f3:2b: 9c:d0:d0:ec:b5:a3:67:59:d5:ed:6b:7c:20:6d:ff: 7d:2a:1a:27:00:b7:5e:92:88:ca:41:3f:65:25:f7: 44:09:d6:98:48:34:9b:1c:cd:55:9c:3e:93:a9:4b: 3c:bd:af:17:99:98:c7:ab:b7:a9:b7:c7:84:8b:5d: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:5C:19:51:C9:FB:1C:C3:30:A6:C1:09:61:96:A9:85:C4:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ab18889-7667-3af3-999d-2e92ebca8f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:88:09:95:90:4d:4b:e1:32:93:21:f1:6f:3e:77:ce:63:7f: bc:89:87:b5:57:0c:bc:ad:71:52:ca:09:19:4f:73:42:0e:8f: 71:e4:8a:02:b2:21:74:a7:c8:2e:c2:98:e0:9c:76:12:a1:79: a7:81:50:5a:e7:0a:7f:8e:04:b7:5c:7a:bc:a8:56:68:9c:8a: 28:26:3b:2d:5a:04:7b:0e:44:f4:78:17:2d:1a:04:e7:6f:ed: 79:fa:10:ae:39:5a:8f:89:fc:c6:09:dd:74:2d:74:df:4b:48: ba:92:f1:41:a1:00:32:5a:4c:fe:5e:da:17:65:7b:f3:2d:61: 0c:6b:28:2d:04:4b:e1:b0:82:00:78:db:a6:15:72:40:1b:be: a2:70:bf:86:d8:cd:ee:09:80:4a:b2:e5:43:e5:b5:cc:c2:ab: c8:c6:fd:d6:e5:2d:89:d1:89:ea:93:dc:a7:86:af:3a:49:8b: 24:c6:6e:f8:90:1d:23:13:f0:42:3d:6c:e6:d5:89:6e:44:c8: a4:0d:38:17:a3:60:37:29:e6:e9:55:e0:43:92:7d:98:c9:d0: 03:ce:03:b2:0f:12:90:05:e9:89:43:0a:5d:5f:d0:59:8e:d4: d0:02:d4:3d:ef:ae:ad:2f:1b:12:62:ec:aa:55:52:f3:72:1b: 17:73:10:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz/q+ZbtegpthgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YTQ4OGRmZjktNGM1MS00M2FmLTk2NzctN2U5ZGFmZWRlZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLqfYqBBJ//syCcTyicF0spgSJtQ2CbF2Dht kFv/emG12LFRUiK2dlFtaFrkHRqgSDfKJae1X5zH1H6ZOzgqEZZ3q1xaYsQXokzR Lmz6KoP5kvyxNPXr8pGMnNdmuplc4qdPa7Sfsjufz1y7MIaI93TmXpNs3x97sfuT 1PUE7FoXQBkc6IXWIZOdzQto1Fl9sfzsKhhJXFcYIixjxvYe54mj51v6E8vF+mLq q0K7mLbw5oNHyN+1b7R57RalOnUq8yuc0NDstaNnWdXta3wgbf99KhonALdekojK QT9lJfdECdaYSDSbHM1VnD6TqUs8va8XmZjHq7ept8eEi10KuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF/XBlRyfscwzCmwQlhlqmFxAWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FiMTg4ODktNzY2Ny0z YWYzLTk5OWQtMmU5MmViY2E4ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGICZWQTUvhMpMh8W8+d85jf7yJh7VXDLytcVLKCRlPc0IOj3HkigKy IXSnyC7CmOCcdhKheaeBUFrnCn+OBLdceryoVmiciigmOy1aBHsORPR4Fy0aBOdv 7Xn6EK45Wo+J/MYJ3XQtdN9LSLqS8UGhADJaTP5e2hdle/MtYQxrKC0ES+GwggB4 26YVckAbvqJwv4bYze4JgEqy5UPltczCq8jG/dblLYnRieqT3KeGrzpJiyTGbviQ HSMT8EI9bObViW5EyKQNOBejYDcp5ulV4EOSfZjJ0APOA7IPEpAF6YlDCl1f0FmO 1NAC1D3vrq0vGxJi7KpVUvNyGxdzEFQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:57:32 2025 by rpki-client