$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa File: 3ad98945-2947-3f7a-97a4-2a209440aa50.roa (raw, json) Hash identifier: n47RWiaTu5Huw5VCUvqUEBHJFa8dmKhGzPqjBUcJJ4A= Subject key identifier: 7F:F2:7D:9D:90:4B:FF:87:6B:8D:7B:FD:A9:05:8F:40:88:01:42:BA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A1254DB9D3FC9F4F6EE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397229 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:12:54:db:9d:3f:c9:f4:f6:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=62df5990-bc81-439d-af01-5c9e04c2b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a4:17:20:58:5d:a3:f8:1a:92:b9:dd:1f:b9: ab:03:72:60:58:fb:74:9e:c7:fe:34:33:09:1c:81: a8:99:8f:29:b0:10:94:dc:78:e0:26:dd:38:d9:51: b4:59:c6:2b:62:c2:cb:dd:28:9d:9c:4d:51:3c:29: d7:44:b6:a1:66:9d:29:c2:cf:c3:a1:88:87:83:b7: 8c:6e:58:b8:d4:31:47:50:55:13:ad:bc:48:13:d6: fc:58:41:e9:cc:e8:69:e8:2b:2a:de:37:98:15:be: 5f:36:7c:9f:b4:f5:f0:90:04:71:6f:ea:61:b4:54: ef:b9:88:2f:8c:46:ca:cd:73:f6:c7:77:90:f4:00: cc:bb:f3:6e:8b:b8:18:e8:5f:e3:2d:c5:79:8f:a0: 6b:41:53:42:5d:fe:0a:98:85:35:c4:fa:f1:5a:9f: 9a:11:72:98:b4:61:11:70:98:50:c3:1f:59:1f:e8: 9e:cf:30:47:af:73:a6:56:5e:0a:d5:d0:8e:55:d9: ef:03:46:66:64:21:4b:e5:71:3d:92:44:9b:69:b0: a9:34:42:47:38:65:71:21:5e:c2:3a:1b:21:b9:9c: 3e:61:47:70:e6:2c:f4:fb:a0:3f:e6:3b:2d:43:5c: a5:79:5d:eb:05:e9:4c:6e:63:54:c9:90:f3:14:3a: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:7D:9D:90:4B:FF:87:6B:8D:7B:FD:A9:05:8F:40:88:01:42:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ad98945-2947-3f7a-97a4-2a209440aa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1a:12:ff:c8:65:29:2e:dc:88:24:ea:2f:b8:fb:95:37:eb: 63:2a:e4:28:63:bd:a6:a8:bc:1f:77:a4:85:ef:38:a5:01:e5: e2:29:39:8e:da:01:0e:49:6f:e7:4c:f9:d5:fd:fb:1f:0e:0c: 15:6c:9f:4d:a1:4e:b6:7d:58:a4:cd:6f:b5:8d:d8:d9:61:21: 93:fe:dd:27:8d:ed:53:0b:01:ed:58:f6:6c:fc:31:16:80:db: 4c:b3:1d:67:cb:5c:54:53:c0:ee:a5:1f:ba:ac:52:af:09:47: 38:f5:56:c5:57:78:d1:79:e7:ea:b4:1b:a9:d2:7f:53:30:d0: b7:d7:c0:b4:3d:af:75:cc:ce:c1:50:38:3f:52:54:b8:05:3c: 73:ab:cb:b1:81:cf:5f:b7:50:1a:1f:08:28:e1:b4:80:58:e7: 96:66:a8:79:78:00:fa:8c:91:5c:24:d3:93:8a:ad:d6:55:33: 03:bb:04:3c:52:2f:9e:88:97:84:1a:38:95:75:0f:02:1d:b8: 73:0a:05:d6:40:a7:79:9e:36:5e:46:90:31:a7:cf:b3:da:49: b0:37:8a:8e:40:20:56:d6:b1:44:af:18:7c:a6:0a:9d:ba:0d: 8b:3c:88:95:74:a3:31:3c:a5:fa:12:14:d2:9f:71:41:de:77: cb:74:cd:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWhJU250/yfT27gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NjJkZjU5OTAtYmM4MS00MzlkLWFmMDEtNWM5ZTA0YzJiMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaQXIFhdo/gakrndH7mrA3JgWPt0nsf+NDMJ HIGomY8psBCU3HjgJt042VG0WcYrYsLL3SidnE1RPCnXRLahZp0pws/DoYiHg7eM bli41DFHUFUTrbxIE9b8WEHpzOhp6Csq3jeYFb5fNnyftPXwkARxb+phtFTvuYgv jEbKzXP2x3eQ9ADMu/Nui7gY6F/jLcV5j6BrQVNCXf4KmIU1xPrxWp+aEXKYtGER cJhQwx9ZH+iezzBHr3OmVl4K1dCOVdnvA0ZmZCFL5XE9kkSbabCpNEJHOGVxIV7C OhshuZw+YUdw5iz0+6A/5jstQ1yleV3rBelMbmNUyZDzFDrlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/yfZ2QS/+Ha417/akFj0CIAUK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FkOTg5NDUtMjk0Ny0z ZjdhLTk3YTQtMmEyMDk0NDBhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0aEv/IZSku3Igk6i+4+5U362Mq5ChjvaaovB93pIXvOKUB5eIpOY7a AQ5Jb+dM+dX9+x8ODBVsn02hTrZ9WKTNb7WN2NlhIZP+3SeN7VMLAe1Y9mz8MRaA 20yzHWfLXFRTwO6lH7qsUq8JRzj1VsVXeNF55+q0G6nSf1Mw0LfXwLQ9r3XMzsFQ OD9SVLgFPHOry7GBz1+3UBofCCjhtIBY55ZmqHl4APqMkVwk05OKrdZVMwO7BDxS L56Il4QaOJV1DwIduHMKBdZAp3meNl5GkDGnz7PaSbA3io5AIFbWsUSvGHymCp26 DYs8iJV0ozE8pfoSFNKfcUHed8t0zeU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:06 2025 by rpki-client