$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d946d1f-f056-3207-9113-5e94570b5026.roa File: 3d946d1f-f056-3207-9113-5e94570b5026.roa (raw, json) Hash identifier: ZScuXO0gdm56fH9MMcq0zgnailNGAuWXvpyfALnAMXM= Subject key identifier: 38:72:34:25:5A:74:EE:A0:D0:83:53:11:DC:DB:C7:72:CC:A4:6D:4D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0482084786D1F039BC80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d946d1f-f056-3207-9113-5e94570b5026.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397219 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:04:82:08:47:86:d1:f0:39:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=ae0e6fed-142f-40dd-adaf-ed39e2145d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:ce:5f:0b:85:1f:4a:c2:35:fe:78:56:72: 27:7f:bc:75:60:70:c7:52:a9:83:f3:b5:cd:7c:49: 6b:1c:08:8e:f7:4a:3e:9f:69:7b:ae:1e:53:48:93: 6f:02:d2:9f:4a:14:cd:ce:44:5b:7c:a0:62:13:73: 05:21:99:89:38:87:6d:8b:5d:49:f6:f6:29:e3:b5: 12:6d:11:55:46:e2:fe:42:dd:40:36:37:f7:54:02: bc:16:0e:8e:94:57:ec:84:56:d4:2d:bc:02:ba:c7: 21:39:cd:9f:1d:33:f1:25:42:57:4f:e7:3f:cc:9f: b7:86:6e:ab:ac:1d:19:50:96:bc:57:26:58:90:39: 02:86:37:0d:fd:f3:99:0d:39:59:2b:66:92:8c:12: f5:bd:33:f6:d3:fc:a6:b8:6c:ef:cd:b9:f0:eb:e9: f0:b3:25:40:c8:95:71:90:8e:43:aa:f0:0e:c0:21: 72:c9:85:07:be:60:4f:d9:b8:71:05:e6:59:3d:59: 40:28:e2:d7:58:c8:99:54:20:c8:bb:6f:e2:e4:ca: db:8c:aa:0d:06:47:8d:3e:7f:86:07:44:af:b5:e7: 75:7b:76:a7:9c:94:13:a1:66:77:d8:ad:6f:17:4c: 55:5f:b7:ff:2e:0f:24:f5:65:26:b4:27:44:85:de: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:72:34:25:5A:74:EE:A0:D0:83:53:11:DC:DB:C7:72:CC:A4:6D:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d946d1f-f056-3207-9113-5e94570b5026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f9:8f:d0:f5:75:17:fb:9e:52:76:b8:25:62:bf:8a:9a:72: dc:1a:24:c6:58:a9:da:fb:1c:bf:ab:3f:f1:cf:b0:9c:96:ca: 23:56:5a:ba:a1:c9:27:9f:63:e9:08:e3:96:9b:fb:dd:1a:30: d2:09:f3:bd:54:0f:6c:ce:96:37:33:00:2b:86:f6:e4:65:6d: cf:b2:c5:12:3c:8f:f3:f0:a5:1a:ad:52:5e:ca:6c:06:75:fb: ce:cb:0d:e2:d3:1c:4d:d8:a3:b4:04:6f:33:92:e0:3c:da:b4: 8d:e4:bf:2f:7c:c9:00:86:27:a2:c0:4f:a6:85:ad:c8:a5:a6: 91:5f:dc:67:a1:37:e8:10:f1:f1:62:02:15:85:93:96:0a:00: a0:3e:b4:79:85:f7:1d:31:94:35:8e:72:12:bd:4d:77:c7:63: 68:af:dd:26:fd:95:c6:3d:9f:40:bb:0c:e2:36:8c:76:32:14: 69:22:13:d5:a8:4b:8d:7e:69:ce:77:ad:5b:d0:ea:64:0a:53: 5c:f2:68:ca:4b:e9:23:4c:9e:d5:75:44:aa:53:70:48:e5:6b: f6:39:5c:e3:b9:dc:b7:73:9b:3f:1c:1d:68:10:df:77:66:b9: 95:55:62:c4:04:48:7c:2e:87:7b:20:4c:c7:25:e6:52:da:e2: ee:3f:55:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgSCCEeG0fA5vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YWUwZTZmZWQtMTQyZi00MGRkLWFkYWYtZWQzOWUyMTQ1ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxobOXwuFH0rCNf54VnInf7x1YHDHUqmD87XN fElrHAiO90o+n2l7rh5TSJNvAtKfShTNzkRbfKBiE3MFIZmJOIdti11J9vYp47US bRFVRuL+Qt1ANjf3VAK8Fg6OlFfshFbULbwCuschOc2fHTPxJUJXT+c/zJ+3hm6r rB0ZUJa8VyZYkDkChjcN/fOZDTlZK2aSjBL1vTP20/ymuGzvzbnw6+nwsyVAyJVx kI5DqvAOwCFyyYUHvmBP2bhxBeZZPVlAKOLXWMiZVCDIu2/i5MrbjKoNBkeNPn+G B0Svted1e3annJQToWZ32K1vF0xVX7f/Lg8k9WUmtCdEhd6WBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhyNCVadO6g0INTEdzbx3LMpG1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Q5NDZkMWYtZjA1Ni0z MjA3LTkxMTMtNWU5NDU3MGI1MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT5j9D1dRf7nlJ2uCViv4qactwaJMZYqdr7HL+rP/HPsJyWyiNWWrqh ySefY+kI45ab+90aMNIJ871UD2zOljczACuG9uRlbc+yxRI8j/PwpRqtUl7KbAZ1 +87LDeLTHE3Yo7QEbzOS4DzatI3kvy98yQCGJ6LAT6aFrcilppFf3GehN+gQ8fFi AhWFk5YKAKA+tHmF9x0xlDWOchK9TXfHY2iv3Sb9lcY9n0C7DOI2jHYyFGkiE9Wo S41+ac53rVvQ6mQKU1zyaMpL6SNMntV1RKpTcEjla/Y5XOO53Ldzmz8cHWgQ33dm uZVVYsQESHwuh3sgTMcl5lLa4u4/VeA= -----END CERTIFICATE-----Generated at Sun Apr 27 22:14:29 2025 by rpki-client