$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa File: 4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa (raw, json) Hash identifier: YLi8RRLtyxDao/Prrnq0ZcqLktYJcWgsi2cIsRBjnfs= Subject key identifier: 6B:CA:AF:59:F1:D1:E0:B5:43:09:1D:BD:2C:58:6B:5E:BC:65:F0:6B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF3F3E9A4F1BACA7851180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397222 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:3f:3e:9a:4f:1b:ac:a7:85:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c6d9e197-151b-422c-9fac-883970a4070e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:bf:95:34:62:b5:e0:bd:f0:19:a9:9a:4a: 46:a4:3c:3a:a9:65:0c:34:b9:c0:bf:d3:33:51:a3: 88:cc:88:96:a0:ea:18:53:40:29:00:83:c8:de:d9: 9f:d5:87:50:87:19:c2:3a:cd:f0:dc:92:45:33:bd: db:df:ca:c0:c5:55:97:33:e0:59:df:a8:67:f6:52: 47:fa:f8:64:46:b5:84:bb:45:c5:8f:49:09:88:e7: cb:04:b2:a9:cc:59:af:02:2d:ac:03:0e:25:e5:d7: 32:73:ed:73:54:f6:1d:2e:a0:cd:a8:41:6a:0b:03: 20:16:23:7d:aa:d7:6b:86:09:e3:71:cc:61:a0:04: 6f:8c:9f:e6:55:07:fc:c5:d2:34:a0:8c:2f:2c:d2: 18:21:68:6a:79:42:22:2c:ab:d4:2f:47:b6:49:82: c7:25:82:42:a1:cb:02:21:b3:80:cf:97:e5:f1:58: 6e:52:39:af:82:f4:05:71:3e:0a:b2:30:f7:d8:0e: 25:b7:f3:d7:66:cd:69:6c:a5:13:7c:83:98:77:a9: 74:d6:e9:dc:c0:82:2d:14:30:45:42:88:89:d0:eb: 8f:a1:4c:69:fc:54:64:3e:19:e2:3c:a6:4f:24:6b: 0c:a6:a7:38:fe:50:10:04:87:c3:f6:a2:73:43:e2: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:AF:59:F1:D1:E0:B5:43:09:1D:BD:2C:58:6B:5E:BC:65:F0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4f:90:29:b6:42:14:a5:07:0b:d6:c1:2b:44:4e:a5:e4:02: a9:bd:c1:53:46:63:ec:d5:90:25:63:ae:88:3d:a7:a1:03:e7: ec:88:55:22:af:67:05:6c:a4:7d:22:e1:32:6d:32:98:a0:28: 06:57:38:d3:f9:bd:72:6d:0c:fd:e2:62:28:8c:c2:83:b4:bd: ad:30:f6:2b:c7:14:b9:eb:ed:7b:a6:73:f6:cf:6b:03:77:67: 7c:7c:8c:38:e0:c5:d2:a2:0f:49:c6:28:a8:93:49:df:02:2e: 36:b1:99:f1:7a:af:e8:a1:ee:0e:f8:81:32:f6:26:96:ac:27: 3e:e3:4e:be:57:ee:a4:42:12:74:0a:54:66:10:cc:d5:a2:97: 7b:81:83:9b:ee:d4:21:a4:15:9a:4b:60:11:43:cb:9b:b0:5b: cb:f4:66:a1:7c:3f:86:06:d9:eb:36:a3:17:30:ac:61:99:a9: 7f:43:57:ea:0c:0f:f9:ef:2c:d0:3e:47:23:61:f4:e7:b5:8a: 0d:e3:c2:9e:9d:1c:95:3b:a3:20:a2:7f:1b:76:a4:e4:e7:f1: 39:22:4f:99:39:3e:dc:ce:1c:f2:cb:8c:8b:93:40:57:9d:97: cb:9f:3d:40:83:19:01:39:3e:a6:fe:34:3a:be:69:ec:4f:d8: 41:ea:e6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzz8+mk8brKeFEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YzZkOWUxOTctMTUxYi00MjJjLTlmYWMtODgzOTcwYTQwNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqe/lTRiteC98BmpmkpGpDw6qWUMNLnAv9Mz UaOIzIiWoOoYU0ApAIPI3tmf1YdQhxnCOs3w3JJFM73b38rAxVWXM+BZ36hn9lJH +vhkRrWEu0XFj0kJiOfLBLKpzFmvAi2sAw4l5dcyc+1zVPYdLqDNqEFqCwMgFiN9 qtdrhgnjccxhoARvjJ/mVQf8xdI0oIwvLNIYIWhqeUIiLKvUL0e2SYLHJYJCocsC IbOAz5fl8VhuUjmvgvQFcT4KsjD32A4lt/PXZs1pbKUTfIOYd6l01uncwIItFDBF QoiJ0OuPoUxp/FRkPhniPKZPJGsMpqc4/lAQBIfD9qJzQ+KuEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvKr1nx0eC1QwkdvSxYa168ZfBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGIzMjgwOWUtZDEzZC0z Nzk4LTgzYTctZGIzNWE5YjBkOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJPkCm2QhSlBwvWwStETqXkAqm9wVNGY+zVkCVjrog9p6ED5+yIVSKv ZwVspH0i4TJtMpigKAZXONP5vXJtDP3iYiiMwoO0va0w9ivHFLnr7Xumc/bPawN3 Z3x8jDjgxdKiD0nGKKiTSd8CLjaxmfF6r+ih7g74gTL2JpasJz7jTr5X7qRCEnQK VGYQzNWil3uBg5vu1CGkFZpLYBFDy5uwW8v0ZqF8P4YG2es2oxcwrGGZqX9DV+oM D/nvLNA+RyNh9Oe1ig3jwp6dHJU7oyCifxt2pOTn8TkiT5k5PtzOHPLLjIuTQFed l8ufPUCDGQE5Pqb+NDq+aexP2EHq5jU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:07 2025 by rpki-client