$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65cc928d-3223-3843-afd7-50b915ebb30e.roa File: 65cc928d-3223-3843-afd7-50b915ebb30e.roa (raw, json) Hash identifier: avtiBPVHWnoiVc0/K2H7kvlBXwG6gy+zlMUNY36VZDM= Subject key identifier: B9:9C:6E:58:0F:A4:36:09:44:ED:6F:4F:6C:78:A4:67:DB:CC:AA:D6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5632F95AAC49A85A7F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65cc928d-3223-3843-afd7-50b915ebb30e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397242 IP address blocks: 156.154.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:56:32:f9:5a:ac:49:a8:5a:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=342b6c76-2ee5-4e47-856c-e83c3f16fc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:20:31:e0:f4:f7:36:55:ab:b5:fe:d4:6e: 89:ab:50:2d:03:72:94:97:ca:95:36:79:b0:85:17: a8:0c:6c:d1:77:2b:b2:6b:15:1e:2e:ec:6c:0d:0c: 33:25:76:a5:97:23:eb:9e:50:bc:47:92:a0:20:c0: 1a:d5:ba:cb:17:33:f8:f1:75:1e:13:2a:f7:a5:c4: 1f:c2:70:d0:2f:82:95:6c:03:a0:b3:13:69:03:4c: b6:d3:6e:15:20:bb:d7:70:bb:9b:c8:3f:ac:fc:6d: c1:8d:d0:a1:ce:88:ca:1c:d0:64:d1:27:63:ae:c5: c9:10:17:d8:53:66:b1:fa:99:e4:9d:5b:40:87:93: e3:01:47:da:5d:80:8d:f1:c7:b5:54:b2:47:e8:2b: 74:a8:a4:da:50:96:5f:1b:31:c0:e8:a7:c2:fc:d3: 5d:00:87:9a:de:41:be:06:6e:43:e9:4a:b6:74:10: 5a:f0:1a:6a:f7:05:4d:55:1f:2e:00:fb:17:35:ac: 15:17:c5:c4:b5:fa:b3:e1:7b:8b:a1:e2:00:c3:56: 6c:66:c5:91:33:be:49:99:b5:8b:03:34:39:0e:87: 60:8f:6d:5b:39:8d:ef:ae:a8:76:9c:80:77:39:81: f7:2d:f5:e1:5c:9a:32:b4:81:ae:36:53:6c:bf:9d: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9C:6E:58:0F:A4:36:09:44:ED:6F:4F:6C:78:A4:67:DB:CC:AA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65cc928d-3223-3843-afd7-50b915ebb30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0b:d0:a7:c2:f4:dc:9e:15:55:87:a5:38:7e:6b:e5:68:be: 32:42:f4:46:9e:92:ee:0c:e1:6d:0f:75:bf:43:e9:a0:e7:28: 20:0f:3e:cf:5a:d4:29:00:6d:15:03:6b:95:ca:c5:6b:3a:74: 50:f4:21:d4:2d:ed:28:c5:8b:9c:00:05:ce:c1:40:26:bb:5f: 68:29:db:e0:88:a2:a4:20:90:e5:8c:75:37:30:52:cc:3c:b8: d6:e3:b0:ab:41:40:20:8b:65:be:dc:e8:53:b7:4f:72:c0:81: 58:a6:e7:0e:2b:47:fd:f9:dc:89:c5:8f:ac:8f:e2:02:c7:66: 0c:91:90:e1:3d:ad:28:83:ae:e5:e4:39:df:1d:54:0d:ae:61: 16:7d:1c:e6:e8:77:94:66:e7:ab:2f:42:74:a4:0c:6b:b0:1a: af:1a:19:cd:b5:99:57:16:8f:79:73:73:f5:08:8f:1e:95:11: 06:2e:d0:69:e6:3a:da:31:78:8d:b2:3d:a9:76:78:ad:8d:be: 55:a8:7c:2b:d4:ff:10:92:d2:4f:b5:1a:f9:2a:07:97:bc:d2: 34:e1:49:73:ca:d1:4b:aa:33:12:de:60:ef:7f:b2:fe:65:eb: b0:b9:9d:82:61:8b:13:80:03:3f:62:62:24:89:2e:dc:63:aa: ce:4a:64:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1Yy+VqsSahafwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzQyYjZjNzYtMmVlNS00ZTQ3LTg1NmMtZTgzYzNmMTZmYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ4gMeD09zZVq7X+1G6Jq1AtA3KUl8qVNnmw hReoDGzRdyuyaxUeLuxsDQwzJXallyPrnlC8R5KgIMAa1brLFzP48XUeEyr3pcQf wnDQL4KVbAOgsxNpA0y2024VILvXcLubyD+s/G3BjdChzojKHNBk0SdjrsXJEBfY U2ax+pnknVtAh5PjAUfaXYCN8ce1VLJH6Ct0qKTaUJZfGzHA6KfC/NNdAIea3kG+ Bm5D6Uq2dBBa8Bpq9wVNVR8uAPsXNawVF8XEtfqz4XuLoeIAw1ZsZsWRM75JmbWL AzQ5Dodgj21bOY3vrqh2nIB3OYH3LfXhXJoytIGuNlNsv50ewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmcblgPpDYJRO1vT2x4pGfbzKrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjVjYzkyOGQtMzIyMy0z ODQzLWFmZDctNTBiOTE1ZWJiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIL0KfC9NyeFVWHpTh+a+VovjJC9Eaeku4M4W0Pdb9D6aDnKCAPPs9a 1CkAbRUDa5XKxWs6dFD0IdQt7SjFi5wABc7BQCa7X2gp2+CIoqQgkOWMdTcwUsw8 uNbjsKtBQCCLZb7c6FO3T3LAgVim5w4rR/353InFj6yP4gLHZgyRkOE9rSiDruXk Od8dVA2uYRZ9HObod5Rm56svQnSkDGuwGq8aGc21mVcWj3lzc/UIjx6VEQYu0Gnm OtoxeI2yPal2eK2NvlWofCvU/xCS0k+1GvkqB5e80jThSXPK0UuqMxLeYO9/sv5l 67C5nYJhixOAAz9iYiSJLtxjqs5KZBg= -----END CERTIFICATE-----Generated at Tue Apr 29 07:14:46 2025 by rpki-client