$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91d2d48f-a830-379f-a8e5-3b0fc7a84944.roa File: 91d2d48f-a830-379f-a8e5-3b0fc7a84944.roa (raw, json) Hash identifier: VXjgKqIjSSBni6KO8sS7LCJ+9VU5inZ9UtBB/POsJPQ= Subject key identifier: 60:13:05:08:A4:13:D4:FD:CA:D8:6E:2C:1F:2B:82:2B:3E:B6:A8:DB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0A2E48F7C8DDFA04F3B0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91d2d48f-a830-379f-a8e5-3b0fc7a84944.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397225 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0a:2e:48:f7:c8:dd:fa:04:f3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=bd815076-299d-4f12-b681-69523b6149ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:cd:de:e0:e6:85:47:bd:f1:16:d3:58:48: 6a:6c:7e:d2:f4:52:7c:8b:59:13:d8:74:ff:80:1e: a3:38:46:58:cc:46:35:e7:8e:84:fd:94:06:04:20: d8:f3:8e:33:f6:e2:92:48:42:eb:8b:b1:1e:06:b6: a6:dc:f0:55:ad:f9:08:ce:24:96:64:6e:98:a5:24: 6f:2d:02:4d:85:18:87:7a:19:ac:85:72:a3:f5:d6: ff:67:0c:9e:37:a5:08:d6:37:43:47:34:d7:c8:ab: a3:50:0b:ad:65:eb:69:03:23:ea:cb:ea:6d:24:3d: f3:1e:0e:2e:2a:ae:d0:e2:66:53:e7:29:0c:a0:9a: ad:bd:34:89:fa:09:ca:46:70:a5:6f:2e:0a:07:55: df:82:2d:f8:2f:b7:2d:12:d2:57:d9:6b:00:a2:e3: 78:27:82:1f:22:b9:c9:b7:d0:20:2c:2d:c8:35:3a: 81:aa:3a:04:93:09:cd:1c:7c:26:a7:dc:4f:4e:eb: 03:14:11:a7:31:dd:66:58:b8:64:33:bd:88:92:dd: 82:1d:ac:bc:9d:b7:b0:e1:e5:69:9d:76:aa:18:ad: 94:c9:80:6f:98:98:49:fc:5f:b5:fe:02:9c:1e:db: fb:8a:f0:8d:ec:d1:7b:5d:67:ca:43:fc:54:b7:d4: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:05:08:A4:13:D4:FD:CA:D8:6E:2C:1F:2B:82:2B:3E:B6:A8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91d2d48f-a830-379f-a8e5-3b0fc7a84944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d6:8e:07:1c:10:8d:ba:53:00:e6:2a:60:46:c7:0b:a0:2b: 18:16:71:b8:2a:a4:52:c6:b4:67:2c:90:22:e3:2d:77:bd:8e: b7:38:d5:39:b9:8d:e3:f9:a0:2e:74:fc:e9:37:02:57:b2:97: 53:cd:09:c9:0e:15:a9:fa:0a:44:35:85:58:42:cd:48:0e:40: d2:89:17:4a:ac:8e:b6:6b:70:01:d7:39:0f:6e:c1:3e:08:6a: 2b:a8:69:42:b9:69:f5:bd:37:c6:54:73:f4:e5:38:8b:5a:f1: c6:72:0a:4a:39:16:1d:0a:c1:11:73:34:78:48:bf:d6:a4:e8: 05:e0:25:92:10:da:d7:b4:9e:64:07:dc:03:80:de:1c:76:55: 19:14:c9:eb:ed:7d:10:15:8e:82:ce:5b:2c:97:51:2a:3e:f4: bb:1b:f3:d6:c7:57:b5:85:2a:f9:a5:f2:a5:a7:fe:5f:aa:95: b6:72:d7:0b:a4:86:25:52:f5:a5:f9:93:62:49:bd:1f:78:15: 40:91:11:f0:ba:0f:fc:af:66:4a:88:d9:54:74:c5:81:32:1e: 34:42:f4:e1:83:f0:d4:d8:2c:ae:79:2c:d7:b6:11:a0:54:cf: 67:2f:9d:65:39:c2:73:c9:ce:4c:6e:c6:3d:a3:5f:ae:17:79: a8:fe:69:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgouSPfI3foE87AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YmQ4MTUwNzYtMjk5ZC00ZjEyLWI2ODEtNjk1MjNiNjE0OWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifN3uDmhUe98RbTWEhqbH7S9FJ8i1kT2HT/ gB6jOEZYzEY1546E/ZQGBCDY844z9uKSSELri7EeBram3PBVrfkIziSWZG6YpSRv LQJNhRiHehmshXKj9db/ZwyeN6UI1jdDRzTXyKujUAutZetpAyPqy+ptJD3zHg4u Kq7Q4mZT5ykMoJqtvTSJ+gnKRnClby4KB1Xfgi34L7ctEtJX2WsAouN4J4IfIrnJ t9AgLC3INTqBqjoEkwnNHHwmp9xPTusDFBGnMd1mWLhkM72Ikt2CHay8nbew4eVp nXaqGK2UyYBvmJhJ/F+1/gKcHtv7ivCN7NF7XWfKQ/xUt9QySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGATBQikE9T9ythuLB8rgis+tqjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTFkMmQ0OGYtYTgzMC0z NzlmLWE4ZTUtM2IwZmM3YTg0OTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnWjgccEI26UwDmKmBGxwugKxgWcbgqpFLGtGcskCLjLXe9jrc41Tm5 jeP5oC50/Ok3Aleyl1PNCckOFan6CkQ1hVhCzUgOQNKJF0qsjrZrcAHXOQ9uwT4I aiuoaUK5afW9N8ZUc/TlOIta8cZyCko5Fh0KwRFzNHhIv9ak6AXgJZIQ2te0nmQH 3AOA3hx2VRkUyevtfRAVjoLOWyyXUSo+9Lsb89bHV7WFKvml8qWn/l+qlbZy1wuk hiVS9aX5k2JJvR94FUCREfC6D/yvZkqI2VR0xYEyHjRC9OGD8NTYLK55LNe2EaBU z2cvnWU5wnPJzkxuxj2jX64Xeaj+aUQ= -----END CERTIFICATE-----Generated at Sat Apr 26 21:50:50 2025 by rpki-client