$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96ece9d4-3cbb-3852-bbe4-703dfe534bfe.roa File: 96ece9d4-3cbb-3852-bbe4-703dfe534bfe.roa (raw, json) Hash identifier: 6Nk74UJrSpA65Z0RMwIT2KjUxc6mfjbglIDOxBDuJ3g= Subject key identifier: 02:37:71:B6:64:94:6F:4C:C4:DA:7D:02:2D:E3:3E:05:65:80:8F:77 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B642666BE0DC20981F5DBC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96ece9d4-3cbb-3852-bbe4-703dfe534bfe.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397235 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:26:66:be:0d:c2:09:81:f5:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=7ecd8f2b-0012-4c1d-a12b-c08b6bf05695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:fa:45:c3:30:ab:bd:d4:f1:78:33:d2:73: 7f:12:4c:fb:3c:00:85:ab:1e:47:f2:1e:8f:94:8b: a7:43:77:f1:2d:3e:6f:f3:9d:fb:da:a1:f1:b9:90: 9a:c7:39:5e:0d:d7:47:ba:f2:1e:a1:b1:6e:0d:be: ca:5e:2f:32:44:33:31:02:7f:9f:97:58:57:8b:92: 63:6e:ac:28:d6:c9:33:ef:4c:e1:f2:be:77:29:12: 9f:aa:8b:e9:05:89:f7:fb:26:9b:5b:7c:d1:e1:59: 42:b0:b8:09:35:2c:ac:79:99:58:cb:89:6b:4a:82: 9c:cd:4d:ca:43:08:e9:bf:0a:d5:04:79:99:b0:06: 9e:4f:6d:74:84:7b:49:73:c6:ca:e1:bd:a3:36:f5: 56:4a:ab:55:1b:c6:7b:23:05:62:bd:0e:78:2b:db: bc:c3:33:2a:ef:76:f4:bb:31:68:b9:eb:50:a6:34: c4:b6:1b:67:5d:8d:96:c0:a4:4a:e2:d8:ac:fa:c3: 57:b7:23:1d:ca:7a:28:a1:71:26:9b:37:66:55:bb: f8:83:d4:23:8a:47:8c:8f:92:a8:55:09:0a:28:09: a0:47:a5:77:e0:a3:31:57:3a:12:74:22:21:ea:a4: a8:fe:ed:e5:5a:41:d7:e6:50:6b:a3:f2:cf:6c:25: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:37:71:B6:64:94:6F:4C:C4:DA:7D:02:2D:E3:3E:05:65:80:8F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96ece9d4-3cbb-3852-bbe4-703dfe534bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9a:48:c2:92:64:3e:3e:e1:a6:5c:c9:7b:92:76:38:66:54: ff:0e:32:34:92:c3:57:a1:6b:b2:11:80:49:b4:d1:c0:b8:30: 7f:39:cd:89:0e:15:56:e7:7e:8c:d9:56:e3:24:59:be:78:d3: 01:37:0e:d5:4c:eb:ad:be:f1:a7:45:00:f4:5f:6b:61:4f:2e: 18:ac:3e:ac:9d:ea:0c:0e:1e:d2:81:13:00:92:2d:de:ae:27: 3b:54:d2:8e:80:32:ab:4f:fe:c7:58:af:81:04:1f:e6:e2:39: dd:45:3e:10:6a:49:5c:70:f6:4c:2f:1d:dc:3d:db:47:ea:1c: f0:95:ba:44:d1:e5:e8:0a:ca:fa:4b:a4:5a:85:4b:3e:29:1c: a5:ed:79:ee:30:6f:78:b9:ec:12:d6:e4:83:93:35:f4:cc:3b: 59:3f:27:0a:47:7c:66:bd:b4:a9:16:8a:44:0e:c3:cf:f6:79: ca:a3:a1:4f:0c:fd:d3:49:21:4f:12:91:1e:21:f9:04:84:9c: 47:33:dc:6b:3b:b3:8b:ac:c0:28:49:3e:0d:10:25:2f:e5:a7: 36:15:43:00:ac:3a:51:bb:d0:8c:4a:3c:be:ae:28:52:d9:f7: 93:b5:a1:6c:dc:2e:e1:1f:2c:ea:ce:79:3b:c6:fa:ba:f6:24: 72:0c:eb:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCZmvg3CCYH128AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk N2VjZDhmMmItMDAxMi00YzFkLWExMmItYzA4YjZiZjA1Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcD6RcMwq73U8Xgz0nN/Ekz7PACFqx5H8h6P lIunQ3fxLT5v85372qHxuZCaxzleDddHuvIeobFuDb7KXi8yRDMxAn+fl1hXi5Jj bqwo1skz70zh8r53KRKfqovpBYn3+yabW3zR4VlCsLgJNSyseZlYy4lrSoKczU3K QwjpvwrVBHmZsAaeT210hHtJc8bK4b2jNvVWSqtVG8Z7IwVivQ54K9u8wzMq73b0 uzFouetQpjTEthtnXY2WwKRK4tis+sNXtyMdynoooXEmmzdmVbv4g9QjikeMj5Ko VQkKKAmgR6V34KMxVzoSdCIh6qSo/u3lWkHX5lBro/LPbCUoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI3cbZklG9MxNp9Ai3jPgVlgI93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTZlY2U5ZDQtM2NiYi0z ODUyLWJiZTQtNzAzZGZlNTM0YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOaSMKSZD4+4aZcyXuSdjhmVP8OMjSSw1eha7IRgEm00cC4MH85zYkO FVbnfozZVuMkWb540wE3DtVM662+8adFAPRfa2FPLhisPqyd6gwOHtKBEwCSLd6u JztU0o6AMqtP/sdYr4EEH+biOd1FPhBqSVxw9kwvHdw920fqHPCVukTR5egKyvpL pFqFSz4pHKXtee4wb3i57BLW5IOTNfTMO1k/JwpHfGa9tKkWikQOw8/2ecqjoU8M /dNJIU8SkR4h+QSEnEcz3Gs7s4uswChJPg0QJS/lpzYVQwCsOlG70IxKPL6uKFLZ 95O1oWzcLuEfLOrOeTvG+rr2JHIM6wQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:12 2025 by rpki-client