$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9aaf3ca5-02f4-3577-96e0-7433a2c3d866.roa File: 9aaf3ca5-02f4-3577-96e0-7433a2c3d866.roa (raw, json) Hash identifier: iB42lXBBQUKf4bUDghBHWuu3ox0NqGMaGZKGESI3ELY= Subject key identifier: 4D:A2:B4:FE:16:79:D2:F3:BE:39:A1:6E:AC:43:CF:B9:3F:5E:5A:DB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A05B4DCC7BD44E1EF7380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9aaf3ca5-02f4-3577-96e0-7433a2c3d866.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397242 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:05:b4:dc:c7:bd:44:e1:ef:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=62093b22-8582-4d78-89c7-30a6b7b63750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:c6:14:0a:a3:c9:cd:f9:72:db:fa:5e:7e: 1d:01:ec:42:9c:9f:73:36:85:0b:4f:44:df:8e:8f: fa:9b:9e:93:0f:ea:9e:8d:5f:6b:de:b8:e8:d0:fa: a5:31:f4:a0:89:f1:e4:32:58:b7:ce:22:2d:3e:91: ae:33:0b:9c:45:63:08:1d:79:b3:58:dc:e0:e3:0e: 49:3c:da:9b:be:00:d0:69:7b:1d:1a:fb:7a:ca:87: c4:32:5d:0a:d6:88:3c:67:a0:fb:fd:5e:42:4d:70: 6c:3e:e5:95:9c:b4:48:36:47:16:d2:e6:94:34:c4: bf:1b:35:e5:e8:f9:16:95:0c:a7:58:c7:7f:05:f7: b2:8a:4a:26:80:36:85:2c:a2:cd:59:c2:b5:cb:b9: 08:00:95:fe:56:4a:16:cc:23:f9:9f:59:89:fb:a5: 00:57:ca:27:48:ef:76:9c:08:31:d6:08:d3:9b:29: 02:f5:bd:8f:05:a3:53:29:a6:da:98:b6:fe:2d:5e: 98:84:b3:e9:a8:bc:02:54:a4:ca:88:5a:8d:de:b0: fc:15:3b:24:da:54:2e:36:93:c7:37:cc:a2:05:12: c2:8d:0e:a9:95:ca:c5:fe:65:67:85:a9:de:c0:7d: c1:64:0f:49:cb:ce:d0:0d:b7:b5:d7:c1:28:54:42: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A2:B4:FE:16:79:D2:F3:BE:39:A1:6E:AC:43:CF:B9:3F:5E:5A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9aaf3ca5-02f4-3577-96e0-7433a2c3d866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ec:08:5c:8d:6a:64:34:36:d2:80:f1:25:1f:2b:0a:f0:4a: 44:6a:21:1c:91:4a:79:c8:cf:d6:16:88:07:1b:f5:c8:dc:d1: a8:68:b1:a9:2c:9a:4c:13:5c:8f:09:34:6c:e1:ca:d5:f2:be: 45:bf:80:80:23:5c:94:d0:06:9d:44:69:8b:48:28:5b:70:a2: 2b:13:5b:8f:cd:c7:a1:fb:67:c4:8c:b2:ab:24:f6:9e:e7:f2: 6c:83:9e:1a:78:bc:14:db:d7:d1:04:3b:a3:71:c8:0e:4a:67: 54:6a:89:2d:58:5b:82:2d:2b:95:2f:99:4b:e6:d7:57:53:9f: df:b2:3a:20:a8:1e:d9:fe:4f:10:ed:16:53:30:ff:1c:65:a9: c7:28:05:e6:c0:f6:59:0c:23:c5:05:b6:b7:68:4c:b8:43:18: 33:df:7e:a1:d9:3c:31:98:9b:fd:cc:87:1d:c7:c2:bd:2b:b7: d0:12:15:46:41:0c:66:13:8b:dc:16:10:a0:eb:3c:bd:54:d9: eb:1c:f7:68:e9:18:17:43:65:01:41:89:98:cc:02:e0:fd:11: 8b:ef:04:fa:4f:83:1f:46:06:94:39:a1:20:1c:83:e7:a7:9d: ee:f9:3d:5a:f7:92:e1:ad:f2:03:d2:52:64:9f:ee:47:88:ff: 0a:61:b7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgW03Me9ROHvc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NjIwOTNiMjItODU4Mi00ZDc4LTg5YzctMzBhNmI3YjYzNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1PGFAqjyc35ctv6Xn4dAexCnJ9zNoULT0Tf jo/6m56TD+qejV9r3rjo0PqlMfSgifHkMli3ziItPpGuMwucRWMIHXmzWNzg4w5J PNqbvgDQaXsdGvt6yofEMl0K1og8Z6D7/V5CTXBsPuWVnLRINkcW0uaUNMS/GzXl 6PkWlQynWMd/BfeyikomgDaFLKLNWcK1y7kIAJX+VkoWzCP5n1mJ+6UAV8onSO92 nAgx1gjTmykC9b2PBaNTKabamLb+LV6YhLPpqLwCVKTKiFqN3rD8FTsk2lQuNpPH N8yiBRLCjQ6plcrF/mVnhanewH3BZA9Jy87QDbe118EoVEIAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2itP4WedLzvjmhbqxDz7k/XlrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWFhZjNjYTUtMDJmNC0z NTc3LTk2ZTAtNzQzM2EyYzNkODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDsCFyNamQ0NtKA8SUfKwrwSkRqIRyRSnnIz9YWiAcb9cjc0ahosaks mkwTXI8JNGzhytXyvkW/gIAjXJTQBp1EaYtIKFtwoisTW4/Nx6H7Z8SMsqsk9p7n 8myDnhp4vBTb19EEO6NxyA5KZ1RqiS1YW4ItK5UvmUvm11dTn9+yOiCoHtn+TxDt FlMw/xxlqccoBebA9lkMI8UFtrdoTLhDGDPffqHZPDGYm/3Mhx3Hwr0rt9ASFUZB DGYTi9wWEKDrPL1U2esc92jpGBdDZQFBiZjMAuD9EYvvBPpPgx9GBpQ5oSAcg+en ne75PVr3kuGt8gPSUmSf7keI/wphtxQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:47 2025 by rpki-client