$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa File: a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa (raw, json) Hash identifier: 2f3JyQiestZpPGjt5/r8783CbG7l9gfw3A7s467WlNU= Subject key identifier: 4A:18:14:33:40:34:CB:F3:91:C5:C7:D5:AF:7E:D0:5A:76:D5:94:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF38F2E8A6A9222D292A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397218 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:38:f2:e8:a6:a9:22:2d:29:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2d09d928-1408-4fe5-a6a3-e4a41a0d34e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:ac:83:31:1a:1c:41:d3:0f:6f:13:73:3e: 12:49:f6:17:69:b8:92:9f:ac:5b:23:05:26:04:fb: 53:d9:69:56:e4:94:ee:93:86:d0:e2:c0:ed:85:57: 23:76:0a:3c:9a:3c:f1:76:cc:1a:e4:65:2b:d0:bd: 28:df:9f:89:95:05:81:5c:88:82:0e:bd:ca:eb:d6: 15:29:73:3e:19:ca:c5:2b:6e:7a:28:a3:f3:3d:ae: 1f:b2:9e:ef:e5:e1:8f:f2:77:db:09:ee:15:64:da: 0e:0a:e8:b1:d6:5c:dc:f1:8f:01:21:a6:ad:67:74: 2e:fd:f5:a5:66:01:0f:40:82:25:1c:17:2d:ac:70: 6f:a7:91:3a:7f:8c:76:b5:8f:bf:cf:8b:04:b5:8d: 7b:eb:e4:1c:0a:c9:4b:b6:1e:0c:73:93:f3:fb:b4: 2b:64:25:3f:c8:e3:85:d4:86:75:19:91:9f:09:9d: dc:b2:c2:3d:e9:ae:7d:89:a5:e0:4b:f1:86:44:3b: 53:7f:b8:9f:ce:5e:9a:f6:45:31:ce:31:17:0e:23: 4e:c9:8f:8a:0c:84:7f:42:fa:c6:a7:7e:cc:f0:fb: d1:17:33:04:c1:ca:61:bc:ae:ce:01:13:00:34:a1: 83:7a:48:38:95:d3:a1:d4:f0:69:0f:8e:29:5a:8f: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:14:33:40:34:CB:F3:91:C5:C7:D5:AF:7E:D0:5A:76:D5:94:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a5:c6:a2:00:a9:99:81:e6:4b:11:dd:f4:a6:68:97:cd:e5: 89:f2:4c:cb:c4:88:f2:14:91:ec:97:c6:60:da:cf:ba:97:35: 90:17:d6:6d:30:7e:04:ac:12:f8:8f:a8:94:39:d6:50:73:c2: f0:0f:ff:53:49:e2:4e:08:fb:9d:62:b7:17:eb:22:c6:65:b3: 69:9b:09:47:fa:20:5b:83:3e:cc:49:5e:5e:98:32:6d:ee:24: 6c:e9:8d:97:28:69:fa:af:b3:55:38:e4:9a:b8:a8:7b:31:5e: a6:e5:00:ec:95:c5:47:59:49:ba:ce:9e:b7:f2:79:d1:64:3c: 91:ed:bf:81:f5:0b:db:af:41:94:cc:8b:4b:82:06:7c:2c:65: 14:9b:5a:7e:2f:d4:d8:2b:4d:09:05:af:5b:0f:26:72:38:94: a9:49:c9:03:a9:1f:aa:c1:b2:f5:d5:19:a8:e4:9f:b4:52:a1: e6:90:cf:cd:c2:96:c9:b7:06:cb:48:81:c2:d1:a2:d3:c2:34: 1e:bb:54:96:78:db:dd:ff:7a:37:98:e6:67:c8:e1:a9:93:2b: 7e:d0:a9:92:82:99:ff:84:82:f6:d0:59:19:86:46:24:f7:76: 04:f0:8e:8c:77:75:a0:36:fb:1c:8f:f9:ca:23:07:3a:dd:c6: d1:5a:3d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzjy6KapIi0pKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmQwOWQ5MjgtMTQwOC00ZmU1LWE2YTMtZTRhNDFhMGQzNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiemsgzEaHEHTD28Tcz4SSfYXabiSn6xbIwUm BPtT2WlW5JTuk4bQ4sDthVcjdgo8mjzxdswa5GUr0L0o35+JlQWBXIiCDr3K69YV KXM+GcrFK256KKPzPa4fsp7v5eGP8nfbCe4VZNoOCuix1lzc8Y8BIaatZ3Qu/fWl ZgEPQIIlHBctrHBvp5E6f4x2tY+/z4sEtY176+QcCslLth4Mc5Pz+7QrZCU/yOOF 1IZ1GZGfCZ3cssI96a59iaXgS/GGRDtTf7ifzl6a9kUxzjEXDiNOyY+KDIR/QvrG p37M8PvRFzMEwcphvK7OARMANKGDekg4ldOh1PBpD44pWo/0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoYFDNANMvzkcXH1a9+0Fp21ZSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTllYzc0YmQtMjE4Yi0z MDk3LWIwMGMtY2VjMWIyZTdkNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+lxqIAqZmB5ksR3fSmaJfN5YnyTMvEiPIUkeyXxmDaz7qXNZAX1m0w fgSsEviPqJQ51lBzwvAP/1NJ4k4I+51itxfrIsZls2mbCUf6IFuDPsxJXl6YMm3u JGzpjZcoafqvs1U45Jq4qHsxXqblAOyVxUdZSbrOnrfyedFkPJHtv4H1C9uvQZTM i0uCBnwsZRSbWn4v1NgrTQkFr1sPJnI4lKlJyQOpH6rBsvXVGajkn7RSoeaQz83C lsm3BstIgcLRotPCNB67VJZ4293/ejeY5mfI4amTK37QqZKCmf+EgvbQWRmGRiT3 dgTwjox3daA2+xyP+cojBzrdxtFaPR0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:53 2025 by rpki-client