$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa File: aeef4753-8f66-39e0-bfb7-8558d699d846.roa (raw, json) Hash identifier: BRToJJ+HMSmf0TtKU+if7WLMRDWTz3FuD4i0dBaMw7I= Subject key identifier: AE:D9:02:CA:FE:60:FC:D5:6F:FD:3F:26:D4:11:7E:46:3C:4D:8D:97 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A072C878D1D9162230F40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397238 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:07:2c:87:8d:1d:91:62:23:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=43f47a89-1bc4-46e8-9744-7ec569f9b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:fb:71:52:95:6a:73:2f:54:b3:ed:17:03: 69:3d:54:4e:b0:a8:ba:c9:a9:0a:35:e5:d9:5b:0f: d2:2f:72:68:26:0f:c7:80:bc:ac:6a:20:94:a6:06: 28:fb:55:0d:f2:1d:49:8f:79:62:8d:07:0a:ed:56: fb:43:c6:4b:a5:0e:2d:1b:16:2e:a6:f6:c2:0e:79: 99:d7:31:cc:0d:9f:1e:65:b4:65:e6:c2:2a:e2:dd: f1:9b:7a:0d:5e:be:8c:6f:55:8c:8c:ae:d3:74:e4: cb:5a:38:33:19:3b:5a:e4:67:a0:85:4d:85:89:be: 9d:d9:57:2e:f2:84:36:a2:c3:2b:7e:ac:6e:06:0e: 16:19:d8:85:44:8a:fd:c9:24:1b:fe:05:e1:47:ae: 91:91:c2:9f:c3:38:6d:da:6c:96:82:68:6a:14:68: 11:1c:58:e3:d5:25:4d:6b:2d:b9:0d:9f:3b:aa:70: ba:1e:14:e8:6c:7b:2f:f0:e0:62:3a:2f:df:0e:50: 92:27:f9:c5:79:32:47:34:bf:2b:a8:40:ab:35:c9: 4f:bc:c4:ac:75:fb:2b:69:b5:ee:f3:39:72:0c:f5: 44:85:47:a2:c7:ee:fe:30:95:27:a7:ed:cf:c5:9d: f5:52:93:c1:3f:d1:99:20:90:62:5c:db:13:e3:4c: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D9:02:CA:FE:60:FC:D5:6F:FD:3F:26:D4:11:7E:46:3C:4D:8D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:41:75:9a:de:96:64:92:9d:42:a3:de:ee:b1:ba:00:6f:14: 2a:be:9e:1b:2d:42:79:67:5a:0b:e7:0b:84:da:87:1c:e7:f2: 34:e7:ac:9b:12:fd:84:70:92:a6:dc:59:21:69:9a:a7:12:ec: 54:fd:48:1f:04:d9:c2:46:a9:b7:77:f4:45:54:92:2a:a4:79: 09:b4:ec:64:a6:a8:bc:fa:8b:e1:50:2a:50:28:24:6c:2a:55: d9:08:c5:f8:7e:2f:6a:dc:84:da:43:ce:05:f6:d9:91:37:e1: f1:a1:15:35:ae:ce:1e:cf:ec:7b:4b:1c:dd:09:f6:93:a2:19: 2f:61:7a:f1:69:bd:ec:a3:31:65:f2:4e:76:c3:f0:c7:f0:02: 0b:49:fc:a8:0c:65:6e:bd:b5:94:a4:92:9e:56:34:b2:3d:f8: ba:b1:b6:2b:ac:0a:fe:87:0b:bd:07:24:0d:d8:55:8a:f1:e6: 13:f8:7f:9c:ff:88:eb:7d:9e:9c:e9:2d:f7:21:dd:1c:78:20: 26:ef:98:9d:7d:c3:71:21:86:43:28:aa:e1:7d:a2:ac:c4:a0: 28:39:37:b0:80:b4:0b:f0:23:94:9d:94:ea:aa:b1:6d:aa:2a: 87:69:28:19:e7:df:43:a9:44:63:24:74:ae:81:15:b6:61:bb: 9c:a0:24:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWgcsh40dkWIjD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NDNmNDdhODktMWJjNC00NmU4LTk3NDQtN2VjNTY5ZjliOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTb7cVKVanMvVLPtFwNpPVROsKi6yakKNeXZ Ww/SL3JoJg/HgLysaiCUpgYo+1UN8h1Jj3lijQcK7Vb7Q8ZLpQ4tGxYupvbCDnmZ 1zHMDZ8eZbRl5sIq4t3xm3oNXr6Mb1WMjK7TdOTLWjgzGTta5GeghU2Fib6d2Vcu 8oQ2osMrfqxuBg4WGdiFRIr9ySQb/gXhR66RkcKfwzht2myWgmhqFGgRHFjj1SVN ay25DZ87qnC6HhTobHsv8OBiOi/fDlCSJ/nFeTJHNL8rqECrNclPvMSsdfsrabXu 8zlyDPVEhUeix+7+MJUnp+3PxZ31UpPBP9GZIJBiXNsT40zfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7ZAsr+YPzVb/0/JtQRfkY8TY2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWVlZjQ3NTMtOGY2Ni0z OWUwLWJmYjctODU1OGQ2OTlkODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5BdZrelmSSnUKj3u6xugBvFCq+nhstQnlnWgvnC4Tahxzn8jTnrJsS /YRwkqbcWSFpmqcS7FT9SB8E2cJGqbd39EVUkiqkeQm07GSmqLz6i+FQKlAoJGwq VdkIxfh+L2rchNpDzgX22ZE34fGhFTWuzh7P7HtLHN0J9pOiGS9hevFpveyjMWXy TnbD8MfwAgtJ/KgMZW69tZSkkp5WNLI9+LqxtiusCv6HC70HJA3YVYrx5hP4f5z/ iOt9npzpLfch3Rx4ICbvmJ19w3EhhkMoquF9oqzEoCg5N7CAtAvwI5SdlOqqsW2q KodpKBnn30OpRGMkdK6BFbZhu5ygJNc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:00 2025 by rpki-client