$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca652eb5-8f23-3c04-a9f2-f6ccae60d22b.roa File: ca652eb5-8f23-3c04-a9f2-f6ccae60d22b.roa (raw, json) Hash identifier: m9sg2Ab9xpu2gHQYzzAAITPzcg2+3tOPHRbDiEgYleI= Subject key identifier: E2:D3:5D:EF:0E:B9:D5:30:24:C1:F8:C6:2E:06:31:36:E3:4A:DA:D6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF54D7762924C47B8AF3C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca652eb5-8f23-3c04-a9f2-f6ccae60d22b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397218 IP address blocks: 156.154.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:54:d7:76:29:24:c4:7b:8a:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=85be2ca8-7ba0-4fbd-8a77-5662d50702e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:81:2d:95:93:d1:20:cc:98:5a:2b:7b:89: 5e:3e:d7:8a:4d:6d:73:b1:3f:22:d2:90:d5:56:76: 68:84:80:83:1d:23:f5:c0:6b:76:74:81:f9:9e:fd: cf:3b:8c:b2:4e:f6:27:8c:3f:05:01:f1:b6:74:25: 2b:5e:89:62:50:a4:e0:7d:d5:c8:e0:e0:38:f5:17: 3c:04:a0:da:71:ac:4c:92:1d:b3:0a:20:a6:82:e9: a0:1b:70:f6:e4:9c:76:dc:ef:01:13:d5:84:b2:19: 41:6d:ad:0d:ec:bb:59:79:40:69:e2:e1:bd:13:16: a8:64:88:8e:90:f1:4e:5b:51:92:cf:e4:54:b2:50: 75:15:a2:d9:cb:97:70:e5:d6:42:af:93:a2:00:79: 34:cf:2d:c5:6d:e6:92:c9:94:ce:69:fa:25:86:4b: 03:74:62:b5:64:e5:3c:bd:b7:73:12:58:48:b6:4f: 53:e6:5e:76:fd:4d:6c:28:5b:97:c8:e6:f7:e3:2b: a5:20:6a:fd:fa:38:e2:6e:32:bc:b2:f4:7e:f3:a6: ad:48:41:d4:c8:80:b4:20:65:88:bd:d2:bb:a1:b0: 19:99:1a:2a:ca:11:cc:b1:60:ba:76:09:8c:2c:96: 73:86:92:2f:03:4e:cd:dd:38:0e:6c:13:8c:31:d3: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:5D:EF:0E:B9:D5:30:24:C1:F8:C6:2E:06:31:36:E3:4A:DA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca652eb5-8f23-3c04-a9f2-f6ccae60d22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9b:64:fd:e1:5c:27:7c:45:f4:03:9a:34:96:ad:28:b6:30: 9f:29:bb:5e:d4:dc:e3:fa:8d:2b:71:37:89:ce:8a:fa:8d:7e: 49:01:66:81:57:94:5f:da:da:92:74:14:2b:d6:f0:b6:d4:c9: 89:18:67:5b:12:38:7b:39:36:6f:ef:59:cf:d2:14:24:29:c8: 29:c9:43:0c:53:79:5c:74:d6:b6:9f:4e:bd:da:81:7e:e7:a8: 83:dc:46:2b:a0:6a:f4:de:f5:80:66:49:2f:c2:6c:28:d1:5e: 4e:ec:f8:68:94:1e:32:98:f3:53:e5:ff:01:c4:07:5d:e5:d3: ba:17:6a:6b:b0:0f:cf:af:1c:93:f5:cc:50:92:d1:ef:81:12: be:82:fc:be:05:cc:0b:5e:60:b3:69:de:8c:6a:28:0f:f7:08: f5:3d:13:d2:08:b9:33:35:84:8d:51:4d:ba:d6:de:8b:a6:60: f6:91:90:fe:0a:c4:1d:c1:74:a2:ea:5e:6c:79:c5:ba:8c:48: 37:a7:bd:97:26:1d:69:97:a2:72:44:57:ac:c7:31:ba:dd:a0: d9:8c:7b:34:45:2e:e3:0f:72:9c:7f:26:f9:a1:26:26:03:f7: 8b:29:a5:07:98:b3:e6:e6:e8:c8:28:b7:e0:74:8d:4f:d7:e7: f2:2a:6f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1TXdikkxHuK88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ODViZTJjYTgtN2JhMC00ZmJkLThhNzctNTY2MmQ1MDcwMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGBLZWT0SDMmFore4lePteKTW1zsT8i0pDV VnZohICDHSP1wGt2dIH5nv3PO4yyTvYnjD8FAfG2dCUrXoliUKTgfdXI4OA49Rc8 BKDacaxMkh2zCiCmgumgG3D25Jx23O8BE9WEshlBba0N7LtZeUBp4uG9ExaoZIiO kPFOW1GSz+RUslB1FaLZy5dw5dZCr5OiAHk0zy3FbeaSyZTOafolhksDdGK1ZOU8 vbdzElhItk9T5l52/U1sKFuXyOb34yulIGr9+jjibjK8svR+86atSEHUyIC0IGWI vdK7obAZmRoqyhHMsWC6dgmMLJZzhpIvA07N3TgObBOMMdMWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLTXe8OudUwJMH4xi4GMTbjStrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2E2NTJlYjUtOGYyMy0z YzA0LWE5ZjItZjZjY2FlNjBkMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmbZP3hXCd8RfQDmjSWrSi2MJ8pu17U3OP6jStxN4nOivqNfkkBZoFX lF/a2pJ0FCvW8LbUyYkYZ1sSOHs5Nm/vWc/SFCQpyCnJQwxTeVx01rafTr3agX7n qIPcRiugavTe9YBmSS/CbCjRXk7s+GiUHjKY81Pl/wHEB13l07oXamuwD8+vHJP1 zFCS0e+BEr6C/L4FzAteYLNp3oxqKA/3CPU9E9IIuTM1hI1RTbrW3oumYPaRkP4K xB3BdKLqXmx5xbqMSDenvZcmHWmXonJEV6zHMbrdoNmMezRFLuMPcpx/JvmhJiYD 94sppQeYs+bm6Mgot+B0jU/X5/Iqb5o= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:47 2025 by rpki-client