$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb77a6fa-8ab4-37e6-a2c6-a1c0849842b9.roa File: cb77a6fa-8ab4-37e6-a2c6-a1c0849842b9.roa (raw, json) Hash identifier: EMdhNySp9Nzy7AMtYjIpHrMHkX5a/wViNVXQTMGiuNo= Subject key identifier: AF:BD:F7:9B:A2:2E:44:CA:D6:B2:F3:05:D7:06:8F:92:8C:A4:EE:75 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C5A0D8B2FF9FBAEBF1F0500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb77a6fa-8ab4-37e6-a2c6-a1c0849842b9.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397215 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:0d:8b:2f:f9:fb:ae:bf:1f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=6363c1fd-62e3-4fc0-a842-609a7234ce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:2f:e4:f4:39:1f:4d:ba:e3:25:47:e1:8a: 4c:75:2d:c0:f6:3d:d4:aa:2a:52:37:c2:5e:c8:67: 38:a3:9a:3b:a2:6f:06:93:66:c2:a8:10:70:04:d0: 5b:83:35:78:86:2b:d3:4f:74:84:49:82:27:31:ce: 6f:85:17:15:b7:32:fb:d4:84:0b:1b:f0:2b:f7:53: 9a:1b:ea:e8:4f:98:0a:84:26:85:dd:fa:51:80:96: 77:81:fa:a4:37:8c:a7:ec:ca:6c:30:98:e8:71:3a: 38:4b:62:9f:cc:28:6c:f4:b0:27:c0:fd:d6:1f:69: 3e:a3:57:39:61:48:c8:38:47:d4:e4:34:f0:e4:51: 64:2c:1b:80:5c:96:e4:07:a2:0b:f1:1c:84:44:f5: 0e:1e:42:5d:39:b2:66:83:c0:b0:23:4b:52:86:bb: d4:1d:bc:76:c6:96:0f:4d:af:15:1e:b4:f8:1a:b6: bc:18:b4:ca:de:50:84:de:d6:42:09:75:48:4f:5c: 4b:87:86:85:c9:05:61:78:6f:55:44:83:bd:be:e8: 15:41:18:e8:09:0b:1c:d6:b1:97:a0:7c:9e:32:1d: 21:91:80:fe:16:c6:ef:95:ad:50:50:99:e5:f0:0f: 6e:1d:d3:03:74:9b:3f:8c:16:ce:7b:01:ed:6b:fc: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BD:F7:9B:A2:2E:44:CA:D6:B2:F3:05:D7:06:8F:92:8C:A4:EE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb77a6fa-8ab4-37e6-a2c6-a1c0849842b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:06:88:88:27:55:5c:ad:9d:55:8a:a0:ff:25:a2:1f:57:bd: e8:93:61:10:60:6e:fe:2e:df:99:2f:2b:ce:2b:55:b1:52:dd: 4c:0d:ca:15:92:17:a6:3b:30:ad:a8:ab:95:c4:cd:94:4a:d5: 0c:00:d6:cd:45:54:7e:d4:bd:10:92:b2:30:1b:12:41:9a:fb: ee:da:75:50:94:a6:36:5e:af:02:69:b4:d4:85:79:8f:ba:4e: 7b:6d:ef:53:88:cb:b7:97:c6:66:25:85:c0:d2:1a:3a:9a:66: 65:11:f4:7f:77:62:2e:8a:1d:59:6b:a7:17:6f:31:a6:ea:84: 86:80:52:7e:73:3b:c2:f2:22:07:c0:81:87:2a:bd:89:a1:d2: 40:01:55:01:17:95:f4:49:42:a9:c2:43:bf:20:43:27:5f:03: e0:63:45:c8:70:2e:be:d6:01:fe:87:f9:87:55:40:ec:16:5a: 29:e8:f5:70:86:c7:aa:9e:05:c4:16:07:1a:c6:d1:3e:8e:cc: 05:4e:82:73:0c:56:b0:67:02:14:8d:ca:80:f7:ff:1a:71:7b: a9:b3:60:5a:f5:c1:ab:3a:31:b1:e9:ea:51:0d:8e:64:b5:8e: e7:28:54:67:30:98:e1:9b:8a:51:a7:41:98:8a:d1:32:83:e4: 4c:ab:f1:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWg2LL/n7rr8fBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NjM2M2MxZmQtNjJlMy00ZmMwLWE4NDItNjA5YTcyMzRjZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsv5PQ5H0264yVH4YpMdS3A9j3UqipSN8Je yGc4o5o7om8Gk2bCqBBwBNBbgzV4hivTT3SESYInMc5vhRcVtzL71IQLG/Ar91Oa G+roT5gKhCaF3fpRgJZ3gfqkN4yn7MpsMJjocTo4S2KfzChs9LAnwP3WH2k+o1c5 YUjIOEfU5DTw5FFkLBuAXJbkB6IL8RyERPUOHkJdObJmg8CwI0tShrvUHbx2xpYP Ta8VHrT4Gra8GLTK3lCE3tZCCXVIT1xLh4aFyQVheG9VRIO9vugVQRjoCQsc1rGX oHyeMh0hkYD+Fsbvla1QUJnl8A9uHdMDdJs/jBbOewHta/y4MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+995uiLkTK1rLzBdcGj5KMpO51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2I3N2E2ZmEtOGFiNC0z N2U2LWEyYzYtYTFjMDg0OTg0MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsGiIgnVVytnVWKoP8loh9XveiTYRBgbv4u35kvK84rVbFS3UwNyhWS F6Y7MK2oq5XEzZRK1QwA1s1FVH7UvRCSsjAbEkGa++7adVCUpjZerwJptNSFeY+6 Tntt71OIy7eXxmYlhcDSGjqaZmUR9H93Yi6KHVlrpxdvMabqhIaAUn5zO8LyIgfA gYcqvYmh0kABVQEXlfRJQqnCQ78gQydfA+BjRchwLr7WAf6H+YdVQOwWWino9XCG x6qeBcQWBxrG0T6OzAVOgnMMVrBnAhSNyoD3/xpxe6mzYFr1was6MbHp6lENjmS1 jucoVGcwmOGbilGnQZiK0TKD5Eyr8QU= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:35 2025 by rpki-client