$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa File: cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa (raw, json) Hash identifier: JyOvDkittSepQVwTTqLBTReu6LsDPQ/ksoRC1E/j9WI= Subject key identifier: 57:9C:04:B0:64:37:C3:09:24:3A:3E:B7:4E:87:D5:08:35:27:7B:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B6428AD7ED0A1E2F06E4640 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397241 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:28:ad:7e:d0:a1:e2:f0:6e:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=07a151f3-7a32-4d45-9926-799dbd4100f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:76:09:fb:e0:62:fc:05:ba:64:31:44:4c: d6:2f:9b:dd:88:0f:6d:94:6b:a5:1a:d1:a0:cf:f5: bf:63:19:e1:a5:0e:41:33:3c:2b:f1:80:84:bf:0d: bf:70:b8:f2:b3:b6:c6:e0:83:3b:51:f4:a7:1e:c5: db:e9:48:f9:7a:59:53:c1:93:16:9d:fa:b1:36:2c: 93:3e:e9:2d:1e:46:89:c3:a1:d1:d8:aa:a1:d3:e3: 07:a4:02:ac:b4:68:b4:bc:f5:78:fe:4f:59:75:c0: 06:03:b1:cd:c1:23:c8:b0:2e:a5:12:20:8c:e5:23: 1a:17:78:e2:01:e3:7c:1c:5a:dc:01:8f:17:4d:31: 16:23:3e:b4:b4:5f:14:52:0d:a7:85:b4:92:55:91: 95:86:de:2d:bf:fa:24:19:f2:a2:47:69:22:35:0a: f4:40:63:ea:7f:de:41:13:84:7e:eb:6b:0d:cf:d9: 82:65:7f:5b:3b:87:7d:14:ba:47:80:1c:7d:08:8e: a5:b7:38:5d:f4:c5:35:20:49:e4:8c:c5:f1:8b:1f: 0f:3a:18:31:fa:fb:da:48:1e:4f:b7:d8:99:e2:e4: 2a:6f:b2:67:68:a1:89:99:78:ad:04:46:c9:9b:ec: f1:a7:25:44:8e:94:56:58:eb:b4:c8:25:e5:b7:de: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:04:B0:64:37:C3:09:24:3A:3E:B7:4E:87:D5:08:35:27:7B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:67:09:26:d1:f4:67:e8:49:17:3c:7c:82:82:de:b5:96:48: 15:6f:53:73:b8:8c:af:18:5b:44:3e:e8:ba:b1:1d:12:8e:97: 34:35:1a:65:93:04:a3:bf:ef:1a:36:0f:aa:9b:3c:03:36:96: 33:e7:44:a6:96:4c:cb:86:8a:72:b2:00:db:5f:1c:86:36:58: 84:c0:37:41:32:0d:6d:a0:8d:3e:c7:7c:fd:6e:b5:69:8d:23: 53:93:e6:35:16:b1:89:72:fe:5f:78:7c:4e:46:a2:62:c6:48: 2b:d2:c1:97:cb:99:15:47:af:fa:a7:07:82:32:e0:31:65:02: 86:35:85:14:a1:9d:68:04:03:e3:47:e1:b4:7f:37:47:0b:11: 64:0b:22:28:5b:5a:ef:54:8b:fd:b5:d6:73:99:70:63:2e:91: aa:63:35:3b:6f:a6:10:b3:36:e9:6d:ac:bc:b3:a3:ef:d0:dd: 47:c8:0f:5a:3c:da:7e:bd:a9:bc:fd:4a:49:d3:ea:6c:a1:76: a4:ed:67:60:5d:df:07:8a:e2:d1:36:66:f8:6d:25:2d:7d:05: ec:c4:88:fc:eb:59:ee:1c:99:0c:43:b3:eb:a0:fe:e7:1d:32: c6:52:8c:7e:61:1c:13:1f:53:9a:20:bf:7a:1a:b1:bd:51:af: 9d:6f:22:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCitftCh4vBuRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDdhMTUxZjMtN2EzMi00ZDQ1LTk5MjYtNzk5ZGJkNDEwMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszx2CfvgYvwFumQxREzWL5vdiA9tlGulGtGg z/W/YxnhpQ5BMzwr8YCEvw2/cLjys7bG4IM7UfSnHsXb6Uj5ellTwZMWnfqxNiyT PuktHkaJw6HR2Kqh0+MHpAKstGi0vPV4/k9ZdcAGA7HNwSPIsC6lEiCM5SMaF3ji AeN8HFrcAY8XTTEWIz60tF8UUg2nhbSSVZGVht4tv/okGfKiR2kiNQr0QGPqf95B E4R+62sNz9mCZX9bO4d9FLpHgBx9CI6ltzhd9MU1IEnkjMXxix8POhgx+vvaSB5P t9iZ4uQqb7JnaKGJmXitBEbJm+zxpyVEjpRWWOu0yCXlt95YswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFecBLBkN8MJJDo+t06H1Qg1J3uwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2QyYWE3NGYtZjVmMC0z MTMwLTk4OGYtMjQzZWIwYjYzZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpnCSbR9GfoSRc8fIKC3rWWSBVvU3O4jK8YW0Q+6LqxHRKOlzQ1GmWT BKO/7xo2D6qbPAM2ljPnRKaWTMuGinKyANtfHIY2WITAN0EyDW2gjT7HfP1utWmN I1OT5jUWsYly/l94fE5GomLGSCvSwZfLmRVHr/qnB4Iy4DFlAoY1hRShnWgEA+NH 4bR/N0cLEWQLIihbWu9Ui/211nOZcGMukapjNTtvphCzNultrLyzo+/Q3UfID1o8 2n69qbz9SknT6myhdqTtZ2Bd3weK4tE2ZvhtJS19BezEiPzrWe4cmQxDs+ug/ucd MsZSjH5hHBMfU5ogv3oasb1Rr51vIus= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:33 2025 by rpki-client