$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa File: d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa (raw, json) Hash identifier: MmO7nURq+c/UrppMx/TAzW8jBHo8hl8qnIunbzW2cPg= Subject key identifier: 9C:5F:C0:36:CA:80:BE:36:A2:28:C9:1E:D5:51:02:7B:29:CE:5F:5F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DB5EF1F7FC3C9D8ACF40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397219 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:db:5e:f1:f7:fc:3c:9d:8a:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=418fa84d-e0d9-4a93-abf4-2ab4c1b35bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:46:bc:81:cb:3a:3b:f7:8a:da:02:7c:5c: 9d:32:ee:26:fd:7a:af:c6:20:97:57:fe:a8:4f:63: 30:06:81:fb:1d:a9:63:f5:e6:08:3a:b9:e5:2b:ec: d7:b7:74:97:6d:41:45:6a:71:2a:1c:d5:f2:98:df: 1e:39:ef:55:d4:e4:41:eb:e7:e6:3d:77:86:2e:5f: 90:5d:0a:ca:38:15:7b:ed:e1:dc:b5:1c:6d:4d:fd: c7:a8:57:59:de:02:d8:f1:44:ea:99:ba:df:1b:61: b8:3d:ff:4c:5a:bc:cc:23:e9:c9:04:d4:fd:85:48: 56:5a:65:37:2c:9b:6d:bd:32:0c:77:1c:97:e3:10: cf:78:b8:3e:75:a4:e9:c4:3d:29:30:b6:8b:4e:6e: 38:58:9c:e4:e3:25:7e:96:f6:a8:37:e5:0b:64:ef: 34:d8:12:8a:ba:fe:47:56:ca:78:65:80:13:3f:d7: bd:f2:e7:d2:5a:0c:c1:58:ed:4c:2d:2f:71:2c:4e: 6c:ee:c2:19:1e:4d:06:b6:da:84:21:a1:6f:a1:81: 7e:45:93:9c:a2:09:6e:6d:7b:36:a9:ab:75:77:0b: 5a:2d:e3:27:5f:85:44:cc:8f:fe:9e:52:ac:82:61: 69:80:ce:26:b1:4c:c7:89:4b:26:d5:cc:6f:e6:9c: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5F:C0:36:CA:80:BE:36:A2:28:C9:1E:D5:51:02:7B:29:CE:5F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ff:38:55:2b:22:7c:db:d7:86:be:de:46:81:9a:96:1e:86: 2b:e9:50:32:04:92:df:3a:60:1a:36:34:b4:ee:de:15:ee:4f: 3d:50:9a:74:e9:52:25:0e:61:41:18:d7:cb:d5:a7:22:88:04: 04:c8:2e:f9:37:55:eb:4f:4a:a3:54:88:43:b1:d4:dd:cc:de: 48:9d:68:ab:11:c6:4d:0f:2e:ef:96:09:c5:3e:7a:a9:dc:43: 0f:21:fc:0c:7e:69:e8:f1:96:e0:b1:6e:1a:e8:62:66:b4:d1: 0f:f8:10:64:85:94:cd:e9:2d:df:cc:64:9c:b8:2e:71:95:a9: 80:95:24:cc:8d:16:ec:9b:33:3a:80:08:d0:60:3f:b0:7b:a4: 2f:10:a1:f9:fd:8b:35:2b:08:8a:34:e0:05:13:a8:67:a9:57: 70:88:a0:dd:4d:15:d0:29:db:24:27:19:42:9e:f4:6e:69:24: af:40:c0:fc:02:0d:f5:a3:33:33:cc:74:bb:8e:20:e8:df:bb: 8a:79:15:9a:70:8f:29:d2:d9:c1:f9:be:8f:ed:0e:61:f6:1e: 61:53:1c:af:2e:b4:6c:7a:52:5f:ec:10:f1:9b:97:9e:91:88: 14:bf:9f:c9:7a:a5:ce:21:39:a4:87:3a:39:87:99:0a:c5:ff: fa:42:10:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtte8ff8PJ2Kz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDE4ZmE4NGQtZTBkOS00YTkzLWFiZjQtMmFiNGMxYjM1YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyFGvIHLOjv3itoCfFydMu4m/XqvxiCXV/6o T2MwBoH7Halj9eYIOrnlK+zXt3SXbUFFanEqHNXymN8eOe9V1ORB6+fmPXeGLl+Q XQrKOBV77eHctRxtTf3HqFdZ3gLY8UTqmbrfG2G4Pf9MWrzMI+nJBNT9hUhWWmU3 LJttvTIMdxyX4xDPeLg+daTpxD0pMLaLTm44WJzk4yV+lvaoN+ULZO802BKKuv5H Vsp4ZYATP9e98ufSWgzBWO1MLS9xLE5s7sIZHk0GttqEIaFvoYF+RZOcoglubXs2 qat1dwtaLeMnX4VEzI/+nlKsgmFpgM4msUzHiUsm1cxv5pyJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxfwDbKgL42oijJHtVRAnspzl9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDJmNTg2M2MtYzZmZi0z N2E1LTk5YmQtY2I3ZTFjODg0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP/OFUrInzb14a+3kaBmpYehivpUDIEkt86YBo2NLTu3hXuTz1QmnTp UiUOYUEY18vVpyKIBATILvk3VetPSqNUiEOx1N3M3kidaKsRxk0PLu+WCcU+eqnc Qw8h/Ax+aejxluCxbhroYma00Q/4EGSFlM3pLd/MZJy4LnGVqYCVJMyNFuybMzqA CNBgP7B7pC8Qofn9izUrCIo04AUTqGepV3CIoN1NFdAp2yQnGUKe9G5pJK9AwPwC DfWjMzPMdLuOIOjfu4p5FZpwjynS2cH5vo/tDmH2HmFTHK8utGx6Ul/sEPGbl56R iBS/n8l6pc4hOaSHOjmHmQrF//pCENI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:20 2025 by rpki-client