$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d424c847-2c79-392e-b878-2c554a1207fb.roa File: d424c847-2c79-392e-b878-2c554a1207fb.roa (raw, json) Hash identifier: qNuANQtYFTJJaXhLkBlacLK17cbvRCOnZqwrHTL7O2Y= Subject key identifier: D7:49:F2:C0:7D:09:58:05:C4:6C:2B:17:1D:BA:84:2A:EE:4D:9E:7F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59EF816FF51BFC20DC1D98 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d424c847-2c79-392e-b878-2c554a1207fb.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397223 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:ef:81:6f:f5:1b:fc:20:dc:1d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=70a5c92f-b24c-4858-9ae9-8866aa1a92fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:77:d2:cb:9c:22:74:dc:13:2e:77:8d:7e: a8:da:b3:30:7a:87:1a:38:4f:ba:54:e2:b0:47:f9: d3:a3:f7:d3:6d:d7:5e:b6:38:86:10:da:70:3e:dc: 74:d7:a3:5b:63:ac:1b:07:14:92:63:80:5d:cc:ec: 4c:1a:6e:b1:0d:94:4a:ea:b8:95:79:9f:76:1f:5c: bf:93:77:19:30:34:c2:d3:8a:f3:2c:33:74:18:22: d0:80:c3:3d:74:36:d0:de:20:0c:fc:4f:ab:d0:20: ed:01:f6:1f:e5:9c:23:b4:3e:b9:7e:f2:18:b9:e8: da:33:9c:45:ed:09:ac:f1:90:04:74:7f:15:33:3c: 8c:e2:39:7c:57:17:fd:82:54:6e:06:6d:38:0a:dd: 13:34:35:dd:af:e1:90:9b:49:d6:00:4c:c7:6d:60: 14:84:52:17:3d:aa:2f:af:e3:6b:e4:35:4b:21:aa: 6f:1d:23:0d:fa:ae:4c:05:80:d4:11:85:15:21:bf: 64:e9:9c:68:3e:f0:8e:ff:70:a3:a9:79:61:2e:cd: a7:33:fe:84:ef:65:ee:ac:5f:d8:99:09:f4:10:37: 50:26:07:73:d6:8a:5c:e0:cc:04:d7:1a:44:b1:57: c1:bb:a5:ef:88:86:42:d7:4a:45:84:ff:58:cf:42: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:49:F2:C0:7D:09:58:05:C4:6C:2B:17:1D:BA:84:2A:EE:4D:9E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d424c847-2c79-392e-b878-2c554a1207fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3a:a2:c1:bc:c2:19:1c:fc:49:79:4e:20:cd:ce:57:1c:2a: 3b:97:3b:e9:63:00:51:af:d6:2f:c1:86:7f:59:dc:cb:12:92: d4:e9:ba:f6:78:6c:0b:86:44:99:da:5c:9a:b4:da:6b:e0:a8: 11:51:df:84:ac:64:ae:61:d2:4d:33:24:5a:34:e4:29:b3:ab: 04:31:41:fe:f5:7e:e6:35:5b:c8:e8:48:2d:8f:8d:c1:2b:fc: bf:30:81:58:c3:06:3e:86:c3:e3:5a:0b:18:fa:46:82:2a:c7: e8:00:fb:cf:d6:39:43:39:a0:f4:3c:fb:80:a5:d7:4c:78:42: b7:c1:5a:c8:4a:0c:59:22:47:5c:68:28:bf:f8:de:84:50:dd: 19:7a:4d:40:b0:25:2d:18:0f:68:d2:cd:0e:12:02:c4:b0:57: 25:25:c6:a2:cb:b4:c4:1b:9e:5d:dd:64:9f:f6:a7:d1:7c:be: d5:39:df:98:2b:ec:56:cd:ae:00:bf:12:21:dd:0b:7b:73:d9: 5a:44:ce:c2:7a:14:0b:be:6f:20:07:1f:d2:09:98:58:fe:a3: 06:8d:00:87:73:e9:f2:4a:47:97:1c:cc:a2:84:6a:75:49:51: d4:2e:a6:98:5b:a8:b3:02:0e:47:65:88:11:2f:e2:2b:cc:31: b5:b4:d3:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWe+Bb/Ub/CDcHZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NzBhNWM5MmYtYjI0Yy00ODU4LTlhZTktODg2NmFhMWE5MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMp30sucInTcEy53jX6o2rMweocaOE+6VOKw R/nTo/fTbddetjiGENpwPtx016NbY6wbBxSSY4BdzOxMGm6xDZRK6riVeZ92H1y/ k3cZMDTC04rzLDN0GCLQgMM9dDbQ3iAM/E+r0CDtAfYf5ZwjtD65fvIYuejaM5xF 7Qms8ZAEdH8VMzyM4jl8Vxf9glRuBm04Ct0TNDXdr+GQm0nWAEzHbWAUhFIXPaov r+Nr5DVLIapvHSMN+q5MBYDUEYUVIb9k6ZxoPvCO/3CjqXlhLs2nM/6E72XurF/Y mQn0EDdQJgdz1opc4MwE1xpEsVfBu6XviIZC10pFhP9Yz0KQiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdJ8sB9CVgFxGwrFx26hCruTZ5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDQyNGM4NDctMmM3OS0z OTJlLWI4NzgtMmM1NTRhMTIwN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc6osG8whkc/El5TiDNzlccKjuXO+ljAFGv1i/Bhn9Z3MsSktTpuvZ4 bAuGRJnaXJq02mvgqBFR34SsZK5h0k0zJFo05CmzqwQxQf71fuY1W8joSC2PjcEr /L8wgVjDBj6Gw+NaCxj6RoIqx+gA+8/WOUM5oPQ8+4Cl10x4QrfBWshKDFkiR1xo KL/43oRQ3Rl6TUCwJS0YD2jSzQ4SAsSwVyUlxqLLtMQbnl3dZJ/2p9F8vtU535gr 7FbNrgC/EiHdC3tz2VpEzsJ6FAu+byAHH9IJmFj+owaNAIdz6fJKR5cczKKEanVJ UdQupphbqLMCDkdliBEv4ivMMbW009Q= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:17 2025 by rpki-client