$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa File: d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa (raw, json) Hash identifier: frQHeOcUpDH0PGfq3SpUxEh5tta6LSThRHB+aAPYl7U= Subject key identifier: 4E:DD:E0:04:5F:58:72:9A:15:6B:F5:B7:02:08:3E:80:F2:4D:53:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59EEE328A78BCAA0CB6180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397214 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:ee:e3:28:a7:8b:ca:a0:cb:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=520517f2-4257-4df1-a4d8-30af515ed895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:94:84:c2:f6:4f:7f:54:a6:a6:83:f5:79: 15:06:79:74:f3:f2:19:c7:fb:0b:9a:18:f7:d9:f3: d5:58:92:6a:21:d4:5f:f8:13:9f:72:2e:02:af:a2: 26:47:e0:a8:64:e3:69:70:f9:7a:ce:43:6c:62:fe: e8:1b:d6:08:13:15:7c:fc:85:eb:86:c7:a3:cd:21: 2e:b2:c2:a8:80:63:4c:7d:a5:d7:02:61:fc:0f:ba: 49:22:8f:6e:af:05:38:bb:ad:ff:3d:a2:25:59:78: cb:28:2d:c1:23:56:c8:8f:e6:a0:e6:91:f9:c9:ee: 26:b1:fe:73:14:11:a1:7e:1e:e4:6e:2d:2f:bf:f5: 53:2a:81:36:29:56:d6:bd:ca:ef:42:b0:09:8d:07: 9f:91:58:3d:1c:31:1e:3a:34:9e:5c:63:48:f9:af: 4c:a8:fd:be:19:d8:c2:64:31:b6:c1:8c:34:9b:ea: e8:5a:f0:eb:3f:1e:58:52:34:44:a9:77:6b:50:e4: e1:07:47:33:5f:91:69:8c:24:50:92:0c:53:4b:68: 33:d0:08:ec:f2:7b:39:66:76:b0:f2:db:16:e8:2b: fd:55:55:84:33:1d:c2:fd:ad:92:c2:19:82:19:83: f8:02:63:d7:a2:f2:0c:2e:e5:bd:df:43:9c:13:c2: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:E0:04:5F:58:72:9A:15:6B:F5:B7:02:08:3E:80:F2:4D:53:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d83304d7-2c0a-3ba9-83a5-4402212d62fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:91:82:91:8b:21:c7:c0:b8:db:9b:ec:0b:28:1a:2f:b5:d0: a6:e1:2a:8f:79:e0:08:eb:40:8a:07:cf:39:38:d8:10:e1:79: 3b:70:a9:65:30:85:8a:06:a0:6c:0c:4b:01:85:3c:90:ea:90: 81:aa:be:80:fc:3b:62:99:9c:d1:19:2e:da:99:a2:51:c7:e3: 33:1a:93:ed:73:1c:f7:19:af:2b:68:be:f5:3b:ce:d9:ff:55: f8:a1:66:d2:8b:74:6f:4f:78:c0:63:cb:0b:bd:f1:80:21:f3: c8:ce:f4:40:c7:3e:b2:95:a2:ba:66:74:04:79:70:e8:82:45: 5c:72:5a:d0:00:37:d5:2f:41:a0:b0:71:00:5c:ad:fd:05:55: 56:ee:05:56:c2:25:61:bc:d1:9a:1d:f2:84:5d:29:9f:c4:85: db:62:85:1a:f4:d2:e9:7c:f8:c0:35:42:3e:c4:fc:ca:24:f1: a1:ab:5a:9c:65:05:f3:46:95:25:d6:d5:6c:a0:d0:4f:59:2f: 25:84:7d:27:23:4a:bf:c0:83:d9:a1:53:cd:6a:42:b3:f9:b8: fd:45:13:e0:e7:f2:7f:e5:50:d9:cd:ce:cb:6f:9a:06:74:f2: 64:18:4f:60:9a:03:17:54:fc:6d:98:cc:0e:4d:25:30:db:b2: f0:14:6f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWe7jKKeLyqDLYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NTIwNTE3ZjItNDI1Ny00ZGYxLWE0ZDgtMzBhZjUxNWVkODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N2UhML2T39UpqaD9XkVBnl08/IZx/sLmhj3 2fPVWJJqIdRf+BOfci4Cr6ImR+CoZONpcPl6zkNsYv7oG9YIExV8/IXrhsejzSEu ssKogGNMfaXXAmH8D7pJIo9urwU4u63/PaIlWXjLKC3BI1bIj+ag5pH5ye4msf5z FBGhfh7kbi0vv/VTKoE2KVbWvcrvQrAJjQefkVg9HDEeOjSeXGNI+a9MqP2+GdjC ZDG2wYw0m+roWvDrPx5YUjREqXdrUOThB0czX5FpjCRQkgxTS2gz0Ajs8ns5Znaw 8tsW6Cv9VVWEMx3C/a2SwhmCGYP4AmPXovIMLuW930OcE8KMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7d4ARfWHKaFWv1twIIPoDyTVMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDgzMzA0ZDctMmMwYS0z YmE5LTgzYTUtNDQwMjIxMmQ2MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACRgpGLIcfAuNub7AsoGi+10KbhKo954AjrQIoHzzk42BDheTtwqWUw hYoGoGwMSwGFPJDqkIGqvoD8O2KZnNEZLtqZolHH4zMak+1zHPcZrytovvU7ztn/ VfihZtKLdG9PeMBjywu98YAh88jO9EDHPrKVorpmdAR5cOiCRVxyWtAAN9UvQaCw cQBcrf0FVVbuBVbCJWG80Zod8oRdKZ/EhdtihRr00ul8+MA1Qj7E/Mok8aGrWpxl BfNGlSXW1Wyg0E9ZLyWEfScjSr/Ag9mhU81qQrP5uP1FE+Dn8n/lUNnNzstvmgZ0 8mQYT2CaAxdU/G2YzA5NJTDbsvAUb+E= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:16 2025 by rpki-client