$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa File: e0a41d6a-fe27-377f-8ad1-2b2709489314.roa (raw, json) Hash identifier: doxIa8ws0xTl2+RTYCtR+Y7VDlCvQiWpon2iuDFnSqI= Subject key identifier: 18:14:69:73:80:7A:5B:5D:07:3F:AC:46:8D:BC:9D:8D:30:84:99:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5F865C26DFCC3ED40540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 12008 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5f:86:5c:26:df:cc:3e:d4:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=26f83b06-e215-4e9c-aebd-af7a13122a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:ca:7e:82:68:e8:49:27:6f:f8:d2:8c:cf: 7d:b1:b1:d9:fb:7c:86:29:00:47:ef:ac:8f:9d:f0: f5:87:fb:5b:bb:4f:c3:27:7a:5f:66:ba:d2:23:c8: e4:e9:b2:df:fc:28:1d:c2:2e:39:b4:14:51:c0:b4: d3:c5:be:4f:6b:a4:c5:58:52:2b:13:7d:83:66:21: 86:50:c7:4b:80:b5:1c:b5:de:da:b5:35:c6:d7:9c: 0b:01:3d:17:2d:c8:ee:4e:b0:01:cd:f3:75:c5:23: 75:93:ae:dd:2b:0b:87:b8:20:18:f2:2b:f3:92:6b: 50:b1:95:cc:c8:41:dc:1b:b6:34:1a:f1:40:61:d0: aa:5a:01:1f:dc:0c:0b:e3:43:96:2a:e6:4b:bf:05: 2a:55:a7:49:20:09:65:74:b2:88:f5:fe:99:ef:39: e5:90:9d:6b:f4:c3:2d:4b:8f:cb:bb:83:18:d0:c4: 78:95:a3:93:ea:20:eb:60:c6:d4:d9:2c:7d:8d:cf: d6:27:8f:98:c3:cb:04:52:b3:17:92:ba:4e:ee:3a: fd:ec:6e:3d:a5:9d:5f:1c:cc:ea:be:72:7d:59:73: c3:b1:6a:f3:17:3c:6f:cd:2b:5a:d2:cc:b6:ff:41: 28:ce:ed:5b:be:85:d3:4d:de:bb:e7:00:9d:79:42: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:14:69:73:80:7A:5B:5D:07:3F:AC:46:8D:BC:9D:8D:30:84:99:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f5:5b:af:9e:1b:ff:03:8b:8d:dd:c1:c2:ce:eb:ea:74:ae: d5:65:63:1e:39:88:3e:d4:c7:68:45:4b:fe:96:84:aa:da:75: 25:7f:e1:9e:6d:5a:8c:25:be:05:00:be:e2:fe:f1:d3:78:ec: 27:d6:3c:24:40:83:24:65:cf:d2:71:bf:e4:98:a3:61:ab:f2: ad:58:5d:ae:ca:60:38:c1:c1:3f:d4:51:28:d4:11:18:58:1e: 82:e6:51:76:d7:c8:60:16:3a:86:4d:70:c7:4d:1c:20:7b:70: 2a:a5:d6:98:48:3e:a8:88:b9:c7:2b:d4:6b:b3:64:10:54:61: 2f:ad:54:c8:0d:bd:3b:4d:63:b1:21:db:3e:08:92:10:ed:bd: c5:94:17:42:a4:fc:ec:18:55:4b:e7:0b:cc:95:f8:be:a7:91: cd:60:f9:a5:1a:86:c3:1f:97:f3:63:be:2e:bf:60:13:5d:8d: c1:f7:de:68:8e:ba:c1:23:f9:0a:e7:c4:d5:d6:1b:fa:17:a1: ef:49:2b:31:ce:ba:6f:11:31:be:c1:7a:a1:04:bd:70:bd:c6: 37:1e:53:04:18:07:66:56:b5:4b:6b:55:d9:9f:9a:63:4e:a6: 0f:44:61:f8:97:3f:ee:a9:48:dc:2a:9a:22:fd:56:c1:0e:8c: be:28:42:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1+GXCbfzD7UBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjZmODNiMDYtZTIxNS00ZTljLWFlYmQtYWY3YTEzMTIyYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9nKfoJo6Eknb/jSjM99sbHZ+3yGKQBH76yP nfD1h/tbu0/DJ3pfZrrSI8jk6bLf/Cgdwi45tBRRwLTTxb5Pa6TFWFIrE32DZiGG UMdLgLUctd7atTXG15wLAT0XLcjuTrABzfN1xSN1k67dKwuHuCAY8ivzkmtQsZXM yEHcG7Y0GvFAYdCqWgEf3AwL40OWKuZLvwUqVadJIAlldLKI9f6Z7znlkJ1r9MMt S4/Lu4MY0MR4laOT6iDrYMbU2Sx9jc/WJ4+Yw8sEUrMXkrpO7jr97G49pZ1fHMzq vnJ9WXPDsWrzFzxvzSta0sy2/0Eozu1bvoXTTd675wCdeUIUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgUaXOAeltdBz+sRo28nY0whJlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTBhNDFkNmEtZmUyNy0z NzdmLThhZDEtMmIyNzA5NDg5MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn1W6+eG/8Di43dwcLO6+p0rtVlYx45iD7Ux2hFS/6WhKradSV/4Z5t WowlvgUAvuL+8dN47CfWPCRAgyRlz9Jxv+SYo2Gr8q1YXa7KYDjBwT/UUSjUERhY HoLmUXbXyGAWOoZNcMdNHCB7cCql1phIPqiIuccr1GuzZBBUYS+tVMgNvTtNY7Eh 2z4IkhDtvcWUF0Kk/OwYVUvnC8yV+L6nkc1g+aUahsMfl/Njvi6/YBNdjcH33miO usEj+QrnxNXWG/oXoe9JKzHOum8RMb7BeqEEvXC9xjceUwQYB2ZWtUtrVdmfmmNO pg9EYfiXP+6pSNwqmiL9VsEOjL4oQuA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:19 2025 by rpki-client