$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa File: f580c689-2f0d-3e46-b319-b718490a5e1e.roa (raw, json) Hash identifier: 0YCGkF0uBN3W0Pbo//McBT2NuHwuFuKHZgrYByM7D8k= Subject key identifier: 16:DB:03:83:AE:89:95:94:B7:84:E6:F8:86:3B:05:66:74:FA:85:EA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF38C4D577A7D3397F3740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397215 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:38:c4:d5:77:a7:d3:39:7f:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=eb9f947f-1c9b-4d5b-9fe7-d4a97b96f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:bb:a6:eb:5a:82:1b:44:f2:30:ef:59:95: 7d:df:be:33:cd:d5:08:13:46:aa:0a:d8:86:c4:66: dd:86:69:eb:79:5d:82:a9:f5:52:fa:2c:bb:73:45: 4a:bc:6b:74:29:71:8a:a7:9c:d9:92:65:18:24:57: be:78:a7:e7:f8:9d:c0:d1:a5:7d:a1:4b:2f:54:be: d5:ae:1b:b3:8e:83:3f:d2:7a:c6:63:45:f5:6d:14: e0:c1:c5:a7:af:46:d6:f1:4a:1b:7e:ec:f7:03:5a: 20:20:f4:ef:c0:d0:bb:2c:bb:96:68:aa:2d:69:a0: db:d8:b1:7a:8e:26:a9:46:e2:b8:0b:54:ac:34:78: ea:37:9d:c8:a1:b6:85:db:5f:8f:f4:7c:2f:c3:c1: d9:a7:52:a1:7f:f5:40:9d:64:f7:28:de:31:5e:36: be:8d:44:d8:ad:d1:72:a7:33:5d:e0:1d:ab:66:fd: 60:02:88:73:58:b9:a6:44:8b:60:84:78:4f:f4:2a: 88:de:93:24:e7:29:72:08:d6:a3:77:dd:6d:80:8a: b3:71:71:00:a0:38:0c:b0:16:68:e7:d1:4a:d6:75: 70:14:03:84:62:2d:7c:67:6f:04:35:0e:92:95:29: d4:0d:10:68:f1:75:45:13:e4:53:bf:eb:9c:84:b4: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:03:83:AE:89:95:94:B7:84:E6:F8:86:3B:05:66:74:FA:85:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c1:5e:66:71:2c:18:c4:da:99:3d:32:ca:5e:ff:3d:84:94: 41:7d:9b:4c:02:c2:76:7e:74:48:cc:a3:3f:dd:1c:7e:ea:5f: 0a:06:5b:52:f0:78:25:43:02:c6:50:1d:6f:66:8d:0d:b9:b3: 48:1b:37:94:2d:69:06:71:2d:72:28:dd:09:a2:bb:03:76:13: 91:fb:a8:4b:c3:10:12:21:81:5c:b5:3e:51:30:fb:e9:0f:ff: 9e:85:5a:b5:8a:85:6f:50:7e:09:d4:13:c3:69:97:12:75:20: 15:c7:a4:de:ac:89:0c:d5:79:07:d4:de:a1:58:3e:d2:d9:3a: 85:ef:32:25:23:5c:8d:05:14:8f:d4:3e:e2:ce:51:f9:3e:99: e4:0e:6b:1e:c7:7b:4e:1f:d3:dc:b9:79:ed:46:04:21:2a:5e: 2c:f6:a7:c0:bf:9a:fa:5a:21:2a:18:f3:ea:01:51:11:8a:7d: c3:43:5b:4a:17:31:82:93:cf:83:ed:27:c7:66:dc:d6:31:09: 82:20:c7:5b:48:93:46:0e:3e:56:4f:b8:df:b7:b1:90:b2:53: 0e:85:40:ff:59:95:f0:1d:51:4a:11:28:95:12:96:d6:c6:93: 57:0c:c8:ee:27:3d:bd:cf:3f:1b:cb:b8:6f:41:b4:87:a1:00: 7f:fd:17:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzjE1Xen0zl/N0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZWI5Zjk0N2YtMWM5Yi00ZDViLTlmZTctZDRhOTdiOTZmMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysG7putaghtE8jDvWZV9374zzdUIE0aqCtiG xGbdhmnreV2CqfVS+iy7c0VKvGt0KXGKp5zZkmUYJFe+eKfn+J3A0aV9oUsvVL7V rhuzjoM/0nrGY0X1bRTgwcWnr0bW8Uobfuz3A1ogIPTvwNC7LLuWaKotaaDb2LF6 jiapRuK4C1SsNHjqN53IobaF21+P9Hwvw8HZp1Khf/VAnWT3KN4xXja+jUTYrdFy pzNd4B2rZv1gAohzWLmmRItghHhP9CqI3pMk5ylyCNajd91tgIqzcXEAoDgMsBZo 59FK1nVwFAOEYi18Z28ENQ6SlSnUDRBo8XVFE+RTv+uchLRGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbbA4OuiZWUt4Tm+IY7BWZ0+oXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjU4MGM2ODktMmYwZC0z ZTQ2LWIzMTktYjcxODQ5MGE1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfBXmZxLBjE2pk9Mspe/z2ElEF9m0wCwnZ+dEjMoz/dHH7qXwoGW1Lw eCVDAsZQHW9mjQ25s0gbN5QtaQZxLXIo3QmiuwN2E5H7qEvDEBIhgVy1PlEw++kP /56FWrWKhW9QfgnUE8NplxJ1IBXHpN6siQzVeQfU3qFYPtLZOoXvMiUjXI0FFI/U PuLOUfk+meQOax7He04f09y5ee1GBCEqXiz2p8C/mvpaISoY8+oBURGKfcNDW0oX MYKTz4PtJ8dm3NYxCYIgx1tIk0YOPlZPuN+3sZCyUw6FQP9ZlfAdUUoRKJUSltbG k1cMyO4nPb3PPxvLuG9BtIehAH/9F9E= -----END CERTIFICATE-----Generated at Sun Apr 27 11:16:39 2025 by rpki-client