$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa File: 027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa (raw, json) Hash identifier: +9Aa7c9/QAZwNK5uJn8+KCcymCuSUk4d1JcfdjFBtsc= Subject key identifier: A8:D9:E3:AA:DC:61:82:C4:BB:19:CD:24:67:AD:45:86:3D:04:1D:93 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99640318B082EA27EC86480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397229 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:40:31:8b:08:2e:a2:7e:c8:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=268a6582-8a51-4d1d-b5f3-62fe97a903aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:47:7b:80:3d:5b:2e:37:32:de:d0:cb:74: 22:4e:92:dc:8c:df:71:eb:cd:7b:57:8f:49:34:55: 80:47:f7:50:19:44:0b:32:6f:64:42:68:ca:25:8b: cb:3e:59:94:ad:a2:f1:09:e8:c1:51:d3:84:28:66: 8a:3e:c9:b1:9b:d0:32:03:ec:47:2e:8b:80:5d:6c: dd:30:03:19:d7:3a:f1:d6:51:bb:e4:e7:1e:b1:03: ee:9e:9d:6c:4d:9c:98:11:83:fa:35:e1:a9:32:d7: 9b:e9:cb:e7:31:fa:12:ac:48:0f:fb:3d:3f:e4:5b: 73:c3:8e:b5:3d:83:04:2b:67:0d:6b:69:09:3e:82: b8:34:8d:b5:45:77:66:86:4d:48:a7:d3:e7:d2:1b: ee:29:3a:ac:1a:2b:b7:4b:ec:a2:6b:40:6d:bc:85: 8f:13:06:01:bf:43:87:c9:18:25:ff:bf:9d:61:f8: e5:3b:4c:50:54:91:aa:8c:7b:a4:31:fe:e5:fb:29: d7:b6:2c:95:28:38:e8:91:aa:52:fc:73:d4:9a:1f: 6c:05:4e:b3:47:19:b1:09:49:8e:3f:49:14:b0:8f: 4b:cc:11:31:4e:9a:bf:f2:f8:86:8e:23:83:cb:da: 97:f9:76:65:2d:80:bd:d5:f9:cd:8c:2b:aa:ff:cc: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:E3:AA:DC:61:82:C4:BB:19:CD:24:67:AD:45:86:3D:04:1D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:d3:38:db:1c:3a:01:9b:2b:a5:75:43:eb:e1:0a:67:d4: f7:ef:3d:0e:b6:d3:aa:9b:2f:5d:2f:b5:b5:f6:a4:03:7e:64: 1c:98:cb:d0:8a:57:21:7c:08:37:1e:08:e4:8e:87:b2:f6:89: 33:83:11:23:c7:5e:de:fe:13:32:77:a8:e1:e4:c3:01:e3:ed: 29:ab:6c:65:ee:3d:d6:5c:77:53:ac:a6:ed:0d:62:77:99:ee: 21:ab:d7:71:08:e6:7a:9e:ba:2b:bb:14:2d:5a:20:53:82:69: ba:66:bf:ad:aa:42:f1:5e:21:6d:4a:54:f3:09:8a:66:3d:07: 65:1d:d9:11:97:c8:25:04:e6:7b:ea:b6:fd:05:24:2b:6b:69: f0:da:db:61:97:8c:25:ff:97:42:92:4b:5e:0e:d1:5e:e1:e4: 84:f9:82:34:42:ee:7c:95:6e:a9:4b:71:f2:c9:f1:70:0a:e9: 36:fe:d2:d2:ab:92:f7:ae:d8:76:17:bb:4d:ad:bf:4e:19:2f: 2e:bd:5e:d2:d5:1e:28:57:b8:04:7f:95:ed:40:44:8d:e8:d6: 41:95:e3:31:d6:c3:e5:7d:c3:6f:7a:ac:80:b2:35:19:1f:b4: 94:91:4b:c7:c2:3d:bc:a0:f3:c9:8b:a8:85:05:0a:ad:b8:4b: c9:04:ab:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkAxiwguon7IZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjY4YTY1ODItOGE1MS00ZDFkLWI1ZjMtNjJmZTk3YTkwM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXVHe4A9Wy43Mt7Qy3QiTpLcjN9x6817V49J NFWAR/dQGUQLMm9kQmjKJYvLPlmUraLxCejBUdOEKGaKPsmxm9AyA+xHLouAXWzd MAMZ1zrx1lG75OcesQPunp1sTZyYEYP6NeGpMteb6cvnMfoSrEgP+z0/5Ftzw461 PYMEK2cNa2kJPoK4NI21RXdmhk1Ip9Pn0hvuKTqsGiu3S+yia0BtvIWPEwYBv0OH yRgl/7+dYfjlO0xQVJGqjHukMf7l+ynXtiyVKDjokapS/HPUmh9sBU6zRxmxCUmO P0kUsI9LzBExTpq/8viGjiODy9qX+XZlLYC91fnNjCuq/8yUJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjZ46rcYYLEuxnNJGetRYY9BB2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDI3ZTNkNGUtYjVmYS0z OTYyLWE2ZTktODUwOGIzMWQyMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpC0zjbHDoBmyuldUPr4Qpn1PfvPQ6206qbL10vtbX2pAN+ZByYy9CK VyF8CDceCOSOh7L2iTODESPHXt7+EzJ3qOHkwwHj7SmrbGXuPdZcd1Ospu0NYneZ 7iGr13EI5nqeuiu7FC1aIFOCabpmv62qQvFeIW1KVPMJimY9B2Ud2RGXyCUE5nvq tv0FJCtrafDa22GXjCX/l0KSS14O0V7h5IT5gjRC7nyVbqlLcfLJ8XAK6Tb+0tKr kveu2HYXu02tv04ZLy69XtLVHihXuAR/le1ARI3o1kGV4zHWw+V9w296rICyNRkf tJSRS8fCPbyg88mLqIUFCq24S8kEqyU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:43 2025 by rpki-client