$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa File: 059909f6-5a49-3860-891a-cb16260d9885.roa (raw, json) Hash identifier: yto8RNhBGCTMWhFCJ6V58o+GZ8XWjngsCyHEFOb9OeU= Subject key identifier: 67:20:70:00:F7:EC:09:F8:90:18:FC:F2:19:66:90:94:1D:F4:41:C0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965A5A1F240FF4D6E5D980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397242 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5a:5a:1f:24:0f:f4:d6:e5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3742ef5a-2dc7-4f4a-ad90-1364948389ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:14:e6:73:76:3a:ad:d3:6f:86:70:cb:e6: 73:32:8d:10:e7:97:68:8b:19:18:79:f0:92:95:a7: 6f:4b:d3:5b:32:28:8a:d7:ff:c1:85:03:4d:25:e6: 51:88:14:5c:1f:b3:c7:76:26:fb:83:f3:a9:4d:6e: 33:a3:8a:0e:49:8c:b3:44:12:78:64:59:87:0b:8f: 64:c0:fe:4e:18:1c:fe:77:fd:05:0e:98:3d:0d:d0: 33:4d:8b:05:24:2e:aa:3a:9e:0e:4f:fd:73:54:cc: 05:44:ad:f4:9d:57:33:ce:05:57:c0:0c:cd:e0:8a: 5d:db:46:16:40:f5:89:c5:07:cf:74:31:92:e4:b2: 6b:cb:f2:fb:80:c9:f6:50:4f:75:7e:79:18:4a:22: 60:2a:b4:da:cb:84:7e:ce:99:c0:89:20:ea:0d:ad: da:67:0e:88:1b:a3:b0:c4:07:96:ba:df:ab:05:74: b3:38:96:14:f2:49:fd:b6:55:77:b5:5e:12:cc:2a: ec:f1:a6:1a:28:5e:b0:da:c6:1f:50:2f:ed:1e:50: 9c:0a:84:67:4b:0c:64:ad:6c:7b:84:e9:d3:fb:02: 75:7b:83:b0:f9:81:11:5a:f1:89:6d:88:cf:82:04: a7:bf:47:92:e1:54:15:23:28:23:d7:09:4e:d0:47: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:20:70:00:F7:EC:09:F8:90:18:FC:F2:19:66:90:94:1D:F4:41:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a6:b3:1d:b4:d9:ed:e2:3c:95:a3:95:a3:a1:c6:1b:47:e3: ed:e0:a2:01:8f:b5:9c:12:c6:98:f2:34:9f:54:bc:a3:c5:c5: d4:fd:84:98:77:98:31:36:f8:27:f9:24:67:80:e8:d7:8f:e8: b1:c8:66:8f:af:35:93:d3:0f:42:e0:8b:99:8e:7a:01:55:45: 20:bb:12:f4:49:68:a2:29:da:05:8b:a9:81:96:b7:b6:d2:14: 1e:4d:06:d0:6d:31:bf:27:1c:38:1b:44:74:6f:e7:40:0a:79: fa:3d:28:09:9f:84:1a:60:f3:1f:93:88:88:61:ef:2e:19:ad: f0:fc:89:07:5b:9a:9d:3e:68:62:9f:a2:3b:9e:77:86:f1:10: ba:db:d8:02:cb:d0:3b:8b:24:55:5c:ae:5e:8a:55:2c:1f:2b: 45:81:b0:15:cc:5d:15:23:60:ef:bd:f4:f2:09:f7:83:87:98: e2:d8:6f:08:84:3f:d2:8c:c0:74:12:b0:a6:cf:c9:17:2c:16: 67:d3:42:f1:27:8b:b6:ed:53:1f:b5:75:25:b3:71:6a:0f:c2: a5:d0:f1:7f:78:df:cb:71:48:65:ce:6b:13:19:4b:e4:aa:c6: 16:06:5c:92:a5:ce:f8:85:ba:75:23:12:a4:e2:83:19:a0:8f: c2:a6:ad:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllpaHyQP9Nbl2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mzc0MmVmNWEtMmRjNy00ZjRhLWFkOTAtMTM2NDk0ODM4OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40YU5nN2Oq3Tb4Zwy+ZzMo0Q55doixkYefCS ladvS9NbMiiK1//BhQNNJeZRiBRcH7PHdib7g/OpTW4zo4oOSYyzRBJ4ZFmHC49k wP5OGBz+d/0FDpg9DdAzTYsFJC6qOp4OT/1zVMwFRK30nVczzgVXwAzN4Ipd20YW QPWJxQfPdDGS5LJry/L7gMn2UE91fnkYSiJgKrTay4R+zpnAiSDqDa3aZw6IG6Ow xAeWut+rBXSzOJYU8kn9tlV3tV4SzCrs8aYaKF6w2sYfUC/tHlCcCoRnSwxkrWx7 hOnT+wJ1e4Ow+YERWvGJbYjPggSnv0eS4VQVIygj1wlO0Eez4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcgcAD37An4kBj88hlmkJQd9EHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDU5OTA5ZjYtNWE0OS0z ODYwLTg5MWEtY2IxNjI2MGQ5ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWmsx202e3iPJWjlaOhxhtH4+3gogGPtZwSxpjyNJ9UvKPFxdT9hJh3 mDE2+Cf5JGeA6NeP6LHIZo+vNZPTD0Lgi5mOegFVRSC7EvRJaKIp2gWLqYGWt7bS FB5NBtBtMb8nHDgbRHRv50AKefo9KAmfhBpg8x+TiIhh7y4ZrfD8iQdbmp0+aGKf ojued4bxELrb2ALL0DuLJFVcrl6KVSwfK0WBsBXMXRUjYO+99PIJ94OHmOLYbwiE P9KMwHQSsKbPyRcsFmfTQvEni7btUx+1dSWzcWoPwqXQ8X9438txSGXOaxMZS+Sq xhYGXJKlzviFunUjEqTigxmgj8KmreM= -----END CERTIFICATE-----Generated at Sun Apr 6 12:47:40 2025 by rpki-client