$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa File: 06d422c5-14b5-351e-a679-38f447a8f768.roa (raw, json) Hash identifier: U7VU7rM3S+YtrTgCXtZWpqOVbd+gcceQ9gA7QM7X5tA= Subject key identifier: 55:F1:94:AD:FD:13:35:D4:54:6E:95:A0:8D:D4:D2:99:90:1B:83:07 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848DF2596830B59C6D4592D2520 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa Signing time: Thu 13 Feb 2025 18:27:53 +0000 ROA not before: Thu 13 Feb 2025 18:27:53 +0000 ROA not after: Wed 14 May 2025 17:27:53 +0000 asID: 12008 IP address blocks: 156.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:25:96:83:0b:59:c6:d4:59:2d:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 13 18:27:53 2025 GMT Not After : May 14 17:27:53 2025 GMT Subject: CN=b87d0fe2-18b8-43a8-b595-369fe1ce9b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:c7:1c:b3:ab:78:0d:67:d9:e6:3d:cc:fc: 57:16:6e:ec:14:0c:26:01:30:b4:84:95:bb:e2:63: 6b:a3:9c:8f:07:9a:77:9e:56:01:db:13:dd:79:a9: 73:e5:54:ce:c4:41:f0:6e:9d:e9:83:35:12:de:a2: 54:45:86:33:18:7e:fb:c8:c2:7c:03:7e:73:3b:bb: 03:12:89:7d:42:3d:fb:a8:c1:6a:74:f5:24:d4:ae: 42:f1:5d:84:4d:65:f3:9f:27:f9:b8:5b:9d:bc:fd: 93:43:9a:1a:98:3e:93:3c:cc:40:2b:43:98:bd:d8: da:65:b4:f9:cb:76:08:50:56:6d:51:09:9f:a5:78: 60:91:aa:09:ab:1d:a6:44:03:21:db:20:4d:86:98: 55:09:7a:8e:f8:1c:c7:2b:22:65:7c:ae:69:1a:12: cd:c1:0c:1d:48:e3:1b:e2:e6:91:31:a4:40:82:42: a2:6f:c4:71:38:7d:59:ee:06:17:2b:79:0a:3f:48: 23:97:66:de:c6:8e:89:6d:43:11:3a:a2:cf:20:2a: 26:90:b7:0a:f9:39:f7:55:1b:a2:4a:44:3d:bc:88: 0d:33:db:f8:09:9f:6d:74:93:1c:b4:d4:75:9c:8c: a7:b8:09:0b:d5:63:38:59:0f:44:0e:c3:56:bd:86: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F1:94:AD:FD:13:35:D4:54:6E:95:A0:8D:D4:D2:99:90:1B:83:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:eb:e8:1e:1b:95:55:0f:fe:98:b9:b1:6a:72:76:44:e0:93: d8:c5:47:a6:f9:9c:64:1b:6e:dc:2d:e8:0b:df:ea:41:9b:a1: 10:4d:1e:b9:f3:58:bf:70:6d:d9:34:51:15:3a:27:71:da:20: 08:83:b8:1b:fb:4f:02:48:d1:f9:9b:53:98:cd:e4:48:f6:bc: cc:da:3d:31:14:1d:60:e7:17:0e:3c:65:17:a9:66:f2:9a:f3: 59:4f:27:e1:dc:f1:f2:76:d0:31:01:11:45:a9:5e:93:b3:c3: 8e:85:ed:fb:d2:43:23:17:bd:87:b9:80:eb:41:37:0a:d4:f1: b1:5d:66:5e:c5:26:48:49:a4:9a:e3:36:5b:26:de:b0:98:04: 2f:03:6e:e7:73:a3:b7:e6:3c:51:db:95:cd:9b:a5:aa:13:5e: 75:0d:49:cb:68:5f:36:f6:a6:db:ac:fb:a6:fc:7b:79:63:22: d2:9d:fc:26:af:87:0f:05:43:90:df:7a:34:20:23:e3:af:c2: ba:73:fe:4a:b3:6c:c9:e7:6b:20:0b:04:94:97:14:6f:0b:33: 5e:94:01:11:7b:46:aa:cf:29:76:9c:6b:5c:d3:fe:53:2f:95: b5:ba:be:4e:47:45:84:60:36:21:a3:ed:fb:8a:f4:6d:d2:f4: c3:81:61:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfJZaDC1nG1FktJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIxMzE4Mjc1M1oXDTI1MDUxNDE3Mjc1M1owLzEtMCsGA1UEAxMk Yjg3ZDBmZTItMThiOC00M2E4LWI1OTUtMzY5ZmUxY2U5YjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhezHHLOreA1n2eY9zPxXFm7sFAwmATC0hJW7 4mNro5yPB5p3nlYB2xPdealz5VTOxEHwbp3pgzUS3qJURYYzGH77yMJ8A35zO7sD Eol9Qj37qMFqdPUk1K5C8V2ETWXznyf5uFudvP2TQ5oamD6TPMxAK0OYvdjaZbT5 y3YIUFZtUQmfpXhgkaoJqx2mRAMh2yBNhphVCXqO+BzHKyJlfK5pGhLNwQwdSOMb 4uaRMaRAgkKib8RxOH1Z7gYXK3kKP0gjl2bexo6JbUMROqLPIComkLcK+Tn3VRui SkQ9vIgNM9v4CZ9tdJMctNR1nIynuAkL1WM4WQ9EDsNWvYZJwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXxlK39EzXUVG6VoI3U0pmQG4MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDZkNDIyYzUtMTRiNS0z NTFlLWE2NzktMzhmNDQ3YThmNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDr6B4blVUP/pi5sWpydkTgk9jFR6b5nGQbbtwt6Avf6kGboRBNHrnz WL9wbdk0URU6J3HaIAiDuBv7TwJI0fmbU5jN5Ej2vMzaPTEUHWDnFw48ZRepZvKa 81lPJ+Hc8fJ20DEBEUWpXpOzw46F7fvSQyMXvYe5gOtBNwrU8bFdZl7FJkhJpJrj Nlsm3rCYBC8Dbudzo7fmPFHblc2bpaoTXnUNSctoXzb2ptus+6b8e3ljItKd/Cav hw8FQ5DfejQgI+Ovwrpz/kqzbMnnayALBJSXFG8LM16UARF7RqrPKXaca1zT/lMv lbW6vk5HRYRgNiGj7fuK9G3S9MOBYfs= -----END CERTIFICATE-----Generated at Sun Apr 6 22:58:09 2025 by rpki-client