$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/127a39f8-1d60-39f8-950c-e266360275aa.roa File: 127a39f8-1d60-39f8-950c-e266360275aa.roa (raw, json) Hash identifier: 2hlhzlIp6fiHZnbCuMALema92YSvEymXHY0a9AS0yAY= Subject key identifier: D1:BF:8D:B2:90:65:7E:E8:D2:86:AB:DC:F7:84:DD:5D:20:59:9B:9F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DC761A13CCAA11D7DC60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/127a39f8-1d60-39f8-950c-e266360275aa.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397238 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:dc:76:1a:13:cc:aa:11:d7:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=9633fdf3-5d7c-4476-a325-890bc1bad809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:37:e7:7a:aa:f2:c1:74:14:03:9e:ec:6d: 9d:a6:6c:f8:99:a3:f9:ba:c4:69:4b:5b:ba:2d:6a: 94:57:72:6d:ff:66:82:d4:d7:4c:2f:75:a6:ff:8d: fa:4a:f3:03:96:92:af:38:00:c4:9e:49:c2:d7:e0: dc:8d:11:8d:38:5e:0e:d2:63:f5:84:d3:b8:1f:69: 37:01:49:1d:2d:82:81:ee:3c:4a:94:29:2d:c6:46: 0c:41:2c:c1:01:b0:1a:ef:3f:31:e3:06:6f:db:8b: 5b:84:da:2d:a0:3d:ad:f8:d3:ee:fe:12:4e:60:4c: b0:7a:c2:b3:ad:b1:48:7d:9a:52:78:47:ba:6c:0e: 50:8e:da:9c:9b:c7:22:bf:1d:4a:75:9d:ca:6b:09: 42:79:55:be:91:8d:79:6d:ba:c1:66:fe:b6:f7:bf: 76:44:77:56:1e:34:ed:84:d3:6d:a1:00:c7:61:a6: f2:f2:4e:2e:36:e9:ec:42:f4:58:52:fd:91:ea:93: 94:d7:3d:57:ea:f4:f1:1c:23:f3:4b:2f:21:0d:c4: 10:8b:7d:92:d3:1d:b9:e6:83:78:1b:7f:59:c5:c8: ef:57:b2:d5:41:51:75:c4:4f:e8:e6:5c:1c:48:cf: 90:79:df:50:ae:d2:30:95:67:4b:79:0c:fb:96:37: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BF:8D:B2:90:65:7E:E8:D2:86:AB:DC:F7:84:DD:5D:20:59:9B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/127a39f8-1d60-39f8-950c-e266360275aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c5:4f:85:20:89:6a:72:c0:06:db:bd:5c:11:30:1d:f7:4e: ce:7a:fd:74:67:38:47:96:2b:21:62:0c:ee:4d:2b:b1:8f:ac: 14:96:bf:fe:52:05:e0:ba:ba:cb:f6:10:f7:df:bd:dc:f1:c7: 51:6c:3d:92:f4:e1:66:8d:b2:66:91:29:02:b6:86:25:fd:85: 21:6b:18:f8:d1:e5:2c:62:cd:7a:87:e2:8d:62:6a:10:70:b6: 45:ca:f1:96:27:36:f5:8b:5b:06:68:68:64:14:4f:e1:ed:b3: 72:0e:e3:98:90:b6:3b:b4:3b:de:72:3a:2a:b4:ea:36:5d:b1: 8b:62:a4:b0:69:f6:19:46:81:2f:14:4b:0a:1d:41:a0:33:c7: 97:a4:28:ac:8b:7c:f0:b1:89:ff:bb:e3:7f:0c:76:92:11:05: ff:17:d9:77:43:1b:29:a9:67:72:09:fe:da:e9:ff:f3:63:24: 21:0d:ad:37:74:09:c9:31:49:9d:93:a9:be:00:c7:ce:84:51: 22:8d:6a:1f:3d:47:a6:d0:d2:2e:51:e0:e0:bd:1d:a5:79:63: ac:a4:49:4c:fc:f2:2c:e3:bc:98:93:35:5e:cc:4e:2b:c1:1b: ce:e7:32:82:5c:e3:e8:02:1a:22:fa:fd:85:f5:80:8e:cd:0f: e8:21:5c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtx2GhPMqhHX3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTYzM2ZkZjMtNWQ3Yy00NDc2LWEzMjUtODkwYmMxYmFkODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTM353qq8sF0FAOe7G2dpmz4maP5usRpS1u6 LWqUV3Jt/2aC1NdML3Wm/436SvMDlpKvOADEnknC1+DcjRGNOF4O0mP1hNO4H2k3 AUkdLYKB7jxKlCktxkYMQSzBAbAa7z8x4wZv24tbhNotoD2t+NPu/hJOYEywesKz rbFIfZpSeEe6bA5Qjtqcm8civx1KdZ3KawlCeVW+kY15bbrBZv629792RHdWHjTt hNNtoQDHYaby8k4uNunsQvRYUv2R6pOU1z1X6vTxHCPzSy8hDcQQi32S0x255oN4 G39ZxcjvV7LVQVF1xE/o5lwcSM+Qed9QrtIwlWdLeQz7ljfiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG/jbKQZX7o0oar3PeE3V0gWZufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTI3YTM5ZjgtMWQ2MC0z OWY4LTk1MGMtZTI2NjM2MDI3NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTFT4UgiWpywAbbvVwRMB33Ts56/XRnOEeWKyFiDO5NK7GPrBSWv/5S BeC6usv2EPffvdzxx1FsPZL04WaNsmaRKQK2hiX9hSFrGPjR5SxizXqH4o1iahBw tkXK8ZYnNvWLWwZoaGQUT+Hts3IO45iQtju0O95yOiq06jZdsYtipLBp9hlGgS8U SwodQaAzx5ekKKyLfPCxif+7438MdpIRBf8X2XdDGympZ3IJ/trp//NjJCENrTd0 CckxSZ2Tqb4Ax86EUSKNah89R6bQ0i5R4OC9HaV5Y6ykSUz88izjvJiTNV7MTivB G87nMoJc4+gCGiL6/YX1gI7ND+ghXOE= -----END CERTIFICATE-----Generated at Sun Apr 6 10:59:53 2025 by rpki-client