$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa File: 172ba7d9-83e0-3088-8782-af327c284e77.roa (raw, json) Hash identifier: y/KIIv2xXJLoG7AugWpfIy/HPD/iF4FCwjkAwrDOUaU= Subject key identifier: 32:87:D8:82:CE:55:7A:22:E8:84:C1:2F:81:11:C6:27:E0:51:24:C6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EF847F5BB4EF3C4A9400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397220 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ef:84:7f:5b:b4:ef:3c:4a:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=860be558-59d9-4432-9027-46aa1e0ede3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:cc:1f:a4:78:a8:2c:97:62:8d:08:af:82: 5c:47:a7:3d:36:5f:27:5f:4c:8c:21:0e:39:bc:b2: f2:d6:39:fe:4c:6a:3f:cb:9c:bf:c2:a4:94:97:41: a8:5d:ab:3e:5c:e6:9c:28:ee:ee:4d:cd:7d:0a:de: 7b:aa:df:45:f5:50:ab:0c:14:d4:be:33:05:3e:8a: 45:45:85:4f:da:52:fe:d7:45:58:29:6d:f8:b9:ae: 07:87:80:ba:09:fc:49:d8:a3:15:29:5d:e3:0c:f7: fc:d8:47:e8:d6:dd:d8:f5:20:60:f7:9e:20:b0:50: f2:bf:5b:fe:2d:d8:ce:15:67:5f:d7:fd:e4:66:f8: 91:c1:fd:2e:d3:df:19:88:38:2f:18:d7:76:a7:cd: ed:2e:d6:2b:0e:3d:a7:10:0c:1a:99:1a:f1:9c:cb: 21:bd:47:48:7f:22:8d:f3:5d:1a:46:b0:de:73:aa: 79:7a:09:5f:9a:7b:62:e1:05:7b:b1:b8:26:7e:0d: 0b:6b:a5:b5:0d:c8:16:19:0c:59:7a:6e:04:67:9c: 38:27:12:ad:45:f9:22:ea:51:ca:88:e6:57:1f:ba: f6:b1:d6:eb:ef:15:06:bd:66:d1:8a:d2:ec:2a:3d: 14:69:71:79:b7:e6:bf:44:25:11:78:c4:4f:f8:37: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:87:D8:82:CE:55:7A:22:E8:84:C1:2F:81:11:C6:27:E0:51:24:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5b:a0:07:68:74:45:6c:21:00:51:71:ca:31:a0:7d:93:e5: 65:be:42:b8:5b:00:4f:3d:4e:99:62:fb:5c:2b:43:8f:44:77: 8d:6a:e2:8d:1a:03:5c:25:a6:4a:ee:01:54:55:5e:a9:69:38: 2d:8e:d4:98:ca:93:0a:40:0b:43:fc:b0:87:23:61:50:80:4a: e8:f1:20:86:16:42:d7:db:16:4a:9f:83:cb:e2:ed:bf:e7:30: b6:66:9d:84:c8:72:80:79:9f:83:44:09:57:2a:16:97:c9:99: fe:83:95:77:b6:66:4a:01:1a:da:08:36:5f:03:22:6b:3c:82: 62:01:a3:a1:11:a3:fc:ba:0b:95:cf:3a:c5:be:1f:34:74:c5: ca:fa:38:f5:30:50:3a:b9:32:93:7e:d8:4d:b2:6b:c9:b1:61: d5:8f:00:9b:8e:ae:9f:c5:fa:12:be:46:a6:b8:b5:51:15:89: 8d:0b:87:c8:33:b9:f9:9d:49:7a:67:d1:50:ef:c9:26:e6:df: 83:3e:74:9e:16:b9:d6:b5:e1:f3:e4:62:9a:05:9c:8d:17:b2: db:6b:72:84:b8:bf:41:a3:f7:00:f8:51:7f:02:8e:3c:39:e6: f2:36:17:af:0a:62:9f:83:d0:47:ea:14:2a:8f:66:34:96:e7: e5:20:32:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu+Ef1u07zxKlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ODYwYmU1NTgtNTlkOS00NDMyLTkwMjctNDZhYTFlMGVkZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzMH6R4qCyXYo0Ir4JcR6c9Nl8nX0yMIQ45 vLLy1jn+TGo/y5y/wqSUl0GoXas+XOacKO7uTc19Ct57qt9F9VCrDBTUvjMFPopF RYVP2lL+10VYKW34ua4Hh4C6CfxJ2KMVKV3jDPf82Efo1t3Y9SBg954gsFDyv1v+ LdjOFWdf1/3kZviRwf0u098ZiDgvGNd2p83tLtYrDj2nEAwamRrxnMshvUdIfyKN 810aRrDec6p5eglfmnti4QV7sbgmfg0La6W1DcgWGQxZem4EZ5w4JxKtRfki6lHK iOZXH7r2sdbr7xUGvWbRitLsKj0UaXF5t+a/RCUReMRP+Df6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKH2ILOVXoi6ITBL4ERxifgUSTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTcyYmE3ZDktODNlMC0z MDg4LTg3ODItYWYzMjdjMjg0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNboAdodEVsIQBRccoxoH2T5WW+QrhbAE89Tpli+1wrQ49Ed41q4o0a A1wlpkruAVRVXqlpOC2O1JjKkwpAC0P8sIcjYVCASujxIIYWQtfbFkqfg8vi7b/n MLZmnYTIcoB5n4NECVcqFpfJmf6DlXe2ZkoBGtoINl8DIms8gmIBo6ERo/y6C5XP OsW+HzR0xcr6OPUwUDq5MpN+2E2ya8mxYdWPAJuOrp/F+hK+Rqa4tVEViY0Lh8gz ufmdSXpn0VDvySbm34M+dJ4Wuda14fPkYpoFnI0XsttrcoS4v0Gj9wD4UX8Cjjw5 5vI2F68KYp+D0EfqFCqPZjSW5+UgMnU= -----END CERTIFICATE-----Generated at Sun Apr 6 11:18:06 2025 by rpki-client