$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17f635f9-8de8-372f-a7dd-9e69a67d7099.roa File: 17f635f9-8de8-372f-a7dd-9e69a67d7099.roa (raw, json) Hash identifier: OS00NCO/yJSnD51iltrS+c7v7q44CKTN3Tksb0w/QYU= Subject key identifier: 91:E8:D5:6B:AB:8D:0E:26:16:64:D5:53:50:28:B9:8C:6E:67:2C:8E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E6AA842872B41356B380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17f635f9-8de8-372f-a7dd-9e69a67d7099.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397227 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e6:aa:84:28:72:b4:13:56:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c44e2f79-6034-46dc-9ad5-07dd8ed74817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:51:a1:c1:62:eb:3f:1e:f4:a7:4c:31:a4: 6a:6a:c1:33:77:18:d3:b9:7d:70:48:f2:10:13:42: 9f:0b:77:4d:5b:d0:05:e8:e3:2d:ec:73:32:6b:4d: 2c:e1:ed:d1:93:aa:f9:6a:cf:f1:17:25:71:aa:c3: 43:37:50:cf:c5:c9:2b:b6:00:bd:f2:8c:56:7c:ee: f8:d4:3b:2c:f4:14:1a:6d:f7:af:a6:57:d6:5d:22: 05:ad:e7:c8:28:5e:d4:5e:dd:39:bd:3f:0e:e2:4b: e2:b0:58:cd:fe:be:8a:5b:e5:3e:71:51:dc:5a:a4: d8:af:e4:d2:ba:7d:54:69:76:e6:2f:3a:69:fe:28: 90:08:76:38:b8:12:0f:d8:11:00:76:e9:69:5b:eb: 96:74:d8:10:69:92:e2:a2:d6:88:78:e1:ac:34:95: a3:06:5e:38:6e:14:ec:ea:3b:97:e4:e2:67:98:97: e5:76:4f:25:ed:b8:52:fe:42:23:f1:a6:10:72:17: 0f:15:c1:15:9c:aa:d3:65:c4:2a:ce:06:05:83:22: a3:83:0f:24:b1:2e:70:0f:5c:02:70:21:11:f8:8d: 8f:f6:b0:f9:75:e1:81:16:0b:24:d9:f0:28:77:2f: 4d:9a:c9:0b:bc:ef:a2:6b:6d:db:ec:45:1e:b1:56: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E8:D5:6B:AB:8D:0E:26:16:64:D5:53:50:28:B9:8C:6E:67:2C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17f635f9-8de8-372f-a7dd-9e69a67d7099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8e:07:13:ee:73:92:64:9e:60:21:3d:6f:5d:64:ce:1b:b8: c5:13:b5:95:89:0a:09:73:05:b6:e1:76:d8:7e:9b:31:d8:dc: 36:ad:70:0a:05:1f:63:6d:eb:0b:ee:2c:c7:55:82:a8:1a:b5: 8f:18:aa:8d:3a:91:37:4b:aa:42:c4:e6:4a:28:03:4b:d7:ce: 30:38:27:ec:ff:9e:d0:97:40:52:dc:de:a2:b9:27:67:b4:a2: 7c:ee:15:14:2f:a7:6b:9a:44:0d:e0:a4:58:d7:be:09:5e:8b: 26:19:93:72:20:5f:1d:bd:ba:45:8f:dd:de:fb:63:81:3e:53: 69:e3:98:8c:4f:61:c8:53:d7:ba:78:54:2f:26:a8:0e:e1:51: 28:c7:8e:98:d7:34:c6:2e:4b:42:ab:3e:95:7c:3f:26:3c:b3: 1a:f5:c9:95:b3:a5:55:a7:81:07:7e:b6:e4:b6:b7:ff:81:4c: 4b:23:07:a4:44:89:dd:0a:bd:3f:8f:bd:fc:44:bf:af:a1:f9: 28:3c:33:e5:69:da:42:8a:ec:a0:fc:21:08:9d:08:83:0c:78: 2d:28:7d:dd:30:73:9b:a8:af:42:50:3a:f7:bb:33:6a:3e:73: c4:bc:89:be:25:51:d0:0f:7d:2d:8f:48:a5:a8:09:e6:51:16: 03:a9:7f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuaqhChytBNWs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzQ0ZTJmNzktNjAzNC00NmRjLTlhZDUtMDdkZDhlZDc0ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZRocFi6z8e9KdMMaRqasEzdxjTuX1wSPIQ E0KfC3dNW9AF6OMt7HMya00s4e3Rk6r5as/xFyVxqsNDN1DPxckrtgC98oxWfO74 1Dss9BQabfevplfWXSIFrefIKF7UXt05vT8O4kvisFjN/r6KW+U+cVHcWqTYr+TS un1UaXbmLzpp/iiQCHY4uBIP2BEAdulpW+uWdNgQaZLiotaIeOGsNJWjBl44bhTs 6juX5OJnmJfldk8l7bhS/kIj8aYQchcPFcEVnKrTZcQqzgYFgyKjgw8ksS5wD1wC cCER+I2P9rD5deGBFgsk2fAody9NmskLvO+ia23b7EUesVYZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHo1WurjQ4mFmTVU1AouYxuZyyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTdmNjM1ZjktOGRlOC0z NzJmLWE3ZGQtOWU2OWE2N2Q3MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKOBxPuc5JknmAhPW9dZM4buMUTtZWJCglzBbbhdth+mzHY3DatcAoF H2Nt6wvuLMdVgqgatY8Yqo06kTdLqkLE5kooA0vXzjA4J+z/ntCXQFLc3qK5J2e0 onzuFRQvp2uaRA3gpFjXvgleiyYZk3IgXx29ukWP3d77Y4E+U2njmIxPYchT17p4 VC8mqA7hUSjHjpjXNMYuS0KrPpV8PyY8sxr1yZWzpVWngQd+tuS2t/+BTEsjB6RE id0KvT+PvfxEv6+h+Sg8M+Vp2kKK7KD8IQidCIMMeC0ofd0wc5uor0JQOve7M2o+ c8S8ib4lUdAPfS2PSKWoCeZRFgOpf3Q= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:39 2025 by rpki-client