$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa File: 18d2d9b8-0747-31fe-86ef-f79b42318c54.roa (raw, json) Hash identifier: G92/W4/OwMB4d3/KXKaNEv4zLIRM6hLrXPp4YA6s260= Subject key identifier: 9A:85:FF:A8:82:B8:6A:E0:90:85:84:89:FD:8F:F9:1B:40:1B:CB:94 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210FF88790437A24464B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397233 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0f:f8:87:90:43:7a:24:46:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=3a551cd1-9a48-4067-80f2-a796c24490b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:9a:c5:2b:6d:77:d3:22:2e:87:45:68:e7: 2c:12:93:74:8d:e1:29:fd:53:03:02:e6:1b:fd:f4: 51:e2:69:e5:49:9f:62:f3:bc:bb:a6:26:61:bc:75: 26:86:56:86:89:cd:7f:17:7f:12:ba:0f:c1:66:b4: 18:ef:59:fb:74:f8:a6:99:39:e1:52:68:3c:18:1e: c8:7f:37:93:76:fa:20:86:be:76:b2:86:d7:87:9e: ea:d7:bf:76:de:12:a2:a3:96:5b:4e:8e:95:87:7a: 59:77:eb:4b:7b:6f:03:0d:93:7c:b7:b8:ec:e6:5e: 96:7a:63:25:db:6e:58:76:57:2c:1d:9b:78:2c:5f: fb:9e:1d:5b:c6:60:3f:6f:36:c2:4b:2d:f2:82:ff: 44:7a:f5:81:e9:f2:bc:92:98:64:f0:a2:70:7f:d7: 02:ff:30:88:55:4b:37:87:05:89:39:cd:2a:6e:35: 7c:ed:bb:75:33:84:6f:39:3f:41:1b:25:a5:b3:0c: fa:e5:4b:9c:ad:fa:f7:c4:bb:02:d6:7b:8c:84:28: d3:44:0d:4c:05:5a:14:0a:ab:45:92:b5:c6:d9:6e: d9:ce:b5:84:08:41:b2:e5:4c:8a:63:53:f5:6a:ee: ae:21:42:9b:66:ba:a5:ba:09:c9:58:a9:38:c5:a5: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:85:FF:A8:82:B8:6A:E0:90:85:84:89:FD:8F:F9:1B:40:1B:CB:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:87:fa:9b:a8:6f:40:c9:b8:5f:bf:44:53:ff:b4:9e:0a:34: a2:25:1c:0f:a4:de:d3:0c:5f:95:27:9d:07:3b:33:43:b0:7e: ec:1c:eb:a7:57:b1:4c:5e:e3:e5:3b:24:49:7f:0f:12:30:bf: f0:c5:68:79:d3:45:e6:74:c3:41:37:5c:d0:63:1a:94:8a:5d: 67:ca:02:0a:59:3d:e1:33:26:3a:b2:8f:32:6b:79:33:2d:f5: 36:62:55:aa:b8:61:05:ab:00:c8:7e:4b:25:8f:41:ea:ee:a0: 55:a0:0b:3b:01:01:bc:3f:d7:71:d3:82:1f:dc:0e:89:1c:01: f6:98:99:fc:b5:91:fb:59:89:93:92:81:6a:50:1b:a4:54:c4: 7d:b0:08:0e:3a:77:83:b8:e2:49:6d:72:c0:73:91:7e:74:42: c6:b4:e9:7d:81:1a:b6:c8:5b:03:0a:81:67:2f:30:23:54:3f: 42:a0:21:a5:7d:67:c8:b4:4b:9c:a5:06:23:ec:0b:4f:91:3f: dd:3c:69:47:52:ed:a6:8a:e6:18:f7:fa:7f:1c:2f:a1:4b:fc: 99:4d:de:4e:ad:0a:83:55:39:df:58:9b:6f:b8:7c:5f:e0:eb: 15:92:2f:3a:b0:be:52:25:c3:2c:03:1d:1f:b0:34:ee:d2:a0: e2:0c:6f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ/4h5BDeiRGS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk M2E1NTFjZDEtOWE0OC00MDY3LTgwZjItYTc5NmMyNDQ5MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6axSttd9MiLodFaOcsEpN0jeEp/VMDAuYb /fRR4mnlSZ9i87y7piZhvHUmhlaGic1/F38Sug/BZrQY71n7dPimmTnhUmg8GB7I fzeTdvoghr52sobXh57q17923hKio5ZbTo6Vh3pZd+tLe28DDZN8t7js5l6WemMl 225YdlcsHZt4LF/7nh1bxmA/bzbCSy3ygv9EevWB6fK8kphk8KJwf9cC/zCIVUs3 hwWJOc0qbjV87bt1M4RvOT9BGyWlswz65Uucrfr3xLsC1nuMhCjTRA1MBVoUCqtF krXG2W7ZzrWECEGy5UyKY1P1au6uIUKbZrqlugnJWKk4xaWHlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqF/6iCuGrgkIWEif2P+RtAG8uUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMThkMmQ5YjgtMDc0Ny0z MWZlLTg2ZWYtZjc5YjQyMzE4YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOH+puob0DJuF+/RFP/tJ4KNKIlHA+k3tMMX5UnnQc7M0Owfuwc66dX sUxe4+U7JEl/DxIwv/DFaHnTReZ0w0E3XNBjGpSKXWfKAgpZPeEzJjqyjzJreTMt 9TZiVaq4YQWrAMh+SyWPQeruoFWgCzsBAbw/13HTgh/cDokcAfaYmfy1kftZiZOS gWpQG6RUxH2wCA46d4O44kltcsBzkX50Qsa06X2BGrbIWwMKgWcvMCNUP0KgIaV9 Z8i0S5ylBiPsC0+RP908aUdS7aaK5hj3+n8cL6FL/JlN3k6tCoNVOd9Ym2+4fF/g 6xWSLzqwvlIlwywDHR+wNO7SoOIMb6Y= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:02 2025 by rpki-client