$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c1afa28-84e5-32fd-943c-8af889e58edd.roa File: 1c1afa28-84e5-32fd-943c-8af889e58edd.roa (raw, json) Hash identifier: OlreZncnL9YDa3HD19hPnX5PGCgBLcIC6a5eNY7oc8I= Subject key identifier: 7E:7D:16:90:9A:72:E7:E9:38:5B:C1:BF:BF:D0:2D:73:7E:83:C6:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99640C8C3F7AB0DC7048DC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c1afa28-84e5-32fd-943c-8af889e58edd.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397239 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:40:c8:c3:f7:ab:0d:c7:04:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3664bde4-c74e-4323-8c6e-689181c9e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:8e:14:2e:40:32:73:75:cd:a2:d6:01:40: 0a:cc:57:bf:c7:ea:cc:73:2e:41:cf:2f:22:f7:8e: 88:62:06:fa:00:19:e8:59:7e:7e:16:15:cd:9f:1d: ec:92:0e:d5:9c:4b:86:a4:f2:98:e6:6a:5f:f2:c1: 9c:ab:e1:27:79:d8:32:84:c7:87:a2:31:f6:e5:0f: 5e:78:a6:6d:b3:15:ac:33:e0:cd:17:fa:8e:7d:19: e2:78:1a:e4:ff:8a:6b:a3:53:e6:63:0f:83:4d:c7: 5e:b4:d3:ae:09:5c:4d:9f:4d:2d:c8:f6:de:22:14: 41:94:af:ee:bd:33:e5:d5:39:7f:c3:ab:8b:e1:17: 4f:24:e5:9a:d2:02:ed:06:17:b0:62:28:75:77:dc: f0:b6:fe:a0:89:ed:d3:b5:f2:af:6b:57:97:f4:44: 37:59:82:2d:19:72:e3:31:fc:36:da:fd:c5:58:0f: 61:9b:ce:b4:a1:d6:0e:14:f4:bd:fc:54:d4:af:34: ce:9e:c0:2e:02:ca:e1:c3:ca:1d:64:e7:97:71:58: 2e:ab:64:80:ae:3f:bf:29:cd:79:36:3a:a6:3f:4c: c3:32:27:fc:f1:ce:dc:86:03:a0:f7:83:34:3d:04: fc:7f:e8:ab:1a:21:7e:37:a4:c8:5d:85:81:56:f8: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7D:16:90:9A:72:E7:E9:38:5B:C1:BF:BF:D0:2D:73:7E:83:C6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c1afa28-84e5-32fd-943c-8af889e58edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5a:24:c8:3e:17:59:51:fb:77:3d:9e:47:17:7c:d7:2b:8d: 86:f3:1b:01:eb:aa:a2:5c:ee:42:bb:47:9c:a9:c3:35:23:a3: d5:e5:79:39:c9:e6:9d:c3:f9:3e:98:4e:f4:c5:4c:27:bc:ef: ad:6b:94:9b:22:d0:b0:40:66:24:cb:ed:6d:f1:95:15:17:b2: c5:ad:81:38:51:b1:b0:2c:e2:c6:75:7e:9d:9f:c3:84:11:d2: 77:6e:49:be:8f:0b:61:c7:25:5c:61:46:d1:00:5a:8d:7a:98: 2d:c1:c2:ab:67:65:dd:be:49:f4:77:b7:00:92:42:fe:4e:68: 93:98:61:d5:cb:02:8f:b1:b5:53:4e:1e:76:09:37:d2:72:87: 6d:cc:ab:df:e4:d1:61:9d:9b:cf:3e:f8:4b:c5:03:00:8d:d9: 8a:71:6d:07:26:d0:17:e9:39:84:24:de:27:22:28:fc:1e:a7: 6a:d2:e5:7f:3b:1a:fc:75:e8:92:ed:22:a6:61:6f:7d:71:08: be:20:38:9b:6a:d0:21:2f:3a:51:08:f9:3a:8c:11:05:2e:33: 63:3e:42:7d:b1:36:70:02:1a:43:e5:bb:73:1b:b4:80:60:2a: 5e:e0:4d:eb:00:d5:f5:0c:cb:eb:55:f7:59:b2:cb:c3:f7:7c: 02:e4:1a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkDIw/erDccEjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzY2NGJkZTQtYzc0ZS00MzIzLThjNmUtNjg5MTgxYzllNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjqOFC5AMnN1zaLWAUAKzFe/x+rMcy5Bzy8i 946IYgb6ABnoWX5+FhXNnx3skg7VnEuGpPKY5mpf8sGcq+EnedgyhMeHojH25Q9e eKZtsxWsM+DNF/qOfRnieBrk/4pro1PmYw+DTcdetNOuCVxNn00tyPbeIhRBlK/u vTPl1Tl/w6uL4RdPJOWa0gLtBhewYih1d9zwtv6gie3TtfKva1eX9EQ3WYItGXLj Mfw22v3FWA9hm860odYOFPS9/FTUrzTOnsAuAsrhw8odZOeXcVguq2SArj+/Kc15 NjqmP0zDMif88c7chgOg94M0PQT8f+irGiF+N6TIXYWBVvjzkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH59FpCacufpOFvBv7/QLXN+g8ZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWMxYWZhMjgtODRlNS0z MmZkLTk0M2MtOGFmODg5ZTU4ZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpaJMg+F1lR+3c9nkcXfNcrjYbzGwHrqqJc7kK7R5ypwzUjo9XleTnJ 5p3D+T6YTvTFTCe8761rlJsi0LBAZiTL7W3xlRUXssWtgThRsbAs4sZ1fp2fw4QR 0nduSb6PC2HHJVxhRtEAWo16mC3BwqtnZd2+SfR3twCSQv5OaJOYYdXLAo+xtVNO HnYJN9Jyh23Mq9/k0WGdm88++EvFAwCN2YpxbQcm0BfpOYQk3iciKPwep2rS5X87 Gvx16JLtIqZhb31xCL4gOJtq0CEvOlEI+TqMEQUuM2M+Qn2xNnACGkPlu3MbtIBg Kl7gTesA1fUMy+tV91myy8P3fALkGnA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:01 2025 by rpki-client