$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa File: 2320dc98-a0d3-352d-a21b-937522d38ffc.roa (raw, json) Hash identifier: t0kl8UDKKkVf4uNLwCnUDMgxKxuwDqqq52cbHdLqsOk= Subject key identifier: 41:62:8A:18:F5:13:5D:4D:A9:FA:FF:30:F6:B4:34:61:D4:8D:EE:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210394246D38173111FB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 12008 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:03:94:24:6d:38:17:31:11:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=61c4ed6f-8987-40ba-8a34-ea125e506643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:9c:2d:21:3f:1b:a4:3f:63:6c:08:b3:92: 61:46:07:de:c2:f6:4f:70:1d:f7:45:6c:85:2e:bb: ad:33:e8:21:e1:b5:27:c1:1a:4f:b7:97:8f:fb:24: e9:54:71:5a:d9:96:2b:f7:e8:b4:a1:d8:54:cd:5d: 21:3b:f9:60:21:aa:ac:c9:44:1b:59:c2:c4:ca:8c: 1e:2f:bc:71:0f:84:3b:0e:f3:7a:e9:c7:6d:b3:6e: bd:0f:67:98:7c:52:77:57:a8:c5:ab:82:3f:43:e9: a1:52:f0:9b:f0:4b:14:0a:a7:5b:c6:24:da:c6:ae: 99:3f:cf:92:7e:43:e0:ca:28:66:88:4c:18:58:b2: e0:e9:94:5f:4a:bd:8d:e1:73:84:09:4e:51:23:56: 97:fc:55:5e:d4:90:9b:82:b2:8d:ad:2b:b8:c2:76: dc:8c:b6:2e:4b:28:68:86:45:fb:b9:9b:2c:2f:33: 74:f2:ac:cf:27:c3:74:85:67:a5:26:04:64:f1:14: e9:f9:21:de:b5:88:1a:cd:fe:87:41:f2:ce:32:42: e4:90:8d:7f:ae:76:69:18:10:12:68:b3:d6:0d:dc: c0:24:ee:03:2f:cf:71:8f:8b:2c:43:9e:b2:0f:5e: ad:92:9c:ba:c0:cb:78:a7:45:03:3c:e0:38:da:37: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:62:8A:18:F5:13:5D:4D:A9:FA:FF:30:F6:B4:34:61:D4:8D:EE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:51:44:6c:ce:de:00:09:70:8d:bd:15:fd:1c:02:f7:e9:a9: e1:58:83:6c:32:34:e8:7a:57:3d:72:aa:91:2b:16:a9:46:b5: 70:b4:0e:81:84:e4:18:f4:45:72:ee:36:2b:a3:31:02:b8:dc: 66:cc:f6:88:85:0d:f6:4e:ec:47:0f:1e:da:90:5a:9f:02:5f: 27:8e:b4:2e:67:ee:ac:df:bc:5b:c3:d4:25:0f:0e:05:a9:b1: 0b:26:01:a4:51:d7:fb:6e:1b:c3:b3:60:28:c3:f9:4d:6e:d9: 6b:97:a4:ef:e9:c8:42:b9:02:02:a3:b5:fb:43:9d:08:50:79: 69:09:d2:eb:91:9c:a3:6e:50:51:b8:38:b2:40:c1:dc:8e:92: c8:3d:c8:9d:8e:c7:10:34:37:af:9a:b7:b2:84:c1:aa:05:4c: 61:67:1e:31:9b:e4:f4:56:e0:9b:9d:a3:93:b5:87:ac:a8:1b: 5a:b4:64:35:80:ec:e7:bc:5c:5d:5b:ee:b5:1c:6c:8e:80:3a: 29:a6:28:b3:74:39:f5:ae:d0:34:f0:27:3c:65:99:49:72:e5: e0:9e:8a:46:97:1b:05:b3:f2:d4:33:d1:7a:c8:f9:b8:32:05: 09:33:e9:47:44:41:cb:29:97:ae:ef:64:d6:ff:78:d7:76:76: be:a1:3f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQOUJG04FzER+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NjFjNGVkNmYtODk4Ny00MGJhLThhMzQtZWExMjVlNTA2NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhucLSE/G6Q/Y2wIs5JhRgfewvZPcB33RWyF LrutM+gh4bUnwRpPt5eP+yTpVHFa2ZYr9+i0odhUzV0hO/lgIaqsyUQbWcLEyowe L7xxD4Q7DvN66cdts269D2eYfFJ3V6jFq4I/Q+mhUvCb8EsUCqdbxiTaxq6ZP8+S fkPgyihmiEwYWLLg6ZRfSr2N4XOECU5RI1aX/FVe1JCbgrKNrSu4wnbcjLYuSyho hkX7uZssLzN08qzPJ8N0hWelJgRk8RTp+SHetYgazf6HQfLOMkLkkI1/rnZpGBAS aLPWDdzAJO4DL89xj4ssQ56yD16tkpy6wMt4p0UDPOA42jexZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFiihj1E11Nqfr/MPa0NGHUje4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjMyMGRjOTgtYTBkMy0z NTJkLWEyMWItOTM3NTIyZDM4ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhRRGzO3gAJcI29Ff0cAvfpqeFYg2wyNOh6Vz1yqpErFqlGtXC0DoGE 5Bj0RXLuNiujMQK43GbM9oiFDfZO7EcPHtqQWp8CXyeOtC5n7qzfvFvD1CUPDgWp sQsmAaRR1/tuG8OzYCjD+U1u2WuXpO/pyEK5AgKjtftDnQhQeWkJ0uuRnKNuUFG4 OLJAwdyOksg9yJ2OxxA0N6+at7KEwaoFTGFnHjGb5PRW4Judo5O1h6yoG1q0ZDWA 7Oe8XF1b7rUcbI6AOimmKLN0OfWu0DTwJzxlmUly5eCeikaXGwWz8tQz0XrI+bgy BQkz6UdEQcspl67vZNb/eNd2dr6hP/Y= -----END CERTIFICATE-----Generated at Sun Apr 6 17:03:45 2025 by rpki-client