$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa File: 2b712abf-b83c-350a-8814-4d89811b7585.roa (raw, json) Hash identifier: zxdupKD+xczgYhQVse5iBflH+nWPjYFaJ/VgW3kv4vs= Subject key identifier: 85:3E:5A:75:1E:B5:C6:96:5E:07:09:E9:A5:3D:91:06:21:B9:A6:85 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99659D6613001FB0B0F7B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397234 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:59:d6:61:30:01:fb:0b:0f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=f2c5685f-39c9-4106-a87d-23bec7d99b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:8e:a2:ae:4d:4f:e9:9a:46:8e:8a:07:7a: 24:66:37:c5:bb:c1:2d:52:73:4b:e1:63:4f:f9:16: e1:8e:6e:71:bd:fe:eb:de:c8:b0:e2:08:19:d7:65: aa:dc:95:38:64:1a:de:fd:ef:b8:e6:58:b2:4b:0d: 3b:ec:54:34:bb:b1:0c:9c:12:56:90:ef:61:9b:da: 5f:e2:61:f4:ab:9f:0a:f6:67:09:22:d1:8d:41:9f: 44:c4:0f:91:2c:0e:8c:92:31:ee:bf:96:d7:11:5e: b5:02:22:4c:86:f6:c7:19:b8:ab:1e:d5:4c:ed:8a: 71:50:d6:28:a7:c2:aa:56:73:42:06:26:9e:5f:2e: 4e:d3:93:c9:59:53:14:59:5e:42:a6:2e:0b:05:e8: a3:0e:e8:ae:c8:32:6c:62:e3:90:57:62:81:d4:97: ba:91:5d:61:9b:7e:d9:e9:d0:56:1e:12:f2:df:e9: 6d:62:b9:3f:a5:ce:5d:5d:48:44:21:05:e7:ed:88: 9b:79:8c:f1:c4:21:b9:84:92:e3:b2:27:b7:e2:5b: b1:77:64:54:47:67:90:f7:22:16:71:df:db:59:2b: cd:60:74:64:16:3d:0b:a1:7a:3b:68:eb:6e:85:fd: 79:f9:cc:63:9a:f6:ab:ec:3d:fd:72:1b:59:07:63: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:5A:75:1E:B5:C6:96:5E:07:09:E9:A5:3D:91:06:21:B9:A6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:68:26:f9:bc:02:75:d0:41:db:b3:50:52:85:1c:42:a3:1f: 99:a3:31:cf:7d:e9:86:92:db:01:fe:e0:28:41:3c:dd:ba:2e: e3:a6:d8:65:44:a7:f3:16:4f:96:c1:9d:e3:4c:23:89:38:92: 83:d2:0d:b3:cd:7c:93:b7:f9:df:f8:ae:ad:2f:d3:ea:35:be: 6a:bc:30:48:2a:48:33:04:1e:cb:e7:eb:90:67:dc:a7:01:3c: 95:d8:e1:a6:fe:77:3e:1a:f2:04:a0:6f:76:83:7e:79:e5:2a: 80:a5:57:73:d7:ca:09:ba:ad:a9:8d:73:72:1e:53:5c:95:45: ec:79:a6:0c:e7:91:7b:51:3a:96:9a:39:62:78:86:93:e6:77: d6:4d:20:6f:e3:7d:74:67:6b:d4:09:87:c9:9f:c1:ff:e4:83: 3d:b8:98:e1:d6:02:db:35:01:91:4e:7a:39:d3:17:da:06:52: 6a:6a:13:1d:76:80:09:bd:b1:d6:c9:4e:db:21:99:1e:cd:7f: c1:57:51:4f:de:3d:ce:55:ac:ce:17:d2:80:b4:6d:a8:9a:4a: 78:42:53:41:4c:38:e9:81:26:71:68:2e:75:40:77:b7:79:a6: df:2f:ae:a1:93:8e:9d:3c:33:86:96:ce:8d:8e:9a:6f:f4:ba: 85:c4:66:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllnWYTAB+wsPewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjJjNTY4NWYtMzljOS00MTA2LWE4N2QtMjNiZWM3ZDk5Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGOoq5NT+maRo6KB3okZjfFu8EtUnNL4WNP +Rbhjm5xvf7r3siw4ggZ12Wq3JU4ZBre/e+45liySw077FQ0u7EMnBJWkO9hm9pf 4mH0q58K9mcJItGNQZ9ExA+RLA6MkjHuv5bXEV61AiJMhvbHGbirHtVM7YpxUNYo p8KqVnNCBiaeXy5O05PJWVMUWV5Cpi4LBeijDuiuyDJsYuOQV2KB1Je6kV1hm37Z 6dBWHhLy3+ltYrk/pc5dXUhEIQXn7YibeYzxxCG5hJLjsie34luxd2RUR2eQ9yIW cd/bWSvNYHRkFj0LoXo7aOtuhf15+cxjmvar7D39chtZB2OHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU+WnUetcaWXgcJ6aU9kQYhuaaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI3MTJhYmYtYjgzYy0z NTBhLTg4MTQtNGQ4OTgxMWI3NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9oJvm8AnXQQduzUFKFHEKjH5mjMc996YaS2wH+4ChBPN26LuOm2GVE p/MWT5bBneNMI4k4koPSDbPNfJO3+d/4rq0v0+o1vmq8MEgqSDMEHsvn65Bn3KcB PJXY4ab+dz4a8gSgb3aDfnnlKoClV3PXygm6ramNc3IeU1yVRex5pgznkXtROpaa OWJ4hpPmd9ZNIG/jfXRna9QJh8mfwf/kgz24mOHWAts1AZFOejnTF9oGUmpqEx12 gAm9sdbJTtshmR7Nf8FXUU/ePc5VrM4X0oC0baiaSnhCU0FMOOmBJnFoLnVAd7d5 pt8vrqGTjp08M4aWzo2Omm/0uoXEZrU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:47 2025 by rpki-client