$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa File: 2d9da503-3a56-3a3e-8031-35310762665a.roa (raw, json) Hash identifier: mqfeVXLYsVS9l7WKkEzAs0m0e7iAG6r4ddkv8E7Jcgk= Subject key identifier: B8:DE:0F:7A:03:60:A4:31:E1:23:3C:5F:75:E7:8F:2B:3E:09:C6:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DE3330E234CC40C42080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397239 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:33:30:e2:34:cc:40:c4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=3bd70b79-3319-4d39-bdb7-a063ea62460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:e6:0a:05:85:66:72:2b:57:84:0b:73:43: b5:b3:14:13:fb:31:a6:e1:db:70:cb:d3:b0:6e:2f: c0:f3:5f:01:4f:b9:5a:2c:b1:e6:b7:27:1b:c9:35: bd:f9:36:5e:7e:14:5b:23:e1:85:fa:28:3b:1f:4d: 55:e5:19:67:d9:d0:89:5c:87:a4:91:ba:4d:d5:25: b0:7b:00:4e:28:a9:9e:d9:3d:ff:b9:8c:c0:68:a9: 6f:69:07:52:0d:58:a4:7f:fd:05:f8:27:6d:36:61: 30:4d:e7:46:8c:15:78:cd:03:d6:ab:aa:24:67:eb: fd:41:83:6a:93:f5:ca:1f:5f:80:0d:42:8e:e3:5d: 25:d4:d3:0f:68:14:0a:a7:56:05:e1:00:92:4f:56: 09:25:9b:39:5b:d6:fa:c3:6e:a1:0f:08:02:37:45: 4b:77:92:27:16:7d:b6:8f:71:43:12:63:f6:42:84: e4:99:7d:2d:12:e8:5a:a8:a1:7f:61:7e:7c:9f:c8: 8f:a0:03:69:eb:5e:51:44:39:e6:e3:ea:e7:58:6f: a6:a2:82:e6:9b:44:e6:4c:d5:63:ff:74:ac:4f:ef: e4:8f:52:a8:bc:64:93:06:ff:19:50:ca:9c:2f:92: 03:d6:2b:6e:44:0e:43:88:74:93:e5:7c:13:52:72: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:0F:7A:03:60:A4:31:E1:23:3C:5F:75:E7:8F:2B:3E:09:C6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3b:96:86:8d:d0:08:8a:51:73:9c:0a:5a:5b:ab:4c:04:a4: 38:71:60:56:f9:d7:ea:71:54:9d:3e:79:44:ec:88:80:9e:b7: 9b:18:4c:19:70:6d:ea:d6:39:f7:9d:b3:6f:3d:78:02:8e:89: 5a:96:a2:49:e4:c5:5e:1d:21:2e:15:28:f6:69:32:c1:df:9c: 3b:9f:7f:f0:f6:57:91:1a:0c:b0:99:2e:67:84:3f:f7:c4:b5: d8:b2:7d:46:c5:8f:ce:3f:c3:0e:6e:a4:85:b9:76:ee:b7:3d: e2:0a:f3:bc:13:0e:29:65:50:41:1c:b3:54:3d:6d:aa:40:16: e4:8b:7f:49:d9:a3:38:1f:37:b2:54:9a:56:49:91:62:4b:c4: e3:10:d5:3e:e9:40:f7:c7:fc:6b:26:53:bb:93:8b:c4:02:42: 0b:08:17:65:99:6a:9e:5f:25:18:2f:4b:51:e3:53:80:0b:f2: b6:81:07:a8:f5:24:72:6e:65:0b:fa:98:05:33:e4:a6:c2:53: 9e:41:cf:f5:e2:14:74:3e:1e:24:e5:63:1b:d7:cf:e8:54:a4: 3c:8c:c7:43:a3:76:80:e8:f2:83:f1:7c:0f:9f:a9:27:ee:fd: d4:34:5d:66:af:a9:01:24:27:58:97:97:bb:ce:cb:77:bd:68: 2e:f8:f6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt4zMOI0zEDEIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk M2JkNzBiNzktMzMxOS00ZDM5LWJkYjctYTA2M2VhNjI0NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtvmCgWFZnIrV4QLc0O1sxQT+zGm4dtwy9Ow bi/A818BT7laLLHmtycbyTW9+TZefhRbI+GF+ig7H01V5Rln2dCJXIekkbpN1SWw ewBOKKme2T3/uYzAaKlvaQdSDVikf/0F+CdtNmEwTedGjBV4zQPWq6okZ+v9QYNq k/XKH1+ADUKO410l1NMPaBQKp1YF4QCST1YJJZs5W9b6w26hDwgCN0VLd5InFn22 j3FDEmP2QoTkmX0tEuhaqKF/YX58n8iPoANp615RRDnm4+rnWG+mooLmm0TmTNVj /3SsT+/kj1KovGSTBv8ZUMqcL5ID1ituRA5DiHST5XwTUnLBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjeD3oDYKQx4SM8X3Xnjys+Cca9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5ZGE1MDMtM2E1Ni0z YTNlLTgwMzEtMzUzMTA3NjI2NjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA7loaN0AiKUXOcClpbq0wEpDhxYFb51+pxVJ0+eUTsiICet5sYTBlw berWOfeds289eAKOiVqWoknkxV4dIS4VKPZpMsHfnDuff/D2V5EaDLCZLmeEP/fE tdiyfUbFj84/ww5upIW5du63PeIK87wTDillUEEcs1Q9bapAFuSLf0nZozgfN7JU mlZJkWJLxOMQ1T7pQPfH/GsmU7uTi8QCQgsIF2WZap5fJRgvS1HjU4AL8raBB6j1 JHJuZQv6mAUz5KbCU55Bz/XiFHQ+HiTlYxvXz+hUpDyMx0OjdoDo8oPxfA+fqSfu /dQ0XWavqQEkJ1iXl7vOy3e9aC749kQ= -----END CERTIFICATE-----Generated at Sun Apr 6 08:32:49 2025 by rpki-client