$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa File: 2e094f0a-56a8-330f-bf07-59dec1498d9d.roa (raw, json) Hash identifier: FhvF2pPErNYqzhoiA+cavWrcpH1hoyESq5I4S3+D5zI= Subject key identifier: 88:37:29:82:3F:33:6D:21:55:C6:D2:47:E0:DB:19:58:98:D5:6C:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964C5930B1B38B1E328200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397217 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4c:59:30:b1:b3:8b:1e:32:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d6fa07ef-4ed0-430c-b353-fa9ab29c1041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:06:dc:20:fd:0b:7d:41:32:08:9c:ea:ef: 77:23:3c:f8:16:63:e1:a9:ab:a3:d9:35:95:b0:8c: 23:83:cf:ff:98:d4:e0:04:4b:57:3d:39:7a:91:0b: eb:90:f6:13:4f:18:ba:68:67:85:6f:63:55:ac:23: 7f:9e:a7:50:30:ef:75:92:bc:31:64:7b:a3:3f:54: 47:57:0b:55:29:24:a6:20:7f:0c:9e:b4:3b:a4:24: d3:70:7b:02:4a:ab:93:2e:6a:b2:59:22:81:02:8b: b5:5f:21:a7:8a:fd:e1:a6:d7:0a:3e:e7:53:eb:da: e9:17:4d:4c:1d:18:b8:53:5a:66:7f:48:30:4b:60: b2:40:a4:a1:05:26:70:4f:87:ba:3c:82:97:27:6d: 17:fe:65:d0:4c:84:49:34:5a:e6:84:70:5a:35:e1: 7e:35:79:59:3b:43:33:28:27:e3:91:07:10:d1:1b: 1a:d5:e2:47:37:ad:7a:4b:61:f0:12:57:89:8d:71: d4:84:71:70:79:1c:2e:d1:d6:00:17:9e:2b:cf:8c: 13:18:dc:72:88:55:c2:35:9d:0a:c7:e1:81:b2:14: a1:6d:6b:d5:10:00:0a:87:ef:b3:d2:a5:a0:f9:d6: c5:d5:0d:25:b0:66:45:95:a1:41:4d:e0:32:ca:3e: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:37:29:82:3F:33:6D:21:55:C6:D2:47:E0:DB:19:58:98:D5:6C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:0a:b4:3e:c5:4b:66:62:38:fb:01:be:9c:d8:f4:b7:24: b8:cb:0c:e9:fd:3e:25:5d:38:99:af:c0:d6:7a:9a:10:75:23: c5:91:9c:43:5a:45:eb:ab:12:f4:76:c6:e6:b7:f4:92:a7:c7: 04:f6:58:89:8e:dd:49:88:1f:f2:b4:67:0a:90:f8:9b:51:50: 3a:1e:81:46:7c:c6:c1:d7:fe:a8:f1:74:df:07:6a:c0:c2:1f: f3:12:a8:40:ec:75:4f:30:a6:84:6f:c7:a5:02:8c:de:25:1b: 2c:00:7c:c4:22:cc:2a:36:a2:ab:9b:8f:c4:12:5c:40:f9:67: 3c:2b:a9:fc:7f:1c:fb:f2:80:be:3b:37:48:e4:bb:de:bc:b4: 56:8e:f5:dc:a0:ae:36:76:d0:16:a2:a6:92:1b:80:08:1f:37: 56:16:91:cd:4f:98:bf:44:b5:77:c2:cd:25:82:b1:91:b6:4c: cc:28:be:4e:24:4a:73:d7:66:ee:50:92:06:b1:5c:e7:5b:1f: 3c:38:a3:c6:80:3a:8d:cd:70:25:0f:bb:8c:1b:17:b9:c3:08: c9:d5:5e:b5:51:24:3a:dd:61:8c:15:2b:a8:bd:22:fe:b3:d6: c3:6d:3a:dc:5a:79:6a:c7:ea:a6:6c:60:c1:0e:df:97:39:de: 01:e2:23:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkxZMLGzix4yggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDZmYTA3ZWYtNGVkMC00MzBjLWIzNTMtZmE5YWIyOWMxMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8wG3CD9C31BMgic6u93Izz4FmPhqauj2TWV sIwjg8//mNTgBEtXPTl6kQvrkPYTTxi6aGeFb2NVrCN/nqdQMO91krwxZHujP1RH VwtVKSSmIH8MnrQ7pCTTcHsCSquTLmqyWSKBAou1XyGniv3hptcKPudT69rpF01M HRi4U1pmf0gwS2CyQKShBSZwT4e6PIKXJ20X/mXQTIRJNFrmhHBaNeF+NXlZO0Mz KCfjkQcQ0Rsa1eJHN616S2HwEleJjXHUhHFweRwu0dYAF54rz4wTGNxyiFXCNZ0K x+GBshShbWvVEAAKh++z0qWg+dbF1Q0lsGZFlaFBTeAyyj5ueQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg3KYI/M20hVcbSR+DbGViY1WwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmUwOTRmMGEtNTZhOC0z MzBmLWJmMDctNTlkZWMxNDk4ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgOCrQ+xUtmYjj7Ab6c2PS3JLjLDOn9PiVdOJmvwNZ6mhB1I8WRnENa ReurEvR2xua39JKnxwT2WImO3UmIH/K0ZwqQ+JtRUDoegUZ8xsHX/qjxdN8HasDC H/MSqEDsdU8wpoRvx6UCjN4lGywAfMQizCo2oqubj8QSXED5Zzwrqfx/HPvygL47 N0jku968tFaO9dygrjZ20BaippIbgAgfN1YWkc1PmL9EtXfCzSWCsZG2TMwovk4k SnPXZu5QkgaxXOdbHzw4o8aAOo3NcCUPu4wbF7nDCMnVXrVRJDrdYYwVK6i9Iv6z 1sNtOtxaeWrH6qZsYMEO35c53gHiI0Q= -----END CERTIFICATE-----Generated at Sun Apr 6 19:10:40 2025 by rpki-client