$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa File: 356d2633-4906-3015-a77c-067a5ba0d7c8.roa (raw, json) Hash identifier: lcuUDX0a6GO9KXM63Xy99X0S4H51O8Ict7c/2W6B+/M= Subject key identifier: 2D:3F:1F:B5:5A:41:EE:E7:7B:31:97:75:3F:77:20:24:0D:ED:BC:41 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964EF5A0B3B3AF421A7900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397237 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4e:f5:a0:b3:b3:af:42:1a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c1e88e7b-5d5c-44d7-9113-e9b4aab2ada6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:a0:d1:0c:fd:fc:a7:a5:26:02:76:62:84: 69:71:3c:86:28:9e:14:21:b1:bf:1a:b0:4e:ab:93: 85:67:dc:cf:85:0c:b6:ec:d1:74:cc:73:31:89:75: c1:fc:05:07:90:97:bd:b9:01:7a:38:08:d0:ee:2b: 26:a1:86:2f:8a:df:00:9a:85:e6:02:8c:2d:00:e5: 70:f6:03:81:d8:11:17:7c:b6:71:18:80:01:cc:27: 05:31:1f:33:1d:e0:fb:91:2a:e1:f9:d6:de:6c:1a: d1:11:b3:66:30:c5:89:b7:01:ca:f5:da:ac:e2:ab: 02:24:29:67:59:7a:42:c4:3c:d1:c9:96:10:81:ad: 66:04:d2:82:00:41:bc:81:b0:08:36:31:65:ab:52: cf:28:01:97:57:a4:cb:04:3b:9c:23:ef:ee:61:54: 69:27:9b:ea:20:31:03:9a:df:c6:a8:9e:7c:ff:91: b6:a5:ec:96:43:62:5d:db:59:84:f9:5b:63:b8:5e: 1e:c4:ee:a3:ac:fa:df:0c:99:be:1e:c5:da:1b:93: 3d:48:62:e3:e9:3f:19:28:26:df:f7:42:43:ca:87: 60:ca:74:bd:fd:92:6e:eb:23:84:a3:ee:99:eb:46: 62:35:6c:74:f8:59:c9:e2:a0:cb:fc:1f:36:2f:47: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3F:1F:B5:5A:41:EE:E7:7B:31:97:75:3F:77:20:24:0D:ED:BC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/356d2633-4906-3015-a77c-067a5ba0d7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d4:a6:1f:dd:8e:5f:92:68:fd:d1:1c:02:26:53:13:01:48: e8:3c:ab:e9:f6:4a:c0:85:5e:27:c2:f7:30:93:39:14:48:c4: ff:f9:e1:b3:79:46:97:f4:99:37:fc:24:39:3f:0d:5b:36:f9: 5d:7a:f1:52:86:0c:eb:23:9e:7f:d5:6e:c0:4d:49:b9:09:f7: 5f:56:a8:34:dc:00:9c:07:46:c1:c2:1e:ad:f3:b3:85:44:66: 94:fa:8f:b4:33:c6:8b:65:4e:7b:11:57:6f:a8:a0:78:02:dd: f8:dd:50:76:d9:79:25:f8:26:09:1a:31:68:92:56:2e:73:81: bf:c8:7f:aa:e8:c5:c4:c0:e5:19:15:21:03:66:a4:19:18:be: 9b:8f:d0:30:b8:85:6a:53:e2:fb:58:ec:8e:29:97:26:bd:06: 3e:0e:30:0b:22:fe:d2:fe:90:6b:e0:6c:cc:66:4a:c7:c7:f6: d4:72:c6:fc:76:a3:ac:fe:a6:8d:a6:97:49:36:42:f5:90:12: 37:2a:cd:0f:1e:be:0c:bb:4f:92:f9:dd:c4:3e:e6:15:c2:39: b9:de:06:6f:e8:78:79:89:59:92:85:14:6d:f0:48:f9:62:65: b7:81:e0:db:59:cc:3a:65:6e:34:21:32:4f:e4:a6:68:52:4d: c8:9e:83:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk71oLOzr0IaeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzFlODhlN2ItNWQ1Yy00NGQ3LTkxMTMtZTliNGFhYjJhZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOOg0Qz9/KelJgJ2YoRpcTyGKJ4UIbG/GrBO q5OFZ9zPhQy27NF0zHMxiXXB/AUHkJe9uQF6OAjQ7ismoYYvit8AmoXmAowtAOVw 9gOB2BEXfLZxGIABzCcFMR8zHeD7kSrh+dbebBrREbNmMMWJtwHK9dqs4qsCJCln WXpCxDzRyZYQga1mBNKCAEG8gbAINjFlq1LPKAGXV6TLBDucI+/uYVRpJ5vqIDED mt/GqJ58/5G2peyWQ2Jd21mE+VtjuF4exO6jrPrfDJm+HsXaG5M9SGLj6T8ZKCbf 90JDyodgynS9/ZJu6yOEo+6Z60ZiNWx0+FnJ4qDL/B82L0d6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0/H7VaQe7nezGXdT93ICQN7bxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzU2ZDI2MzMtNDkwNi0z MDE1LWE3N2MtMDY3YTViYTBkN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXUph/djl+SaP3RHAImUxMBSOg8q+n2SsCFXifC9zCTORRIxP/54bN5 Rpf0mTf8JDk/DVs2+V168VKGDOsjnn/VbsBNSbkJ919WqDTcAJwHRsHCHq3zs4VE ZpT6j7QzxotlTnsRV2+ooHgC3fjdUHbZeSX4JgkaMWiSVi5zgb/If6roxcTA5RkV IQNmpBkYvpuP0DC4hWpT4vtY7I4plya9Bj4OMAsi/tL+kGvgbMxmSsfH9tRyxvx2 o6z+po2ml0k2QvWQEjcqzQ8evgy7T5L53cQ+5hXCObneBm/oeHmJWZKFFG3wSPli ZbeB4NtZzDplbjQhMk/kpmhSTciegxs= -----END CERTIFICATE-----Generated at Sun Apr 6 03:18:10 2025 by rpki-client