$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36487eb3-22f9-367f-af69-93c557353d21.roa File: 36487eb3-22f9-367f-af69-93c557353d21.roa (raw, json) Hash identifier: mLDhv8EJk+9WSs9BOV+o957LdAVLn8jjTWYNa3QjgZ4= Subject key identifier: D1:81:24:7B:E1:F9:45:E2:54:25:80:B3:6E:60:B2:06:6F:6B:10:4A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD211125F2919B8553572B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36487eb3-22f9-367f-af69-93c557353d21.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397219 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:11:25:f2:91:9b:85:53:57:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=55fb5a71-461e-433d-815f-73db8c26e052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:16:03:21:e0:aa:ee:51:1f:44:2e:41:0c: 5f:0f:8c:58:e4:a2:51:83:80:e8:0a:65:c5:81:97: 1c:44:76:a4:b8:7e:72:f5:f7:db:95:73:94:05:dd: 93:92:b0:2b:7f:46:8f:8f:df:a6:dd:0e:d0:8b:fd: b1:dc:b3:62:76:ab:b1:48:2f:d0:49:58:21:02:34: f7:33:a7:35:fc:4a:06:28:9c:b5:63:b6:c7:0a:d3: 60:bb:e7:b5:5a:fa:89:8f:91:9f:f7:c6:2e:f4:f0: 13:bb:cb:87:6f:d8:05:f9:de:d1:4f:11:4b:db:7d: 01:21:1e:9d:fb:a2:1a:62:d6:f1:6f:76:8d:39:2b: 4c:48:8b:7d:11:c2:6c:2b:0a:d4:46:57:2a:fd:4a: 08:0b:4e:18:23:90:4d:bd:fa:48:56:99:fb:d8:6c: 4b:65:03:9b:2f:f0:17:d0:bd:0c:1e:37:6f:7d:41: c3:ff:82:27:75:b6:9a:0a:9a:34:cc:e2:f5:f8:d0: 00:9c:19:41:51:b1:6b:d2:1b:f8:8f:cd:0e:45:27: 9a:a9:d7:58:1b:46:c3:e6:06:b6:66:c8:ca:1a:6b: 59:c7:5a:f0:a9:c9:c3:ac:c1:44:c6:c2:81:de:b1: dc:68:a4:fd:26:d5:a4:95:b6:a2:25:75:c6:c8:c3: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:24:7B:E1:F9:45:E2:54:25:80:B3:6E:60:B2:06:6F:6B:10:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36487eb3-22f9-367f-af69-93c557353d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:de:e7:ef:00:f1:fc:7e:60:19:23:1f:94:97:72:34:28:0b: 75:78:a4:3c:d6:cc:d8:4a:4a:41:a3:20:ef:fc:71:02:38:7b: 79:2b:7b:d6:e4:ee:9f:12:46:ec:1a:82:6a:1e:53:8b:83:a5: 3c:46:d0:55:3f:8c:8b:e0:51:b7:19:ae:a0:40:73:5a:75:51: 91:c8:d5:73:2e:58:57:7d:d3:cc:cf:79:44:8a:b2:f9:72:db: f5:7d:b5:51:69:9e:80:84:df:9d:d4:b3:a8:93:e1:e2:ad:0f: 23:42:ed:22:52:78:39:43:88:cb:ba:69:09:c3:d4:23:59:a7: 58:da:c8:a7:56:2c:0d:b6:3f:4f:49:4c:05:59:ce:a8:c6:ca: 32:7a:3b:65:03:09:fd:e3:2f:6e:1c:ea:55:db:28:40:f9:29: fd:c4:02:13:3a:84:07:05:62:c9:f0:0f:0f:8a:c3:91:65:f0: 23:d1:98:ba:af:29:6c:81:67:c8:d1:f3:a2:04:ea:c1:5c:e7: 1e:e8:45:3a:e9:f6:45:af:18:84:8c:72:ac:05:78:e6:9a:3d: 00:dd:56:df:e5:be:7d:af:b9:e8:0a:ba:0a:95:55:d9:5e:cf: 86:8d:88:62:83:9f:18:b1:28:27:cc:29:77:0d:09:cb:bc:88: 30:9e:e0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IREl8pGbhVNXKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NTVmYjVhNzEtNDYxZS00MzNkLTgxNWYtNzNkYjhjMjZlMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfQWAyHgqu5RH0QuQQxfD4xY5KJRg4DoCmXF gZccRHakuH5y9ffblXOUBd2TkrArf0aPj9+m3Q7Qi/2x3LNidquxSC/QSVghAjT3 M6c1/EoGKJy1Y7bHCtNgu+e1WvqJj5Gf98Yu9PATu8uHb9gF+d7RTxFL230BIR6d +6IaYtbxb3aNOStMSIt9EcJsKwrURlcq/UoIC04YI5BNvfpIVpn72GxLZQObL/AX 0L0MHjdvfUHD/4IndbaaCpo0zOL1+NAAnBlBUbFr0hv4j80ORSeaqddYG0bD5ga2 ZsjKGmtZx1rwqcnDrMFExsKB3rHcaKT9JtWklbaiJXXGyMMlOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGBJHvh+UXiVCWAs25gsgZvaxBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzY0ODdlYjMtMjJmOS0z NjdmLWFmNjktOTNjNTU3MzUzZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHje5+8A8fx+YBkjH5SXcjQoC3V4pDzWzNhKSkGjIO/8cQI4e3kre9bk 7p8SRuwagmoeU4uDpTxG0FU/jIvgUbcZrqBAc1p1UZHI1XMuWFd908zPeUSKsvly 2/V9tVFpnoCE353Us6iT4eKtDyNC7SJSeDlDiMu6aQnD1CNZp1jayKdWLA22P09J TAVZzqjGyjJ6O2UDCf3jL24c6lXbKED5Kf3EAhM6hAcFYsnwDw+Kw5Fl8CPRmLqv KWyBZ8jR86IE6sFc5x7oRTrp9kWvGISMcqwFeOaaPQDdVt/lvn2vuegKugqVVdle z4aNiGKDnxixKCfMKXcNCcu8iDCe4PE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:07:23 2025 by rpki-client