$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa File: 37024891-f3c2-3e45-bf9a-005e06316064.roa (raw, json) Hash identifier: SGTXqTLiyFOJBFfJGAcLh+7xTQxv8XFa1oeO5MjlVs4= Subject key identifier: 69:12:87:AD:1B:DF:E7:13:5B:EE:5E:9A:B1:A2:45:8B:6F:D5:EC:02 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965A894BF92A59C3198280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397213 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5a:89:4b:f9:2a:59:c3:19:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d9ea9fbe-883f-4412-b7ee-9b120e31a5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:87:96:f6:1c:88:55:b8:99:d4:c8:74:10: c3:2f:47:ec:03:ee:e8:a9:5c:3c:c8:00:08:09:ce: a9:8b:e5:75:4e:b5:e6:2e:2e:90:83:b5:1e:ba:fa: 7e:61:e3:22:61:d3:65:5e:0b:15:14:f9:4a:d9:8c: 43:e6:cc:56:a7:cc:f1:2e:59:ea:10:f4:da:58:de: 84:58:d7:aa:06:3c:d5:4f:44:cb:e8:11:5c:f4:d5: 88:06:95:94:3b:1d:98:7c:bc:a4:75:0a:5e:61:5d: 5a:82:c5:82:1b:8f:3e:6c:d0:b5:3b:59:fb:e8:42: ad:3b:4c:6a:d5:8e:b6:43:8c:34:16:1f:a1:fc:56: 68:37:11:93:6d:03:30:65:94:a9:19:32:2d:4f:bc: 4f:bb:f3:d3:9b:b0:ba:d8:42:df:60:07:30:c7:b4: aa:96:0b:96:7c:9f:4f:8a:f6:8e:c9:bd:bd:36:37: b2:f1:63:71:0a:a5:be:3d:26:9e:08:2b:6b:b6:ac: e5:e7:0c:c3:77:c4:03:a8:6f:8e:78:da:51:23:bc: c6:d0:07:2c:03:0c:59:74:24:bc:11:a7:28:f2:56: 96:d0:34:45:35:bb:b9:08:29:00:90:28:03:3c:77: 8c:a4:3a:de:9c:6b:ea:3e:85:14:96:57:eb:44:3e: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:12:87:AD:1B:DF:E7:13:5B:EE:5E:9A:B1:A2:45:8B:6F:D5:EC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37024891-f3c2-3e45-bf9a-005e06316064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:bf:ee:5d:83:49:5b:2d:dd:10:a8:1c:43:e5:c2:48:9d: ee:0e:e5:c3:52:26:d4:34:02:71:bb:c8:cc:d9:97:ec:4a:29: ef:0b:9d:4d:01:75:bc:70:46:ef:9a:44:aa:c8:d8:ee:74:bc: 2c:7a:70:d4:10:3e:71:da:ff:a2:ad:c8:86:b2:e7:66:97:12: 97:c9:af:ee:50:18:5f:6b:b0:55:d7:d7:06:03:d7:da:08:bf: ad:7a:68:b0:d8:29:87:b9:b9:79:2f:e9:9e:cd:2f:24:92:ad: ee:e0:98:a4:b2:c5:48:cb:54:b6:1f:34:ad:d4:05:28:13:08: 0a:57:3f:b7:ac:2a:4f:2a:84:86:68:11:2c:82:e2:9f:ab:90: 82:87:79:89:b6:c0:33:05:89:11:a8:e8:0b:bf:03:4c:79:cc: 42:7d:2a:90:3c:87:86:12:d3:17:d4:47:2f:ed:78:4d:63:92: 8b:6a:1d:a5:33:e8:a2:94:76:2e:83:8f:29:f5:16:63:b7:6e: 3f:ff:61:da:cd:7a:83:86:04:8d:67:aa:66:77:7c:37:ac:2f: d2:c9:d2:ea:c6:31:8e:6f:f3:c9:6e:71:97:f5:98:ac:54:49: e2:df:25:3a:7e:09:0d:d5:18:b7:c0:9c:b1:91:35:47:2a:e6: 14:9d:1b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllqJS/kqWcMZgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDllYTlmYmUtODgzZi00NDEyLWI3ZWUtOWIxMjBlMzFhNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZiHlvYciFW4mdTIdBDDL0fsA+7oqVw8yAAI Cc6pi+V1TrXmLi6Qg7Ueuvp+YeMiYdNlXgsVFPlK2YxD5sxWp8zxLlnqEPTaWN6E WNeqBjzVT0TL6BFc9NWIBpWUOx2YfLykdQpeYV1agsWCG48+bNC1O1n76EKtO0xq 1Y62Q4w0Fh+h/FZoNxGTbQMwZZSpGTItT7xPu/PTm7C62ELfYAcwx7SqlguWfJ9P ivaOyb29Njey8WNxCqW+PSaeCCtrtqzl5wzDd8QDqG+OeNpRI7zG0AcsAwxZdCS8 Eaco8laW0DRFNbu5CCkAkCgDPHeMpDrenGvqPoUUllfrRD4D0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkSh60b3+cTW+5emrGiRYtv1ewCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzcwMjQ4OTEtZjNjMi0z ZTQ1LWJmOWEtMDA1ZTA2MzE2MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlEv+5dg0lbLd0QqBxD5cJIne4O5cNSJtQ0AnG7yMzZl+xKKe8LnU0B dbxwRu+aRKrI2O50vCx6cNQQPnHa/6KtyIay52aXEpfJr+5QGF9rsFXX1wYD19oI v616aLDYKYe5uXkv6Z7NLySSre7gmKSyxUjLVLYfNK3UBSgTCApXP7esKk8qhIZo ESyC4p+rkIKHeYm2wDMFiRGo6Au/A0x5zEJ9KpA8h4YS0xfURy/teE1jkotqHaUz 6KKUdi6Djyn1FmO3bj//YdrNeoOGBI1nqmZ3fDesL9LJ0urGMY5v88lucZf1mKxU SeLfJTp+CQ3VGLfAnLGRNUcq5hSdG1o= -----END CERTIFICATE-----Generated at Mon Apr 7 13:08:38 2025 by rpki-client