$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b7a358d-a0b3-3c26-82ca-810fcecb6746.roa File: 3b7a358d-a0b3-3c26-82ca-810fcecb6746.roa (raw, json) Hash identifier: 0Hb2cvtN1VY/d0plo1vSZlLRbWrivg0cdyuC9j/0vgA= Subject key identifier: FD:79:48:CE:37:E3:26:51:EF:BC:D2:30:EE:67:10:05:BC:6C:13:17 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848907609A97531B3C9E95D6000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b7a358d-a0b3-3c26-82ca-810fcecb6746.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397228 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:09:a9:75:31:b3:c9:e9:5d:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=54d45a7f-31a7-4b8d-bf3a-a09f604b4904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:d4:e9:46:c6:7d:6f:11:40:4b:53:f9:de: 3a:91:9f:42:2b:30:f5:2a:69:ae:53:5b:20:3f:35: 23:50:2a:fa:c6:0b:40:b6:72:5b:39:82:cd:ce:6b: b8:51:b2:e9:de:1f:33:28:3b:ff:ca:29:a6:b4:48: e5:d4:9c:3f:d5:b3:97:a3:55:fe:7c:44:3a:c2:da: 2a:06:ee:26:63:75:71:41:5c:e7:0b:c9:3f:06:cc: 9d:2f:42:a2:de:ca:40:58:61:5f:4f:d4:43:89:19: 83:3d:74:e6:2a:56:25:31:89:ca:dd:95:a7:74:a4: 41:21:cd:a5:81:02:20:48:6b:cd:1a:e8:af:27:02: e7:7d:1c:7c:d1:a9:4a:15:e7:0d:14:f6:04:ae:48: 9e:fd:8d:21:21:40:74:f1:b9:62:6b:af:b0:9f:d1: 2d:ed:08:d4:7b:8f:a4:04:e6:60:2c:ed:28:7e:c0: 96:27:26:1c:28:66:53:8a:04:5e:79:51:a0:2a:4b: 64:f1:70:71:10:6a:18:d5:91:1a:25:d4:00:da:4b: cf:6c:5b:98:62:40:b1:c1:5c:c2:ec:fd:5b:db:e2: 4b:e6:5c:92:92:0b:54:fe:b7:d8:38:ee:35:fc:09: ad:92:62:2f:c0:e2:9e:22:88:e7:ee:2a:61:3a:5c: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:79:48:CE:37:E3:26:51:EF:BC:D2:30:EE:67:10:05:BC:6C:13:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b7a358d-a0b3-3c26-82ca-810fcecb6746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:81:14:d4:74:60:60:c9:05:92:6e:0b:90:c0:3a:ca:34:79: 63:85:1b:8e:46:9a:82:10:66:51:7a:a2:56:36:41:56:3e:1b: 54:23:23:4f:4d:51:1b:ce:fd:8d:4d:50:44:0c:26:19:39:e6: 8a:bf:60:2a:84:a4:92:8b:2b:13:ce:19:62:49:59:f9:19:ea: fe:01:db:6b:64:f3:ff:33:95:fc:10:90:b7:69:fd:b9:15:1f: e5:ca:ba:0b:62:bd:ee:c2:1f:17:cb:00:22:18:04:0e:13:8d: 72:9d:31:48:03:aa:7e:54:a6:ed:33:80:ad:c7:82:d6:3e:8f: 2e:c8:d7:bb:78:36:e9:98:07:16:73:b0:09:ac:5a:e0:cb:b2: 68:e4:93:67:8f:64:6d:63:8f:c5:98:84:35:3b:09:81:8e:fc: c7:21:df:b5:30:bf:8b:86:31:c1:7a:7e:a4:2f:72:5e:64:7e: 7d:98:9e:f4:b2:85:62:98:d6:d2:70:27:d8:6f:a8:bc:94:1a: c6:9a:45:b7:78:77:2b:09:35:66:5e:d7:ad:1b:4c:4b:c9:00: ba:3b:2c:1c:c4:2a:c0:e0:82:54:5b:d8:af:d2:15:d5:5d:0c: 48:e8:0e:9e:b6:9d:a8:49:40:82:57:19:fb:af:88:5e:0c:e3: ba:87:e8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgmpdTGzyeldYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NTRkNDVhN2YtMzFhNy00YjhkLWJmM2EtYTA5ZjYwNGI0OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjbU6UbGfW8RQEtT+d46kZ9CKzD1KmmuU1sg PzUjUCr6xgtAtnJbOYLNzmu4UbLp3h8zKDv/yimmtEjl1Jw/1bOXo1X+fEQ6wtoq Bu4mY3VxQVznC8k/BsydL0Ki3spAWGFfT9RDiRmDPXTmKlYlMYnK3ZWndKRBIc2l gQIgSGvNGuivJwLnfRx80alKFecNFPYErkie/Y0hIUB08blia6+wn9Et7QjUe4+k BOZgLO0ofsCWJyYcKGZTigReeVGgKktk8XBxEGoY1ZEaJdQA2kvPbFuYYkCxwVzC 7P1b2+JL5lySkgtU/rfYOO41/AmtkmIvwOKeIojn7iphOlw+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP15SM434yZR77zSMO5nEAW8bBMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2I3YTM1OGQtYTBiMy0z YzI2LTgyY2EtODEwZmNlY2I2NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2BFNR0YGDJBZJuC5DAOso0eWOFG45GmoIQZlF6olY2QVY+G1QjI09N URvO/Y1NUEQMJhk55oq/YCqEpJKLKxPOGWJJWfkZ6v4B22tk8/8zlfwQkLdp/bkV H+XKugtive7CHxfLACIYBA4TjXKdMUgDqn5Upu0zgK3HgtY+jy7I17t4NumYBxZz sAmsWuDLsmjkk2ePZG1jj8WYhDU7CYGO/Mch37Uwv4uGMcF6fqQvcl5kfn2YnvSy hWKY1tJwJ9hvqLyUGsaaRbd4dysJNWZe160bTEvJALo7LBzEKsDgglRb2K/SFdVd DEjoDp62nahJQIJXGfuviF4M47qH6CQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:33 2025 by rpki-client