$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa File: 3f8984fc-3da7-3396-baa3-109af56e8af5.roa (raw, json) Hash identifier: s7VH3i9pOxZnIVCZMxD0xX6RAl4nVmXdd0BDu+O3J0M= Subject key identifier: E3:65:98:32:32:E2:0F:AF:10:DB:6A:14:05:40:E2:12:D4:27:A1:6D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DCECD9183BB20CE69E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397214 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:dc:ec:d9:18:3b:b2:0c:e6:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0009c941-0385-4658-a9c8-3bbdde30ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:3f:00:14:2d:74:1e:ce:be:f2:55:74:95: ae:26:6a:b7:33:32:6b:c2:5e:75:e1:83:d2:fa:3d: d5:38:b8:6a:8f:44:45:fc:c4:bd:4b:a5:09:34:df: 39:a7:7b:e2:71:bf:36:7c:9d:06:59:19:b3:af:df: b3:9d:30:15:dc:ff:25:47:14:79:93:e8:84:f0:47: f4:31:4a:d0:64:73:5d:cd:94:0a:a7:bc:8f:5b:c0: 49:9e:43:af:16:46:31:76:2a:de:18:fb:2a:f5:38: 3f:ea:c1:fe:95:c2:e4:0e:0b:80:82:42:ae:3e:a9: d2:8d:c9:ab:f1:b0:05:b2:4f:ab:81:18:4b:ff:06: b7:f0:fb:a0:c5:f0:08:cd:b7:2f:fa:91:87:d9:e0: 11:12:be:f9:44:8e:0a:e4:17:57:1e:9b:4e:84:16: 1e:1f:15:fa:c1:3f:fc:9a:8d:a8:22:75:c4:27:22: 6d:16:cb:4b:1e:e8:fa:da:fb:96:0c:fc:2f:54:1c: b1:3e:7f:f9:82:e3:ea:24:bb:d3:ff:f7:e0:12:bf: cd:fa:38:e8:d3:d5:34:3e:b8:29:26:aa:04:62:a6: ca:be:ad:2d:79:24:cd:d5:be:7e:c7:5a:2f:d9:25: f7:17:0d:bd:5e:1f:da:ff:98:b3:b1:a3:c5:70:f3: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:98:32:32:E2:0F:AF:10:DB:6A:14:05:40:E2:12:D4:27:A1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c8:d8:7c:90:b0:82:37:1e:d6:5d:0c:b0:13:71:6d:04:1d: 9f:29:b3:37:74:3a:ae:83:9c:bb:db:fc:1a:20:62:8f:89:25: b4:8d:fb:a6:87:3a:3f:de:18:e1:d0:9f:6e:69:8c:0f:82:60: c8:07:7d:ff:f7:e7:41:0c:31:60:88:a3:bb:41:07:ca:78:51: 33:51:fa:75:2a:01:da:59:00:79:a7:6f:ba:2c:0b:ca:cf:e2: 17:28:1a:b0:83:88:98:f7:ad:31:0e:25:54:e3:4c:d8:30:f6: 9d:14:10:26:4d:60:f3:bc:61:1e:23:4e:b3:7c:6a:d9:46:68: 4d:60:e2:ad:f1:21:9a:fc:3a:44:21:bf:1a:60:fe:a0:07:15: 00:c2:88:ec:8d:b9:be:51:80:ec:98:46:5c:d7:7c:31:6b:0a: ac:cf:68:9f:cf:98:37:87:78:21:82:95:52:b2:58:e5:a2:e0: f3:cd:c4:8d:d0:59:d6:d6:6c:07:c5:d0:d8:f8:57:cc:7e:70: 64:ad:60:59:99:a2:c6:91:3a:a8:02:16:c1:2c:62:67:ec:a3: 06:58:2d:59:cc:0d:7c:93:bc:ad:18:91:ab:b9:9b:3c:ae:ea: db:06:0f:2c:e5:ef:f5:5b:c2:97:91:c7:39:ce:6d:c3:1b:40: de:90:58:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtzs2Rg7sgzmnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDAwOWM5NDEtMDM4NS00NjU4LWE5YzgtM2JiZGRlMzBhYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBQ/ABQtdB7OvvJVdJWuJmq3MzJrwl514YPS +j3VOLhqj0RF/MS9S6UJNN85p3vicb82fJ0GWRmzr9+znTAV3P8lRxR5k+iE8Ef0 MUrQZHNdzZQKp7yPW8BJnkOvFkYxdireGPsq9Tg/6sH+lcLkDguAgkKuPqnSjcmr 8bAFsk+rgRhL/wa38PugxfAIzbcv+pGH2eAREr75RI4K5BdXHptOhBYeHxX6wT/8 mo2oInXEJyJtFstLHuj62vuWDPwvVByxPn/5guPqJLvT//fgEr/N+jjo09U0Prgp JqoEYqbKvq0teSTN1b5+x1ov2SX3Fw29Xh/a/5izsaPFcPNEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONlmDIy4g+vENtqFAVA4hLUJ6FtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y4OTg0ZmMtM2RhNy0z Mzk2LWJhYTMtMTA5YWY1NmU4YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvI2HyQsII3HtZdDLATcW0EHZ8pszd0Oq6DnLvb/BogYo+JJbSN+6aH Oj/eGOHQn25pjA+CYMgHff/350EMMWCIo7tBB8p4UTNR+nUqAdpZAHmnb7osC8rP 4hcoGrCDiJj3rTEOJVTjTNgw9p0UECZNYPO8YR4jTrN8atlGaE1g4q3xIZr8OkQh vxpg/qAHFQDCiOyNub5RgOyYRlzXfDFrCqzPaJ/PmDeHeCGClVKyWOWi4PPNxI3Q WdbWbAfF0Nj4V8x+cGStYFmZosaROqgCFsEsYmfsowZYLVnMDXyTvK0Ykau5mzyu 6tsGDyzl7/VbwpeRxznObcMbQN6QWDg= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:41 2025 by rpki-client