$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa File: 43de9b74-3c3f-3a75-89ea-550e31a772e0.roa (raw, json) Hash identifier: kXcwR6RegygGiEccpkbmX0o1jMs+7MQltrLyqfAxM/g= Subject key identifier: D3:87:A0:25:75:C6:DF:29:34:96:1E:50:CB:78:97:D7:E6:DE:82:14 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20EB0C736AD1571054AF80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397242 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:eb:0c:73:6a:d1:57:10:54:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=bcc17b59-510b-40ec-8bb9-c521127710db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:68:f2:c1:a8:a8:3f:2a:6e:a9:0b:7e:3f: 59:c7:80:6e:aa:d6:a9:f5:cc:4a:d0:35:b8:c4:65: 53:60:73:82:f5:03:ba:10:58:54:75:1f:f4:87:36: ed:c1:43:ca:2f:9c:c0:84:48:f6:77:46:5b:4b:10: fe:c0:86:63:ab:e7:08:c9:80:94:66:e7:6b:68:a9: 92:00:ba:44:82:ff:1d:cd:19:eb:62:f6:a8:25:33: 21:71:64:c2:67:9f:d9:11:71:dc:b2:a0:19:f8:c6: 3b:71:74:f6:02:77:d3:70:25:50:1b:6c:f1:9d:3d: d2:4a:58:1b:a5:39:da:7e:b7:1e:d9:c7:c5:8e:ff: 47:8f:d5:46:cd:1e:d1:71:88:b9:cf:e6:2e:a2:d9: f2:2d:eb:29:b5:55:ea:ed:56:e3:45:a9:6e:dd:58: bb:5b:92:41:f9:2c:96:e7:81:af:cb:dd:38:b9:6c: 47:07:b2:c8:cd:fa:66:d4:57:ff:c5:c1:a6:7f:fc: c3:43:12:02:8a:c5:c6:44:ad:3e:85:d1:11:65:d6: d2:24:f2:a8:10:53:d0:c9:d2:17:e1:54:93:0e:01: 02:0b:2e:fe:de:8f:1f:f6:cc:d0:e2:e9:a8:28:37: d4:96:a8:ce:8c:df:da:87:da:cb:d4:5a:2a:b7:c0: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:87:A0:25:75:C6:DF:29:34:96:1E:50:CB:78:97:D7:E6:DE:82:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5e:03:80:68:44:88:56:46:1d:63:71:fc:a4:80:a1:d1:3d: 18:b5:8d:dd:08:73:54:04:da:80:7d:eb:5f:b7:dc:d0:53:a8: 05:d3:b5:37:9a:0b:48:c5:80:db:4b:9a:e8:0a:4b:66:e7:fc: 8e:40:f2:31:8c:35:eb:b4:31:e6:cc:43:77:17:20:8a:18:20: 1a:64:86:6b:fd:53:cd:d9:9f:51:bc:f0:4d:83:92:da:c2:1c: b7:78:6e:df:e8:da:04:b7:c7:e4:72:66:51:b3:e4:c6:ea:19: bc:9e:d8:4a:a0:b7:0b:48:dd:39:8b:c5:a3:47:6c:7a:00:09: 47:0b:d9:49:cb:a0:0c:00:0b:82:33:e5:f5:a8:fe:f4:7b:cd: ce:8a:1d:65:2a:3f:05:27:c6:df:87:17:98:01:b8:5b:19:a9: 61:5c:73:45:36:85:fa:4b:4d:3f:35:d6:03:1a:4f:e5:1e:02: 81:f4:a7:dc:f2:c0:41:15:d2:5e:84:f9:30:4b:cc:18:c7:16: 2a:28:ac:2a:87:ce:0d:cd:2b:41:0e:0c:14:5b:9f:74:e6:34: 93:90:49:62:67:ac:60:77:a3:b0:68:e3:fc:a5:fe:d2:30:1d: 26:ba:88:9a:cc:f6:a9:0b:40:d3:23:2a:8b:58:de:f4:d1:6c: 3c:25:da:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOsMc2rRVxBUr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YmNjMTdiNTktNTEwYi00MGVjLThiYjktYzUyMTEyNzcxMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNlo8sGoqD8qbqkLfj9Zx4Buqtap9cxK0DW4 xGVTYHOC9QO6EFhUdR/0hzbtwUPKL5zAhEj2d0ZbSxD+wIZjq+cIyYCUZudraKmS ALpEgv8dzRnrYvaoJTMhcWTCZ5/ZEXHcsqAZ+MY7cXT2AnfTcCVQG2zxnT3SSlgb pTnafrce2cfFjv9Hj9VGzR7RcYi5z+YuotnyLesptVXq7VbjRalu3Vi7W5JB+SyW 54Gvy904uWxHB7LIzfpm1Ff/xcGmf/zDQxICisXGRK0+hdERZdbSJPKoEFPQydIX 4VSTDgECCy7+3o8f9szQ4umoKDfUlqjOjN/ah9rL1Foqt8BNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOHoCV1xt8pNJYeUMt4l9fm3oIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNkZTliNzQtM2MzZi0z YTc1LTg5ZWEtNTUwZTMxYTc3MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1eA4BoRIhWRh1jcfykgKHRPRi1jd0Ic1QE2oB961+33NBTqAXTtTea C0jFgNtLmugKS2bn/I5A8jGMNeu0MebMQ3cXIIoYIBpkhmv9U83Zn1G88E2DktrC HLd4bt/o2gS3x+RyZlGz5MbqGbye2EqgtwtI3TmLxaNHbHoACUcL2UnLoAwAC4Iz 5fWo/vR7zc6KHWUqPwUnxt+HF5gBuFsZqWFcc0U2hfpLTT811gMaT+UeAoH0p9zy wEEV0l6E+TBLzBjHFioorCqHzg3NK0EODBRbn3TmNJOQSWJnrGB3o7Bo4/yl/tIw HSa6iJrM9qkLQNMjKotY3vTRbDwl2uA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:26 2025 by rpki-client