$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4547ce16-0f50-30cf-a946-48388f20c381.roa File: 4547ce16-0f50-30cf-a946-48388f20c381.roa (raw, json) Hash identifier: kzQyLMuTMN9He/zEhKoPShPF6BGahcYhb2YtVWdI0p8= Subject key identifier: 41:B5:2F:B3:0A:08:7B:14:F1:EA:3F:43:85:A0:C1:7A:01:1F:8E:37 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2101C0D7628D76D0AD5A40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4547ce16-0f50-30cf-a946-48388f20c381.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397214 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:01:c0:d7:62:8d:76:d0:ad:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=d028f62b-d256-47ca-82a0-d0477a5ef0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:45:4f:fb:ee:2c:49:4c:04:0e:83:d9:cf: d8:bf:3d:68:87:92:8a:6e:4e:21:7f:af:66:03:92: 1f:9b:68:12:0e:9d:30:2c:71:df:24:30:2c:1e:27: 02:a0:58:e9:d4:e8:c2:35:05:02:4e:52:c5:33:f4: cf:59:1a:96:f8:c2:bd:da:5a:8f:04:45:ab:8b:1e: db:32:9c:29:17:36:ec:5c:9b:86:82:85:8e:89:7f: 69:01:1f:33:72:3f:fe:a8:fe:27:f3:46:77:9c:c2: 0a:32:d5:99:1c:43:5c:26:bc:28:08:c8:09:29:fc: 61:4b:e6:53:58:bc:34:ea:42:bd:9e:08:6f:99:57: 53:e8:4c:5b:f5:58:d0:6e:68:b0:e2:c3:b6:89:40: ad:2e:1d:7f:68:ee:cf:f8:9a:bf:12:ec:4f:23:c3: 19:d7:8d:b5:d3:82:69:e7:51:33:cd:a8:ca:74:ea: e2:c5:e1:14:5d:b3:5c:ab:9e:84:44:14:0b:fd:98: 62:9e:b8:fd:1d:9f:1d:5f:5a:62:7b:89:59:43:a6: 28:c4:b3:ed:bb:08:55:e6:b7:56:a0:3e:c0:06:b9: f8:24:07:85:12:fd:ad:7c:8d:e3:3c:72:a9:5d:3a: 24:e3:54:2f:d6:a9:3d:6c:48:9f:0a:62:64:d7:b4: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B5:2F:B3:0A:08:7B:14:F1:EA:3F:43:85:A0:C1:7A:01:1F:8E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4547ce16-0f50-30cf-a946-48388f20c381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bc:87:68:7c:ed:00:c3:ca:4c:d8:5e:1f:f1:53:6a:62:ca: 93:6f:4f:67:34:4d:a2:a4:cb:7f:d1:f6:0c:da:65:2e:f5:64: 6d:5d:34:2c:b6:5f:6c:87:7e:53:5b:6e:a0:00:30:89:c7:ce: 0b:67:51:e7:2d:0f:6b:77:29:06:3d:0a:84:03:cd:a5:7d:f4: 3d:4a:cc:19:31:44:26:47:73:f3:04:67:90:d4:3b:4b:ef:b2: e2:69:1d:85:01:85:b9:92:9f:b1:95:0d:f8:6c:87:75:76:d1: ba:4a:10:a3:13:d5:b1:07:4c:47:f5:47:f2:5e:d2:78:0b:19: 38:69:2b:66:ab:b7:0a:ca:c8:5c:27:67:db:de:b1:c4:89:bf: d3:be:82:11:5d:8e:69:a0:95:d2:5a:8b:73:25:28:e5:44:10: 51:43:94:fc:33:24:53:7c:72:b3:51:24:ca:3f:61:90:3f:4a: 46:81:8d:41:46:2f:c2:f6:ac:38:90:1c:09:d6:66:0a:b9:db: 53:5a:05:82:dd:07:7e:c1:04:dc:a9:ee:5f:ab:e4:71:b9:69: 29:65:e2:84:ef:a3:fb:02:b1:dc:4e:75:18:fc:ad:b3:3b:4c: 8b:6a:d9:3c:66:54:dc:05:e7:6d:96:0c:e8:d3:d1:6f:bf:06: 6c:71:57:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQHA12KNdtCtWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZDAyOGY2MmItZDI1Ni00N2NhLTgyYTAtZDA0NzdhNWVmMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMNFT/vuLElMBA6D2c/Yvz1oh5KKbk4hf69m A5Ifm2gSDp0wLHHfJDAsHicCoFjp1OjCNQUCTlLFM/TPWRqW+MK92lqPBEWrix7b MpwpFzbsXJuGgoWOiX9pAR8zcj/+qP4n80Z3nMIKMtWZHENcJrwoCMgJKfxhS+ZT WLw06kK9nghvmVdT6Exb9VjQbmiw4sO2iUCtLh1/aO7P+Jq/EuxPI8MZ142104Jp 51EzzajKdOrixeEUXbNcq56ERBQL/Zhinrj9HZ8dX1pie4lZQ6YoxLPtuwhV5rdW oD7ABrn4JAeFEv2tfI3jPHKpXTok41Qv1qk9bEifCmJk17TQeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG1L7MKCHsU8eo/Q4WgwXoBH443MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDU0N2NlMTYtMGY1MC0z MGNmLWE5NDYtNDgzODhmMjBjMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi8h2h87QDDykzYXh/xU2piypNvT2c0TaKky3/R9gzaZS71ZG1dNCy2 X2yHflNbbqAAMInHzgtnUectD2t3KQY9CoQDzaV99D1KzBkxRCZHc/MEZ5DUO0vv suJpHYUBhbmSn7GVDfhsh3V20bpKEKMT1bEHTEf1R/Je0ngLGThpK2artwrKyFwn Z9vescSJv9O+ghFdjmmgldJai3MlKOVEEFFDlPwzJFN8crNRJMo/YZA/SkaBjUFG L8L2rDiQHAnWZgq521NaBYLdB37BBNyp7l+r5HG5aSll4oTvo/sCsdxOdRj8rbM7 TItq2TxmVNwF522WDOjT0W+/BmxxV5A= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:40 2025 by rpki-client