$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47b52fba-9e59-30ce-95b7-428cd4c3528e.roa File: 47b52fba-9e59-30ce-95b7-428cd4c3528e.roa (raw, json) Hash identifier: R9D3OXC+6PX1khN+Nj828U0PaycvwF3c31mfFEFrRRE= Subject key identifier: BE:16:0F:08:FF:AD:C2:57:65:65:F6:88:60:3A:7A:28:9B:A0:64:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584890760A5F11477A5CECFE2E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47b52fba-9e59-30ce-95b7-428cd4c3528e.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397240 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0a:5f:11:47:7a:5c:ec:fe:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=0abf0c40-042c-436f-b398-807c38897c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:1d:0b:ec:43:0d:29:22:d7:d7:8c:17:c1: ae:07:c7:52:6e:53:45:49:01:9f:50:fe:03:17:68: 7d:00:65:6f:98:ae:08:72:1d:88:bf:85:9e:57:58: 67:55:7f:ec:ac:df:57:c7:28:96:5c:49:49:f8:73: ff:5c:17:65:75:82:69:27:ca:3a:74:f7:01:56:a4: 9c:8a:0b:03:77:99:5d:2c:dd:a0:19:d3:61:3e:56: af:fd:eb:7a:b7:73:4d:a1:8b:a6:71:3b:36:63:6a: 84:27:f4:f0:9e:7b:02:e1:08:86:7a:1c:6f:42:4d: 0b:d4:dd:2c:ed:0d:51:96:2e:cc:e5:9d:98:45:7d: a8:f1:bf:1a:31:f1:de:81:77:9b:85:14:84:31:35: 71:a3:c5:85:1f:3a:44:03:79:d0:45:ff:4f:e6:68: d7:c4:3a:36:1a:10:73:aa:0a:46:23:bb:01:a5:90: 64:22:55:4a:29:1d:a6:16:80:74:b8:3e:6d:20:f2: 6d:b2:6e:9d:61:a3:11:4d:cd:33:b8:b2:74:22:53: 58:cd:cc:c5:00:b4:cc:d5:f8:d3:32:d6:b2:bd:c9: 78:16:ba:f2:22:51:4a:f5:56:be:14:3a:a7:ec:31: fa:40:c4:f0:b1:4b:14:80:54:bd:27:b5:5e:6e:a6: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:0F:08:FF:AD:C2:57:65:65:F6:88:60:3A:7A:28:9B:A0:64:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47b52fba-9e59-30ce-95b7-428cd4c3528e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8e:31:d6:b8:af:7a:1a:35:37:6a:c6:c2:6f:2b:e7:a0:f1: 92:6c:e8:55:42:67:5b:63:12:1e:f9:15:94:b7:f7:9a:e9:25: 42:d3:56:c6:2e:a1:9e:c8:90:84:98:84:ee:5f:22:3e:dd:50: 87:1c:89:6a:65:dd:3a:75:5b:26:74:74:a9:d6:11:ae:d8:a4: 1f:a4:c7:a9:87:72:75:4a:3b:80:fa:74:b6:25:13:aa:5a:e1: 5d:d3:fe:2e:fa:8f:f4:7e:a0:fe:35:c4:72:a0:2a:99:5a:57: 46:ba:bd:b8:65:40:65:47:16:20:59:f9:2e:11:87:cc:14:11: ac:9e:2d:5b:3b:bc:23:6a:ca:f6:14:e9:ad:0d:37:08:31:a1: 34:c9:69:b9:ab:43:cf:3a:a2:c0:b5:61:44:b1:2e:91:a0:d5: b3:9f:0d:b3:ef:d1:6a:29:88:07:bf:3a:c9:6d:b6:ee:a5:d4: 48:d7:d8:34:e3:e2:e2:89:12:30:a9:62:19:c0:b8:1e:2a:73: b7:94:46:f6:8c:b5:3a:89:dc:72:22:a9:d0:34:89:36:a1:7d: 44:1f:9a:20:24:26:0b:a4:6d:4c:d1:eb:18:0b:9e:37:e3:9d: fd:90:21:d6:34:78:7b:fa:7f:1b:51:ee:8a:e2:36:e6:3d:35: c6:65:4a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgpfEUd6XOz+LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MGFiZjBjNDAtMDQyYy00MzZmLWIzOTgtODA3YzM4ODk3YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloUdC+xDDSki19eMF8GuB8dSblNFSQGfUP4D F2h9AGVvmK4Ich2Iv4WeV1hnVX/srN9XxyiWXElJ+HP/XBdldYJpJ8o6dPcBVqSc igsDd5ldLN2gGdNhPlav/et6t3NNoYumcTs2Y2qEJ/TwnnsC4QiGehxvQk0L1N0s 7Q1Rli7M5Z2YRX2o8b8aMfHegXebhRSEMTVxo8WFHzpEA3nQRf9P5mjXxDo2GhBz qgpGI7sBpZBkIlVKKR2mFoB0uD5tIPJtsm6dYaMRTc0zuLJ0IlNYzczFALTM1fjT Mtayvcl4FrryIlFK9Va+FDqn7DH6QMTwsUsUgFS9J7VebqaWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4WDwj/rcJXZWX2iGA6eiiboGQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDdiNTJmYmEtOWU1OS0z MGNlLTk1YjctNDI4Y2Q0YzM1MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+OMda4r3oaNTdqxsJvK+eg8ZJs6FVCZ1tjEh75FZS395rpJULTVsYu oZ7IkISYhO5fIj7dUIcciWpl3Tp1WyZ0dKnWEa7YpB+kx6mHcnVKO4D6dLYlE6pa 4V3T/i76j/R+oP41xHKgKplaV0a6vbhlQGVHFiBZ+S4Rh8wUEayeLVs7vCNqyvYU 6a0NNwgxoTTJabmrQ886osC1YUSxLpGg1bOfDbPv0WopiAe/Oslttu6l1EjX2DTj 4uKJEjCpYhnAuB4qc7eURvaMtTqJ3HIiqdA0iTahfUQfmiAkJgukbUzR6xgLnjfj nf2QIdY0eHv6fxtR7oriNuY9NcZlSvE= -----END CERTIFICATE-----Generated at Sun Apr 6 09:45:49 2025 by rpki-client