$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa File: 484d79b3-27ec-391c-aac3-7b55a350ca4e.roa (raw, json) Hash identifier: loinHaV2I2krhQMIzOR/5T6oG2vCFTKGFCtog0lM7GQ= Subject key identifier: 7B:89:B7:D4:AD:BA:C6:C3:E9:75:07:31:FA:90:61:51:CB:E1:DF:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD211232D342204353BB2C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:12:32:d3:42:20:43:53:bb:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=4c84234f-da77-4f98-ab3e-662a810837e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:b2:aa:86:76:4d:e1:a5:53:91:6f:2a:92: 46:62:f3:75:08:30:b4:9d:fe:fc:4b:33:ff:20:fb: dd:7b:10:8c:b9:d7:14:d8:9e:fd:52:1c:e3:8a:8b: 1a:95:24:72:0c:5e:ca:19:6c:3d:e6:b2:21:7e:63: ac:dd:4c:dc:9c:f9:01:2f:fa:93:e8:c8:3e:1d:04: e2:82:ec:f0:b6:30:cc:47:12:73:c1:1b:2c:2c:9e: 07:aa:f9:0d:f3:27:b3:46:a9:68:73:c5:8d:e2:6f: b4:e3:8b:e9:c0:04:f9:e7:fb:90:2f:86:99:17:08: a6:1d:bc:46:d1:83:73:ec:57:21:b3:03:a5:25:06: d0:d7:e0:57:a1:cb:6f:00:cd:ba:2a:4c:40:56:49: 1a:b0:3b:30:f6:79:7f:88:e9:bc:8a:d5:e3:c2:38: 8c:f0:36:d8:37:75:33:3d:96:20:9f:af:fc:c9:4a: 6c:22:a2:b0:fd:87:43:95:71:77:86:86:27:17:c4: f5:c2:fc:19:f5:ec:4f:74:1f:01:41:83:a1:66:be: 6f:4e:71:14:29:e8:3d:12:ff:f3:62:c1:cb:fd:c2: 3f:2c:fd:d0:48:c1:cf:6d:2f:2f:9b:5f:21:22:9a: d7:d8:d1:1a:79:19:af:09:af:00:c3:30:21:b5:21: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:89:B7:D4:AD:BA:C6:C3:E9:75:07:31:FA:90:61:51:CB:E1:DF:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:78:50:ab:53:04:23:0f:10:c9:0a:e7:4f:f4:e3:ef:06:b8: 76:97:39:15:03:9e:51:7f:49:a5:fd:4d:e5:89:9d:ee:3d:3c: 86:dc:8a:b5:9c:af:65:0c:a9:34:79:ae:39:89:9b:2c:d8:54: 85:6a:2c:21:0f:05:c4:42:84:0a:74:75:8d:e2:17:c6:65:c0: 67:37:0d:6a:e9:62:c9:df:16:07:cf:ce:a2:56:45:74:ac:2e: 45:ed:f0:7c:34:03:56:9e:70:bd:ea:4f:84:f8:fe:43:93:e1: 66:ac:c6:01:4b:d3:ac:bc:43:4f:1a:9c:84:b2:5f:c2:1f:39: a2:23:2d:c2:f9:a0:03:df:20:3d:84:bb:e0:e6:5c:d4:ea:15: e2:85:f9:3a:cb:29:f3:a9:b8:11:c8:d4:9b:eb:85:25:85:6d: 0c:67:17:83:48:0c:20:0c:41:10:8a:ce:49:a4:95:b0:57:20: 40:98:ff:da:39:71:41:b9:5a:28:93:14:0b:26:2a:1a:0a:cd: 57:f3:3a:b4:cf:ed:80:e1:b4:eb:43:83:f4:41:b8:68:2a:26: c8:5a:20:e0:7b:6f:8f:e8:04:45:46:1d:a6:a4:1c:0c:11:d0: 25:3b:1f:3e:6e:67:16:44:d2:4a:d8:dc:35:ff:05:62:48:a2: 43:93:fb:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRIy00IgQ1O7LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NGM4NDIzNGYtZGE3Ny00Zjk4LWFiM2UtNjYyYTgxMDgzN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriGyqoZ2TeGlU5FvKpJGYvN1CDC0nf78SzP/ IPvdexCMudcU2J79UhzjiosalSRyDF7KGWw95rIhfmOs3UzcnPkBL/qT6Mg+HQTi guzwtjDMRxJzwRssLJ4HqvkN8yezRqloc8WN4m+044vpwAT55/uQL4aZFwimHbxG 0YNz7FchswOlJQbQ1+BXoctvAM26KkxAVkkasDsw9nl/iOm8itXjwjiM8DbYN3Uz PZYgn6/8yUpsIqKw/YdDlXF3hoYnF8T1wvwZ9exPdB8BQYOhZr5vTnEUKeg9Ev/z YsHL/cI/LP3QSMHPbS8vm18hIprX2NEaeRmvCa8AwzAhtSE2NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuJt9StusbD6XUHMfqQYVHL4d9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDg0ZDc5YjMtMjdlYy0z OTFjLWFhYzMtN2I1NWEzNTBjYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE54UKtTBCMPEMkK50/04+8GuHaXORUDnlF/SaX9TeWJne49PIbcirWc r2UMqTR5rjmJmyzYVIVqLCEPBcRChAp0dY3iF8ZlwGc3DWrpYsnfFgfPzqJWRXSs LkXt8Hw0A1aecL3qT4T4/kOT4WasxgFL06y8Q08anISyX8IfOaIjLcL5oAPfID2E u+DmXNTqFeKF+TrLKfOpuBHI1JvrhSWFbQxnF4NIDCAMQRCKzkmklbBXIECY/9o5 cUG5WiiTFAsmKhoKzVfzOrTP7YDhtOtDg/RBuGgqJshaIOB7b4/oBEVGHaakHAwR 0CU7Hz5uZxZE0krY3DX/BWJIokOT+0U= -----END CERTIFICATE-----Generated at Sun Apr 6 03:24:04 2025 by rpki-client