$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa File: 488a029c-3be8-3091-8fd0-4d745297d4db.roa (raw, json) Hash identifier: ws2IRCr/pMvaunzWAV8J+FMZU4qGjHlzCWqMTKR+5hY= Subject key identifier: A6:BB:A4:B2:C4:6E:19:32:AA:D7:D2:56:87:78:33:5E:6D:7F:FA:93 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210C8B6078CEDD56281E60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0c:8b:60:78:ce:dd:56:28:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=b01c1647-b96e-4505-81ef-4b5918bbf5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:06:95:1a:48:13:b1:d2:f7:58:ce:b6:3f: f6:36:5d:90:39:89:79:8c:25:f1:34:40:2b:be:1a: 79:6e:1c:d1:0e:d6:24:bc:f5:ae:fb:b4:60:87:46: 6b:30:29:20:0e:9d:ec:0e:19:66:af:b1:e3:90:30: f3:b4:e0:82:db:81:39:aa:39:d9:57:8a:9f:3e:06: 61:50:07:ef:81:df:59:44:f2:2b:50:6b:c7:92:9f: ab:d7:4d:a0:c5:1a:24:e0:32:9c:db:8c:78:53:92: 99:44:63:bd:48:24:38:ad:9b:c3:6e:b5:92:87:21: 23:5d:9e:71:ca:21:2f:76:83:d3:87:8c:8a:ce:68: ea:25:8a:b8:0b:e8:e4:a4:9b:05:f9:83:55:48:89: 44:df:48:85:89:e4:8d:d7:da:18:c4:24:44:fb:1a: 39:79:c9:e8:6a:6e:17:01:39:e7:41:42:63:27:75: 0f:99:aa:6f:e0:b7:17:b1:fb:b2:6f:a8:fc:43:7e: c3:32:f1:ce:4d:66:4c:09:8f:46:0b:c8:2e:8e:e1: 54:80:ec:09:67:01:c8:4f:a5:0e:44:28:f7:a7:c6: 48:36:4e:d0:3f:d7:21:7a:96:18:3f:41:1e:a8:f5: 64:d2:73:52:b8:5e:cb:d4:f7:21:d5:ce:a8:d4:9a: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BB:A4:B2:C4:6E:19:32:AA:D7:D2:56:87:78:33:5E:6D:7F:FA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a8:ce:52:65:b0:cf:9c:ac:b5:c3:20:d3:03:46:3f:fa:f2: fe:08:d6:cb:8f:1b:95:9f:25:25:cc:91:ff:1d:12:cc:1e:99: 2c:8b:2e:88:c3:26:73:79:b7:2e:45:f4:70:85:15:c1:ad:c6: c2:ae:f0:34:b1:a9:bd:f3:14:7c:01:7b:94:18:e7:c8:89:ce: 6e:8b:6a:cc:e3:c8:00:a3:44:14:a1:bd:65:88:74:8d:ca:62: 0f:88:1f:e4:0f:69:53:f0:a7:87:b2:8b:fc:ba:56:24:02:37: 45:c6:42:07:f6:00:94:1a:b1:09:e0:14:b6:7e:43:f9:0c:ac: 1f:13:ad:fc:45:76:a8:d4:95:12:bc:71:71:f0:6b:15:5e:4d: 7f:80:18:79:b9:47:1f:2c:f4:bc:e5:5c:be:23:a0:46:e1:9f: d2:f3:2c:6b:11:20:be:40:c7:95:89:2a:b5:80:2c:cd:a3:8f: 4a:88:0d:d6:b9:24:10:9f:2d:b2:b3:c6:d0:27:c1:53:a3:ff: 12:4e:91:a4:6d:e4:1c:6b:fd:1c:94:e4:dc:86:4a:2d:5a:d6: d6:91:d8:5d:c2:29:be:f5:9e:2e:29:ef:2b:96:19:0e:f4:2d: bd:67:01:02:06:32:22:dd:f0:c7:dc:27:6f:e1:25:72:4f:3f: 23:2d:c4:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQyLYHjO3VYoHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YjAxYzE2NDctYjk2ZS00NTA1LTgxZWYtNGI1OTE4YmJmNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKQGlRpIE7HS91jOtj/2Nl2QOYl5jCXxNEAr vhp5bhzRDtYkvPWu+7Rgh0ZrMCkgDp3sDhlmr7HjkDDztOCC24E5qjnZV4qfPgZh UAfvgd9ZRPIrUGvHkp+r102gxRok4DKc24x4U5KZRGO9SCQ4rZvDbrWShyEjXZ5x yiEvdoPTh4yKzmjqJYq4C+jkpJsF+YNVSIlE30iFieSN19oYxCRE+xo5ecnoam4X ATnnQUJjJ3UPmapv4LcXsfuyb6j8Q37DMvHOTWZMCY9GC8gujuFUgOwJZwHIT6UO RCj3p8ZINk7QP9chepYYP0EeqPVk0nNSuF7L1Pch1c6o1JozeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa7pLLEbhkyqtfSVod4M15tf/qTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDg4YTAyOWMtM2JlOC0z MDkxLThmZDAtNGQ3NDUyOTdkNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuozlJlsM+crLXDINMDRj/68v4I1suPG5WfJSXMkf8dEswemSyLLojD JnN5ty5F9HCFFcGtxsKu8DSxqb3zFHwBe5QY58iJzm6LaszjyACjRBShvWWIdI3K Yg+IH+QPaVPwp4eyi/y6ViQCN0XGQgf2AJQasQngFLZ+Q/kMrB8TrfxFdqjUlRK8 cXHwaxVeTX+AGHm5Rx8s9LzlXL4joEbhn9LzLGsRIL5Ax5WJKrWALM2jj0qIDda5 JBCfLbKzxtAnwVOj/xJOkaRt5Bxr/RyU5NyGSi1a1taR2F3CKb71ni4p7yuWGQ70 Lb1nAQIGMiLd8MfcJ2/hJXJPPyMtxMg= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:12 2025 by rpki-client