$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/498c2038-acfd-30e1-9617-8c741bd803f5.roa File: 498c2038-acfd-30e1-9617-8c741bd803f5.roa (raw, json) Hash identifier: V0I4fVbFXrPnGJq5nf9dgSakRGT2QNzE7iZtE1IbZV4= Subject key identifier: A5:C3:BC:B7:D4:FB:8D:FF:8D:DB:CC:D1:8E:C2:7D:89:E1:03:93:81 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E8EF140D5E78DC8EAC50 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/498c2038-acfd-30e1-9617-8c741bd803f5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397234 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e8:ef:14:0d:5e:78:dc:8e:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2d69c02f-e01f-463d-8c56-7346e5f27b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:11:13:a2:bb:23:0e:a2:f4:70:2b:ee:74: 33:13:5f:1c:5e:18:ce:ee:d8:6a:ee:0e:e9:66:eb: ab:b0:0b:a4:0f:ef:f3:65:41:5c:ff:f8:36:96:e4: 15:64:f3:50:df:06:cf:d4:8f:26:8c:59:eb:0d:c3: 88:5d:25:11:ed:3d:e6:71:93:8c:35:57:d0:6f:60: 7b:67:23:2d:37:2c:5d:ab:0c:82:3e:4e:f9:00:c4: fd:1c:b8:cc:72:17:40:6b:46:63:5c:8d:95:39:aa: c4:eb:7b:d1:55:2f:52:5c:40:a6:f1:63:99:55:33: 8d:ca:d6:f0:67:a6:17:28:e2:78:58:cd:be:84:19: 1c:42:67:b8:9e:d2:a9:37:cd:33:2f:0d:e2:eb:dd: 9c:c3:78:d4:fb:51:6d:8c:8b:1b:8c:a5:81:4d:41: 91:74:ea:e6:cd:94:fa:89:23:40:b8:6d:60:5e:c1: 19:c2:aa:ce:11:9a:9c:f1:a2:46:6c:0f:67:5a:42: b5:8a:0e:eb:de:68:be:6a:50:ab:40:c8:44:88:e4: cb:ac:d6:c6:dc:85:d2:ea:ae:38:4b:d1:98:23:90: 2f:46:23:f0:37:40:a1:79:77:f9:bb:5c:87:b9:81: ed:ef:ea:1f:03:31:d9:53:60:ff:c9:db:80:35:5d: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:BC:B7:D4:FB:8D:FF:8D:DB:CC:D1:8E:C2:7D:89:E1:03:93:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/498c2038-acfd-30e1-9617-8c741bd803f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8a:6d:1f:10:c9:6b:62:98:03:13:fb:ae:4a:b4:6f:fb:19: 89:e7:62:d6:2b:c9:58:10:6b:11:d2:f5:09:b8:b9:ba:88:ad: 25:b8:32:d4:52:8c:64:ad:a6:ab:0e:42:bb:dd:cd:bb:6e:4a: a9:c0:ff:f9:9d:78:db:ae:9b:3b:59:9b:d8:9f:49:d5:73:07: 56:38:0f:42:2d:48:1e:2d:87:52:9a:18:20:c7:99:1e:d5:ed: 95:3e:36:63:32:6a:ae:c9:dd:92:73:d5:d3:3b:9e:43:a9:24: 13:40:6e:3d:61:6e:91:ba:ed:da:2a:dd:cb:90:c6:16:af:a9: 4d:1e:8f:fb:81:d0:58:42:f7:4a:f2:9c:ad:2d:8f:2d:06:bf: 0f:76:a5:28:eb:49:f1:67:6a:a3:c1:0f:5c:c4:d8:9f:ac:75: 20:87:f9:c2:2a:5d:98:46:80:5b:a0:94:06:71:d3:83:64:2d: 6c:a3:0c:66:4d:ec:5c:35:99:bb:0b:18:ae:19:5c:28:72:05: 2a:93:ad:c4:1d:8e:ab:13:3f:59:a1:0b:53:10:55:57:ce:2f: ec:ff:fd:e8:5c:0d:06:75:85:dc:5c:b0:28:21:2a:e6:6c:1b: 86:e6:8d:78:39:4b:1e:54:2f:3a:04:bd:a4:8c:f1:c3:d0:76: a9:29:97:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRujvFA1eeNyOrFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmQ2OWMwMmYtZTAxZi00NjNkLThjNTYtNzM0NmU1ZjI3YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wkRE6K7Iw6i9HAr7nQzE18cXhjO7thq7g7p ZuursAukD+/zZUFc//g2luQVZPNQ3wbP1I8mjFnrDcOIXSUR7T3mcZOMNVfQb2B7 ZyMtNyxdqwyCPk75AMT9HLjMchdAa0ZjXI2VOarE63vRVS9SXECm8WOZVTONytbw Z6YXKOJ4WM2+hBkcQme4ntKpN80zLw3i692cw3jU+1FtjIsbjKWBTUGRdOrmzZT6 iSNAuG1gXsEZwqrOEZqc8aJGbA9nWkK1ig7r3mi+alCrQMhEiOTLrNbG3IXS6q44 S9GYI5AvRiPwN0CheXf5u1yHuYHt7+ofAzHZU2D/yduANV3ixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXDvLfU+43/jdvM0Y7CfYnhA5OBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDk4YzIwMzgtYWNmZC0z MGUxLTk2MTctOGM3NDFiZDgwM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqKbR8QyWtimAMT+65KtG/7GYnnYtYryVgQaxHS9Qm4ubqIrSW4MtRS jGStpqsOQrvdzbtuSqnA//mdeNuumztZm9ifSdVzB1Y4D0ItSB4th1KaGCDHmR7V 7ZU+NmMyaq7J3ZJz1dM7nkOpJBNAbj1hbpG67doq3cuQxhavqU0ej/uB0FhC90ry nK0tjy0Gvw92pSjrSfFnaqPBD1zE2J+sdSCH+cIqXZhGgFuglAZx04NkLWyjDGZN 7Fw1mbsLGK4ZXChyBSqTrcQdjqsTP1mhC1MQVVfOL+z//ehcDQZ1hdxcsCghKuZs G4bmjXg5Sx5ULzoEvaSM8cPQdqkpl/o= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:48 2025 by rpki-client