$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ad161e2-ea2a-3f16-a238-242ea22a6d91.roa File: 4ad161e2-ea2a-3f16-a238-242ea22a6d91.roa (raw, json) Hash identifier: lTTBcVDTOh+LTNXnl5JA7z46tuEx4u3KtrPpT/R6G0k= Subject key identifier: 52:81:95:F3:2F:87:84:88:50:58:66:B9:C6:42:2A:C0:96:57:C8:C1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964EB490351F624AAE1400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ad161e2-ea2a-3f16-a238-242ea22a6d91.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397232 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4e:b4:90:35:1f:62:4a:ae:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=13436b3c-33a5-4569-adb0-efe62903fd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:ce:5e:9f:9c:1f:5c:8d:74:29:21:cb:e2: 66:1e:61:b7:16:e2:75:f3:b6:20:81:d3:d4:5a:4b: 6f:05:96:45:4d:5f:00:71:f3:a9:7c:78:8b:d6:8c: 84:2e:95:06:c8:32:e4:9d:7c:45:d5:bb:57:23:9b: 5e:f6:09:c1:cf:24:63:cb:2e:f9:79:19:7e:37:7a: 88:65:cc:56:f4:8d:14:15:ec:09:a4:08:18:48:e8: 1a:2c:61:a0:0b:48:f7:ce:c8:cd:af:f9:22:f0:9c: 63:87:87:6d:18:89:92:00:3c:e8:13:b8:d0:94:65: 93:8c:8d:1a:df:e6:95:e6:b3:e6:f6:3c:81:5e:b1: 0c:c7:e2:93:14:c8:1e:36:3f:d8:67:98:09:63:7a: 46:19:65:2b:53:1d:63:a4:30:3a:e6:e1:e8:ee:a8: e8:0c:03:da:17:af:b6:bc:6d:63:18:51:00:15:90: 0b:3b:55:62:50:1f:bc:79:ba:ef:bc:c2:32:44:6b: e7:95:dd:51:3f:45:2e:7b:17:e0:36:52:ec:b9:b1: 73:f0:a8:90:07:e9:53:d6:a7:23:8e:2c:3e:58:11: af:4c:92:0c:f6:0a:c5:af:96:9f:35:db:dd:0b:d0: b0:5b:40:9a:82:d5:7f:8a:d2:f4:32:17:d7:c1:70: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:81:95:F3:2F:87:84:88:50:58:66:B9:C6:42:2A:C0:96:57:C8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ad161e2-ea2a-3f16-a238-242ea22a6d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:88:6d:e6:01:69:e5:e3:8d:ee:72:0d:ba:99:b3:f0:89:7c: ba:6a:0e:15:75:aa:1f:cf:7a:22:3c:28:38:60:fb:b0:16:63: 02:ba:74:9a:6e:45:38:39:5e:92:c5:15:c4:e6:64:9c:04:20: 0f:d7:e4:15:f2:95:72:90:6d:8f:c9:84:b1:54:91:56:44:09: a0:25:db:70:96:ba:a8:26:52:f9:ce:8c:8b:fb:5e:73:7b:44: fe:44:62:27:2f:2d:a6:75:90:50:4b:18:f3:52:c5:df:46:d0: 51:4d:15:5f:fa:8c:0c:7a:81:49:62:f9:ba:f0:01:53:3a:4d: 25:62:8e:d8:92:8a:ed:32:b9:90:af:0b:68:a9:fb:93:de:ae: 81:79:86:90:7d:33:4d:1b:63:cc:2a:f2:22:d0:48:77:5d:c8: 63:65:cd:9e:76:8e:db:91:e6:99:24:8f:82:39:e5:49:60:d6: 0b:cc:23:b9:56:24:12:f1:c5:35:ba:5b:21:c1:5e:bf:3a:03: 9b:9e:9c:2b:04:5f:a4:9a:fd:77:ea:eb:0a:4d:69:ff:0d:7e: e0:f7:29:b8:5f:c6:3b:2f:2f:f2:c7:db:20:05:76:7a:c3:52: ae:b1:38:42:88:aa:9e:80:db:f6:e8:42:0a:86:91:3f:39:40: b9:37:ec:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk60kDUfYkquFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTM0MzZiM2MtMzNhNS00NTY5LWFkYjAtZWZlNjI5MDNmZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELOXp+cH1yNdCkhy+JmHmG3FuJ187YggdPU WktvBZZFTV8AcfOpfHiL1oyELpUGyDLknXxF1btXI5te9gnBzyRjyy75eRl+N3qI ZcxW9I0UFewJpAgYSOgaLGGgC0j3zsjNr/ki8Jxjh4dtGImSADzoE7jQlGWTjI0a 3+aV5rPm9jyBXrEMx+KTFMgeNj/YZ5gJY3pGGWUrUx1jpDA65uHo7qjoDAPaF6+2 vG1jGFEAFZALO1ViUB+8ebrvvMIyRGvnld1RP0UuexfgNlLsubFz8KiQB+lT1qcj jiw+WBGvTJIM9grFr5afNdvdC9CwW0CagtV/itL0MhfXwXC7PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKBlfMvh4SIUFhmucZCKsCWV8jBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGFkMTYxZTItZWEyYS0z ZjE2LWEyMzgtMjQyZWEyMmE2ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqIbeYBaeXjje5yDbqZs/CJfLpqDhV1qh/PeiI8KDhg+7AWYwK6dJpu RTg5XpLFFcTmZJwEIA/X5BXylXKQbY/JhLFUkVZECaAl23CWuqgmUvnOjIv7XnN7 RP5EYicvLaZ1kFBLGPNSxd9G0FFNFV/6jAx6gUli+brwAVM6TSVijtiSiu0yuZCv C2ip+5PeroF5hpB9M00bY8wq8iLQSHddyGNlzZ52jtuR5pkkj4I55Ulg1gvMI7lW JBLxxTW6WyHBXr86A5uenCsEX6Sa/Xfq6wpNaf8NfuD3KbhfxjsvL/LH2yAFdnrD Uq6xOEKIqp6A2/boQgqGkT85QLk37Eg= -----END CERTIFICATE-----Generated at Sun Apr 6 20:28:47 2025 by rpki-client