$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa File: 57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa (raw, json) Hash identifier: xqDM3HyWDgjWrp/dv97zX5OUY39PIkrvUiznETivyXk= Subject key identifier: C6:24:0C:95:84:47:7C:4D:89:AC:3D:8E:46:7F:70:97:76:C5:26:C3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584890760A7BC7D9CF553946D840 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397242 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0a:7b:c7:d9:cf:55:39:46:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=41c9d4df-fa9e-49d3-ba0b-9c5e5ea35759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:f9:90:ca:db:81:5e:02:91:c0:47:73:c3: 30:51:40:65:6b:f8:2d:1e:a7:77:c1:38:91:b3:21: 93:57:6e:70:30:83:b6:98:71:49:c9:8d:1f:a5:a6: 9d:48:44:b2:05:01:5d:2a:e4:10:cb:72:8f:95:ed: 22:18:67:8b:47:eb:ac:23:e7:65:60:34:e6:29:90: 70:2b:d0:f2:06:5f:28:79:4f:9d:b4:3a:49:22:61: df:4a:83:c2:35:68:a1:2f:73:04:fd:c6:28:48:eb: ee:fd:3b:0e:96:a1:30:b5:d7:be:e0:76:ca:65:3a: 90:39:d1:43:d4:6f:00:97:dd:08:a2:f6:78:4c:da: 89:87:67:b2:72:9b:34:1b:17:f4:7d:dd:b9:2e:70: a2:5a:f4:85:82:ca:d6:44:06:39:8a:e9:d9:20:3e: d2:7d:39:b5:ec:62:f4:ef:20:2d:65:7d:f0:53:35: 3d:25:ad:19:5f:15:2e:fb:f7:3b:c7:1e:bb:20:b3: 5f:5f:b4:70:6d:5c:d2:9e:b5:97:79:b2:a1:88:3e: 0d:a6:67:57:27:6a:ee:3f:9d:2b:11:20:a3:9b:ae: de:ca:80:f8:59:c8:cb:c2:30:17:0c:1e:34:39:2c: 28:f2:6d:a6:20:c6:a8:b8:84:79:7b:ac:e4:41:3c: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:24:0C:95:84:47:7C:4D:89:AC:3D:8E:46:7F:70:97:76:C5:26:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:33:66:fd:ef:f0:dc:d5:38:02:56:2d:67:9e:85:63:0e: ca:b0:8b:0b:e1:20:bd:0f:d3:f0:f1:ac:d8:24:c2:b5:4a:fa: d8:29:8c:e4:3f:a1:ad:f5:95:0c:6f:16:de:cb:c4:91:9a:09: dc:d2:e4:62:70:d9:87:f0:6f:8c:24:c0:d4:af:c9:58:42:61: 2c:a5:30:1e:eb:9a:90:23:5f:cb:d3:e8:ef:70:00:76:95:05: 24:05:f6:46:b7:e7:2b:30:f9:e2:21:d6:5c:09:37:74:1a:65: 4c:86:02:41:18:e0:92:64:22:88:3e:49:85:62:33:96:99:2b: 99:7e:59:11:4e:38:cb:da:1a:96:a2:30:ad:e7:56:c0:ab:f3: 78:69:c9:a8:74:0d:8a:37:1b:ff:96:6a:9f:e5:52:70:ba:95: bf:1f:ed:94:55:3a:62:59:a2:c4:49:38:0d:a0:4c:e9:a3:c1: bb:0b:57:8e:6a:e8:44:f5:79:d0:e2:ab:7c:0b:16:c9:62:cf: c3:05:a5:0d:d1:9f:89:15:71:26:e0:86:f5:84:01:86:97:57: 80:21:1b:cc:1a:51:25:3e:9a:a2:7b:78:7a:8d:0a:ca:1e:47: b3:dc:d3:d9:9e:fc:14:ee:37:26:44:2c:23:8f:80:ac:19:5f: e2:85:50:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgp7x9nPVTlG2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NDFjOWQ0ZGYtZmE5ZS00OWQzLWJhMGItOWM1ZTVlYTM1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplX5kMrbgV4CkcBHc8MwUUBla/gtHqd3wTiR syGTV25wMIO2mHFJyY0fpaadSESyBQFdKuQQy3KPle0iGGeLR+usI+dlYDTmKZBw K9DyBl8oeU+dtDpJImHfSoPCNWihL3ME/cYoSOvu/TsOlqEwtde+4HbKZTqQOdFD 1G8Al90IovZ4TNqJh2eycps0Gxf0fd25LnCiWvSFgsrWRAY5iunZID7SfTm17GL0 7yAtZX3wUzU9Ja0ZXxUu+/c7xx67ILNfX7RwbVzSnrWXebKhiD4NpmdXJ2ruP50r ESCjm67eyoD4WcjLwjAXDB40OSwo8m2mIMaouIR5e6zkQTxIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYkDJWER3xNiaw9jkZ/cJd2xSbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTdkZTdmYjYtNWYzNy0z YjI1LWEwOGItNzJjMWYzYWQ1NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/eM2b97/Dc1TgCVi1nnoVjDsqwiwvhIL0P0/DxrNgkwrVK+tgpjOQ/ oa31lQxvFt7LxJGaCdzS5GJw2Yfwb4wkwNSvyVhCYSylMB7rmpAjX8vT6O9wAHaV BSQF9ka35ysw+eIh1lwJN3QaZUyGAkEY4JJkIog+SYViM5aZK5l+WRFOOMvaGpai MK3nVsCr83hpyah0DYo3G/+Wap/lUnC6lb8f7ZRVOmJZosRJOA2gTOmjwbsLV45q 6ET1edDiq3wLFsliz8MFpQ3Rn4kVcSbghvWEAYaXV4AhG8waUSU+mqJ7eHqNCsoe R7Pc09me/BTuNyZELCOPgKwZX+KFUJY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:46 2025 by rpki-client