$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c5b8977-387a-3c67-a911-3895d16b1e1d.roa File: 5c5b8977-387a-3c67-a911-3895d16b1e1d.roa (raw, json) Hash identifier: Y4LreivuDrIss/DomoXEo+nCHmjC/tLPjgUlfeF0zxo= Subject key identifier: 11:F2:48:04:61:53:A5:EA:AA:CC:E1:1A:45:D0:AF:2E:DD:1D:D4:AC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965A23585C4EBE68833D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c5b8977-387a-3c67-a911-3895d16b1e1d.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397239 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5a:23:58:5c:4e:be:68:83:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=a5a82cbd-ad4f-42d7-b31a-54f3cab54300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:21:35:95:29:b2:7f:f9:83:98:0d:e2:bc:0f: dc:22:c2:a3:77:e6:22:4d:f2:6d:50:85:27:f8:60: 80:58:34:89:a6:32:85:eb:8b:93:59:d1:43:7e:ad: 73:41:a8:b5:28:b1:0e:02:74:28:44:3b:ba:c3:be: 12:b0:f9:29:0e:45:e9:20:62:d5:d2:69:9c:26:23: 64:82:76:90:bd:07:42:f3:5c:a2:da:0d:97:a5:e2: bc:8e:d5:bb:5a:0d:ef:be:d4:ab:ab:66:f3:c0:ed: f4:53:bb:2a:2f:a1:8f:26:93:72:96:f6:d3:b5:df: 2b:d5:00:30:c1:e0:30:5d:88:74:06:63:a1:26:fa: 4c:3d:5d:98:f9:12:f8:fe:1d:46:1a:06:85:f9:81: c7:b4:3e:f2:fa:5c:7b:e6:f7:e9:7c:ac:52:0f:9e: a9:8a:c6:bd:c2:c8:b2:08:4c:98:d9:30:a4:1b:93: 59:65:61:35:fc:7b:01:f2:6e:96:72:24:cf:b5:17: 2a:70:f0:18:d3:2a:dd:e0:7f:0a:7c:57:f4:e3:c9: 14:25:2f:7f:88:ea:44:68:d1:47:e5:97:d0:fe:b2: 53:25:4b:45:d1:d5:38:cb:7a:0e:72:1e:d5:30:45: d3:e6:26:92:c7:07:14:51:dd:0b:55:9d:ff:50:60: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F2:48:04:61:53:A5:EA:AA:CC:E1:1A:45:D0:AF:2E:DD:1D:D4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5c5b8977-387a-3c67-a911-3895d16b1e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8d:d6:51:3c:74:fe:fe:8a:11:02:0f:89:01:8e:72:37:ff: 44:92:b5:b2:3d:4b:63:c2:f8:5b:cc:0e:b1:2f:7c:be:6b:e4: 0d:60:51:34:2b:7a:3d:de:8e:f3:33:bf:1a:04:76:19:87:52: 48:ad:c4:50:2c:e4:a8:b7:67:3f:89:bc:34:b7:d9:26:f0:4b: d2:ee:61:87:15:87:8e:9e:e1:df:55:aa:e2:5a:64:d0:ec:a6: 07:3b:64:78:28:33:69:33:c3:17:2d:cc:b8:26:d6:9a:77:d3: 2b:99:32:aa:ef:14:0d:48:eb:03:cd:2b:fe:ef:13:31:39:1c: c3:c2:ff:58:a0:a4:0e:e7:79:2e:e3:48:d2:2c:89:29:78:38: 81:65:90:7d:bd:55:ff:f9:8e:34:b5:04:62:79:75:20:81:26: d4:27:25:f7:aa:4d:a5:66:ed:ea:ec:2e:0e:25:02:d9:59:d7: 45:20:00:8b:5b:11:ca:05:2b:6a:bc:e2:69:b4:f6:29:38:4f: ff:35:c9:4d:20:ea:72:3b:d4:7c:c6:f7:f6:df:9d:e3:4a:39: a7:ab:09:72:54:f7:b5:23:16:29:d6:ec:da:4b:eb:6f:2e:d9: 02:76:62:65:a3:79:ad:57:24:93:23:12:19:e6:38:06:7d:24: c4:c9:e6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllojWFxOvmiDPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTVhODJjYmQtYWQ0Zi00MmQ3LWIzMWEtNTRmM2NhYjU0MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CE1lSmyf/mDmA3ivA/cIsKjd+YiTfJtUIUn +GCAWDSJpjKF64uTWdFDfq1zQai1KLEOAnQoRDu6w74SsPkpDkXpIGLV0mmcJiNk gnaQvQdC81yi2g2XpeK8jtW7Wg3vvtSrq2bzwO30U7sqL6GPJpNylvbTtd8r1QAw weAwXYh0BmOhJvpMPV2Y+RL4/h1GGgaF+YHHtD7y+lx75vfpfKxSD56pisa9wsiy CEyY2TCkG5NZZWE1/HsB8m6WciTPtRcqcPAY0yrd4H8KfFf048kUJS9/iOpEaNFH 5ZfQ/rJTJUtF0dU4y3oOch7VMEXT5iaSxwcUUd0LVZ3/UGCBXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHySARhU6XqqszhGkXQry7dHdSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWM1Yjg5NzctMzg3YS0z YzY3LWE5MTEtMzg5NWQxNmIxZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmN1lE8dP7+ihECD4kBjnI3/0SStbI9S2PC+FvMDrEvfL5r5A1gUTQr ej3ejvMzvxoEdhmHUkitxFAs5Ki3Zz+JvDS32SbwS9LuYYcVh46e4d9VquJaZNDs pgc7ZHgoM2kzwxctzLgm1pp30yuZMqrvFA1I6wPNK/7vEzE5HMPC/1igpA7neS7j SNIsiSl4OIFlkH29Vf/5jjS1BGJ5dSCBJtQnJfeqTaVm7ersLg4lAtlZ10UgAItb EcoFK2q84mm09ik4T/81yU0g6nI71HzG9/bfneNKOaerCXJU97UjFinW7NpL628u 2QJ2YmWjea1XJJMjEhnmOAZ9JMTJ5tk= -----END CERTIFICATE-----Generated at Sun Apr 6 09:45:10 2025 by rpki-client