$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70cd1032-e2df-3d4e-9f8e-543b3a9bb332.roa File: 70cd1032-e2df-3d4e-9f8e-543b3a9bb332.roa (raw, json) Hash identifier: 2iinrywMylkgqI6wWKf3hSgmO5z7lkE2aDdRVMg5/po= Subject key identifier: 8F:93:4C:52:0F:29:CE:FD:A2:79:F0:86:7C:0B:CC:20:21:31:56:95 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD21042D88E8BC21F5E8E9C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70cd1032-e2df-3d4e-9f8e-543b3a9bb332.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397221 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:04:2d:88:e8:bc:21:f5:e8:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=a88b9844-a488-4e64-a47e-17287b14f376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:72:7c:0d:e1:d6:8b:d0:c2:0c:2e:e5:df: 08:64:93:7b:94:b4:90:e0:c6:2d:3e:32:0f:f6:fa: d7:f6:f0:49:b6:b5:2b:dc:34:d3:9c:19:b7:ac:c2: 4f:36:eb:11:89:dd:93:28:18:0c:28:d3:f8:1a:fa: be:dc:01:98:44:7c:c0:22:53:99:81:a4:dd:63:d4: 39:25:5b:d6:83:22:37:c3:be:99:23:59:85:cc:41: d7:a6:19:35:b5:77:f5:0c:d5:49:98:e0:92:ef:2f: eb:49:45:ac:f9:b8:5d:32:75:12:a0:51:a2:a1:23: 96:01:57:7c:3f:8d:83:3a:79:d8:8b:b7:de:c5:c4: 07:a0:6b:91:d1:11:4f:9c:5b:1a:3b:87:0c:79:ea: 33:5c:40:2c:e0:f0:fd:01:af:2e:99:eb:d8:54:d9: 3b:e6:b0:51:c5:f1:6c:8d:34:2c:18:5b:84:4a:cc: 25:d5:5a:da:8f:f5:b5:7b:4c:aa:8b:d4:6b:bf:de: 6b:41:ab:21:2d:09:7b:7b:59:6e:75:d0:d6:8e:0f: 9e:81:57:73:89:48:52:e4:b5:f2:13:b4:d0:8d:8a: ea:e3:f2:ee:87:f8:62:26:68:58:16:32:68:2e:e8: 6e:f8:a3:9e:2b:89:aa:9b:4f:87:b3:e5:0f:ad:ae: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:93:4C:52:0F:29:CE:FD:A2:79:F0:86:7C:0B:CC:20:21:31:56:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70cd1032-e2df-3d4e-9f8e-543b3a9bb332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:91:38:a4:21:6f:99:bd:45:f9:f4:ca:1c:91:2d:fb:64:55: 04:37:c5:46:b1:1b:87:72:92:e8:db:3b:04:12:52:6f:96:af: 26:ef:50:5e:3d:a4:8e:30:44:4a:8f:75:64:6a:3e:8c:19:29: 0f:8f:e2:1d:9c:1f:25:26:0a:8c:ea:4b:25:5f:34:b3:d5:8a: 1e:b1:1b:d2:1e:f7:28:7e:5e:36:e7:c5:8a:31:78:20:37:31: 61:08:37:ee:ae:74:5d:a2:8b:37:c7:16:f0:ad:ac:ff:4d:98: 78:98:b4:ad:1d:83:c4:81:ed:d8:cd:d2:c0:f3:58:6e:50:4b: bc:d2:10:cc:65:21:1c:50:59:8d:95:11:64:8a:47:40:32:b7: 48:6f:70:ae:e9:c6:38:33:9f:2a:5b:85:3b:b3:b8:53:68:96: 87:84:76:4b:dd:61:aa:88:89:74:ed:bf:0c:e1:96:e6:ce:8d: 60:4b:74:d9:33:10:5f:46:17:5e:b7:f8:5a:f5:a9:f9:44:5c: 51:62:19:cc:09:53:e4:24:4a:8c:90:98:59:e5:24:e4:f0:86: ff:c5:cc:92:cc:c8:d8:9c:11:47:50:0c:8d:cf:20:80:71:38: 3d:76:d3:21:c9:b6:b9:f0:cc:5b:23:69:e7:62:14:69:10:de: 5d:62:05:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQQtiOi8IfXo6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YTg4Yjk4NDQtYTQ4OC00ZTY0LWE0N2UtMTcyODdiMTRmMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApplyfA3h1ovQwgwu5d8IZJN7lLSQ4MYtPjIP 9vrX9vBJtrUr3DTTnBm3rMJPNusRid2TKBgMKNP4Gvq+3AGYRHzAIlOZgaTdY9Q5 JVvWgyI3w76ZI1mFzEHXphk1tXf1DNVJmOCS7y/rSUWs+bhdMnUSoFGioSOWAVd8 P42DOnnYi7fexcQHoGuR0RFPnFsaO4cMeeozXEAs4PD9Aa8umevYVNk75rBRxfFs jTQsGFuESswl1Vraj/W1e0yqi9Rrv95rQashLQl7e1luddDWjg+egVdziUhS5LXy E7TQjYrq4/Luh/hiJmhYFjJoLuhu+KOeK4mqm0+Hs+UPra6T9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+TTFIPKc79onnwhnwLzCAhMVaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzBjZDEwMzItZTJkZi0z ZDRlLTlmOGUtNTQzYjNhOWJiMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmROKQhb5m9Rfn0yhyRLftkVQQ3xUaxG4dykujbOwQSUm+WrybvUF49 pI4wREqPdWRqPowZKQ+P4h2cHyUmCozqSyVfNLPVih6xG9Ie9yh+XjbnxYoxeCA3 MWEIN+6udF2iizfHFvCtrP9NmHiYtK0dg8SB7djN0sDzWG5QS7zSEMxlIRxQWY2V EWSKR0Ayt0hvcK7pxjgznypbhTuzuFNoloeEdkvdYaqIiXTtvwzhlubOjWBLdNkz EF9GF163+Fr1qflEXFFiGcwJU+QkSoyQmFnlJOTwhv/FzJLMyNicEUdQDI3PIIBx OD120yHJtrnwzFsjaediFGkQ3l1iBcY= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:31 2025 by rpki-client