$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ced80ad-7f98-36c8-8e4a-1ea187d208c0.roa File: 7ced80ad-7f98-36c8-8e4a-1ea187d208c0.roa (raw, json) Hash identifier: L5pdbpclb9J9oF5dCEdoEhPi+SyPcyAiDn6E0FCNoLE= Subject key identifier: F2:1C:71:87:2E:4F:4B:E3:B1:77:CB:FF:11:7B:04:1E:2D:D7:44:5E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963DEC64AB0CEE059399A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ced80ad-7f98-36c8-8e4a-1ea187d208c0.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397223 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3d:ec:64:ab:0c:ee:05:93:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=284770d2-edf1-4d1e-8060-e52dbd29893b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:6e:c5:66:78:ad:48:d5:3c:ed:f7:4e:04: fa:8a:2f:0c:64:45:01:ba:88:1d:bd:16:fb:13:da: fa:59:27:8b:39:7a:ca:8d:b2:f8:79:c1:94:b2:73: fc:ae:3c:64:0e:9d:9d:b9:b9:8f:68:16:9b:00:4a: 65:00:52:12:a2:f1:33:aa:61:60:68:18:bd:9e:9e: 53:28:69:ee:92:05:1b:80:d7:fa:e6:81:78:c1:d0: 84:20:df:5d:be:5d:9f:6d:04:31:d1:8c:0d:a4:af: 3e:6e:4c:1c:69:5c:de:57:28:c7:95:5c:12:70:02: 7e:8b:54:c0:22:1c:a9:01:44:08:61:82:be:2a:b9: fb:4d:f7:45:05:bb:76:fd:a7:e4:fe:25:63:34:b1: 73:16:24:56:ac:bc:c4:be:46:03:77:2c:9a:3c:1a: ce:2f:16:e1:2a:92:34:be:39:fa:5b:6d:86:8d:92: ba:c6:36:b4:7c:4e:d4:ca:8e:36:69:7a:33:e1:3d: c1:eb:6f:9c:21:10:8a:4c:9a:0b:d5:80:c6:9c:87: 24:25:77:65:52:8c:3d:d5:5f:46:2b:c9:3b:c8:11: 74:da:18:74:b5:0e:e6:b2:da:09:82:bb:13:d8:98: 1b:a9:36:c7:18:05:6c:d3:5c:6e:88:47:93:c2:23: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1C:71:87:2E:4F:4B:E3:B1:77:CB:FF:11:7B:04:1E:2D:D7:44:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ced80ad-7f98-36c8-8e4a-1ea187d208c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:de:62:a3:cc:93:b2:66:9d:fe:93:43:e9:7b:20:6b:47:f4: e4:8d:c0:9d:66:f9:25:ae:8a:a1:50:d6:ff:ec:7b:32:ff:60: a9:d9:96:a6:41:a6:8a:6d:8b:1e:e1:6d:1a:ef:8f:79:69:d2: 83:7d:ff:8f:87:3e:d1:90:ad:e9:9c:7b:07:1f:7b:02:54:51: e9:64:51:0e:53:be:18:3b:17:94:44:60:41:c0:ec:07:75:e5: b3:cf:51:03:f7:5b:39:c2:bb:a0:d7:95:e3:de:f0:cd:7d:c4: 25:db:f9:f8:db:6c:5e:da:83:0c:a2:ad:07:8a:33:4f:aa:f3: 94:79:30:2e:bf:f4:b0:e2:a9:c1:08:1b:fa:93:9a:0f:f2:cc: 2e:3b:ac:e3:d6:1d:70:d0:e4:56:ef:51:49:bb:52:77:58:bc: 24:82:58:16:ef:f2:2e:07:03:51:f9:24:fb:72:c1:5f:e4:f0: 5f:3a:88:c4:e8:98:84:b7:b0:86:ea:b0:f2:1d:a1:51:74:cc: 84:9b:4b:17:fb:69:3b:9b:1f:2a:7e:5d:5f:29:af:1d:b4:60: 29:31:30:6c:03:57:5d:96:c1:64:3c:3d:d2:16:2c:2b:51:8b: 0f:9d:d9:d1:7f:26:87:05:e4:cc:52:be:2a:aa:2b:e2:43:2c: a8:82:b1:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj3sZKsM7gWTmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjg0NzcwZDItZWRmMS00ZDFlLTgwNjAtZTUyZGJkMjk4OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAietuxWZ4rUjVPO33TgT6ii8MZEUBuogdvRb7 E9r6WSeLOXrKjbL4ecGUsnP8rjxkDp2dubmPaBabAEplAFISovEzqmFgaBi9np5T KGnukgUbgNf65oF4wdCEIN9dvl2fbQQx0YwNpK8+bkwcaVzeVyjHlVwScAJ+i1TA IhypAUQIYYK+Krn7TfdFBbt2/afk/iVjNLFzFiRWrLzEvkYDdyyaPBrOLxbhKpI0 vjn6W22GjZK6xja0fE7Uyo42aXoz4T3B62+cIRCKTJoL1YDGnIckJXdlUow91V9G K8k7yBF02hh0tQ7mstoJgrsT2JgbqTbHGAVs01xuiEeTwiOF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIccYcuT0vjsXfL/xF7BB4t10ReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NlZDgwYWQtN2Y5OC0z NmM4LThlNGEtMWVhMTg3ZDIwOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbeYqPMk7Jmnf6TQ+l7IGtH9OSNwJ1m+SWuiqFQ1v/sezL/YKnZlqZB poptix7hbRrvj3lp0oN9/4+HPtGQremcewcfewJUUelkUQ5Tvhg7F5REYEHA7Ad1 5bPPUQP3WznCu6DXlePe8M19xCXb+fjbbF7agwyirQeKM0+q85R5MC6/9LDiqcEI G/qTmg/yzC47rOPWHXDQ5FbvUUm7UndYvCSCWBbv8i4HA1H5JPtywV/k8F86iMTo mIS3sIbqsPIdoVF0zISbSxf7aTubHyp+XV8prx20YCkxMGwDV12WwWQ8PdIWLCtR iw+d2dF/JocF5MxSviqqK+JDLKiCsSk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:53 2025 by rpki-client