$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f60062d-6182-3386-b927-de9253bc2061.roa File: 7f60062d-6182-3386-b927-de9253bc2061.roa (raw, json) Hash identifier: T6+Zzt1PZ7nUjQHq2URPIRWeMYZCqnTpO1Y1Qm6etE4= Subject key identifier: D6:EC:C2:4D:FB:D4:C2:8A:C3:04:0A:B7:90:9F:29:15:73:9D:F1:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EABC6781AA2B87E78900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f60062d-6182-3386-b927-de9253bc2061.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397234 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ea:bc:67:81:aa:2b:87:e7:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7f279c49-0942-4b87-93cf-451493a705a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:eb:04:c4:5d:05:ab:44:74:f6:34:88:3e: e9:3e:a2:a4:8c:24:98:f2:13:26:88:18:1d:cd:80: 4e:d4:ab:d3:64:9e:1f:02:b1:02:94:ef:52:e5:f2: c6:c1:20:56:cf:f4:84:f5:b2:cc:e4:6c:9c:11:23: 18:95:22:5d:34:15:2c:a5:33:f2:c5:f6:f1:5e:b2: 88:4f:e6:c7:e5:8c:84:52:9f:11:e9:3c:0f:71:81: e7:25:6f:13:cc:23:bb:75:c4:02:0e:c5:d2:2e:96: 32:37:c8:d5:fb:8c:c7:88:0b:75:44:f9:6b:28:de: 31:09:37:de:6b:a7:44:ef:e9:20:19:df:c9:bd:ca: d1:c1:a6:7d:0b:e2:29:e6:e4:75:d2:31:b3:51:b1: 57:c5:9e:49:71:59:03:cf:87:90:01:8b:1f:db:a2: c9:dd:6a:38:ed:2d:c0:8c:d7:9d:2f:a1:63:43:2e: ef:bb:42:fc:0d:1f:50:e8:31:bd:bc:1a:37:ca:24: af:c6:c7:45:d7:1d:de:c3:e7:f0:dd:0f:0b:bd:f0: 65:c8:c5:4b:fc:27:59:5a:94:4c:9b:78:30:10:d7: db:47:14:e4:ae:b3:4e:f8:17:af:c3:de:b7:22:25: e3:b1:9d:25:05:ae:00:91:4d:8b:47:56:7e:49:9f: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:C2:4D:FB:D4:C2:8A:C3:04:0A:B7:90:9F:29:15:73:9D:F1:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f60062d-6182-3386-b927-de9253bc2061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:20:4f:6c:21:b4:02:ba:77:35:41:bc:71:5a:bc:51:e3:c1: 28:ef:50:a2:e3:b1:19:64:d9:d5:5f:9f:12:83:35:b4:9b:6c: 46:1d:36:08:9d:49:cc:71:3c:10:06:d1:6a:c6:42:f4:8c:3d: e1:fb:9d:51:22:e4:dd:04:87:5d:7e:7a:75:70:00:dd:02:71: 57:49:7a:b5:02:54:8a:6a:7b:66:3d:84:ea:67:66:46:e2:a3: 20:a6:dc:9c:55:72:2f:12:5e:c9:20:2f:77:f2:85:04:1c:b9: 9a:0b:cf:c9:f5:1f:e5:f5:ac:11:7b:cf:7c:09:58:9e:93:5e: e6:40:fc:b3:a4:f5:be:88:9f:33:2c:74:0b:c2:85:71:54:54: 00:8b:e5:fe:49:f9:21:92:15:ba:38:fb:f4:2f:87:49:42:bb: db:49:f9:40:4a:0b:05:9d:52:5a:5f:06:12:64:8e:65:c9:41: 0b:af:27:fb:33:98:49:a5:a2:64:52:ad:43:1a:87:b9:8a:88: fb:03:0c:be:94:a6:45:b2:f4:7f:7f:fd:9b:dc:1f:e2:34:ca: ed:7a:6f:98:01:f4:f0:79:33:14:c1:e2:09:8f:b3:52:c6:d7: 71:66:81:e9:5f:73:57:28:93:e5:cd:47:7b:d7:97:fd:54:0c: ef:0a:0a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuq8Z4GqK4fniQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2YyNzljNDktMDk0Mi00Yjg3LTkzY2YtNDUxNDkzYTcwNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8zrBMRdBatEdPY0iD7pPqKkjCSY8hMmiBgd zYBO1KvTZJ4fArEClO9S5fLGwSBWz/SE9bLM5GycESMYlSJdNBUspTPyxfbxXrKI T+bH5YyEUp8R6TwPcYHnJW8TzCO7dcQCDsXSLpYyN8jV+4zHiAt1RPlrKN4xCTfe a6dE7+kgGd/JvcrRwaZ9C+Ip5uR10jGzUbFXxZ5JcVkDz4eQAYsf26LJ3Wo47S3A jNedL6FjQy7vu0L8DR9Q6DG9vBo3yiSvxsdF1x3ew+fw3Q8LvfBlyMVL/CdZWpRM m3gwENfbRxTkrrNO+Bevw963IiXjsZ0lBa4AkU2LR1Z+SZ+nbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbswk371MKKwwQKt5CfKRVznfEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2Y2MDA2MmQtNjE4Mi0z Mzg2LWI5MjctZGU5MjUzYmMyMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsgT2whtAK6dzVBvHFavFHjwSjvUKLjsRlk2dVfnxKDNbSbbEYdNgid ScxxPBAG0WrGQvSMPeH7nVEi5N0Eh11+enVwAN0CcVdJerUCVIpqe2Y9hOpnZkbi oyCm3JxVci8SXskgL3fyhQQcuZoLz8n1H+X1rBF7z3wJWJ6TXuZA/LOk9b6InzMs dAvChXFUVACL5f5J+SGSFbo4+/Qvh0lCu9tJ+UBKCwWdUlpfBhJkjmXJQQuvJ/sz mEmlomRSrUMah7mKiPsDDL6UpkWy9H9//ZvcH+I0yu16b5gB9PB5MxTB4gmPs1LG 13Fmgelfc1cok+XNR3vXl/1UDO8KCj4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:29:15 2025 by rpki-client