$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa File: 8852dbaf-fd17-380a-a383-c40b65220c0d.roa (raw, json) Hash identifier: OUR4FGmDA0YrefrOaB0O5/G2m/YbLtkAk6FKn5XPlyE= Subject key identifier: 05:85:72:B1:B4:39:4A:B1:4F:7F:31:79:BB:DD:7C:33:DE:99:87:8C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2105BD9BAC8C437D046360 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397217 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:05:bd:9b:ac:8c:43:7d:04:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=817a2fce-bf4a-4036-9373-ce4cec622d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:de:90:44:1d:94:21:b9:37:74:f0:9c:60: 31:a6:df:75:f6:66:18:73:1e:70:e7:dc:31:c5:f1: 15:f4:51:10:16:dd:e8:ea:74:fb:7d:f0:73:ae:91: 8c:0c:80:b2:04:0b:9d:24:4e:f7:b4:cf:bb:b7:7b: 8f:86:c6:1b:b5:e7:48:d5:40:0b:2d:43:09:58:db: b9:d0:d1:51:93:0f:c8:c7:e2:e6:95:a1:fc:a4:88: a1:72:52:a9:3a:92:10:26:cc:4f:58:39:c7:6a:29: ff:2d:18:c5:ca:36:73:0c:64:91:bd:b7:67:23:48: 4c:55:3d:56:0b:f7:d1:13:84:6f:2f:62:80:eb:b9: ad:6b:d8:ef:7d:ab:b9:57:00:78:75:b3:60:06:50: 14:4a:87:4a:56:88:19:ae:47:22:83:f7:b0:9a:c5: ed:ae:b2:01:17:58:70:80:97:7d:d4:9b:ec:db:3c: e8:9d:97:c7:e5:d6:b7:64:0c:90:49:04:a2:cf:c5: 54:f4:17:60:15:63:de:aa:74:55:45:7b:ca:45:46: 00:a6:02:2d:9d:b4:e7:90:97:50:94:2f:06:8d:60: de:70:4e:85:29:90:58:eb:9e:c3:c1:7f:eb:4f:70: 50:a6:33:0a:82:48:2e:15:c7:5c:e8:5b:75:01:dc: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:85:72:B1:B4:39:4A:B1:4F:7F:31:79:BB:DD:7C:33:DE:99:87:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8852dbaf-fd17-380a-a383-c40b65220c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d0:8d:bc:7b:8e:e7:2f:b8:ba:8e:22:ec:a1:3a:9a:f7:4e: d2:83:89:5a:d9:ac:98:c4:0b:14:b8:83:d4:42:91:34:d8:1e: fd:38:5f:7a:ed:47:01:18:f9:7c:92:1e:05:ac:c1:d3:a0:1b: 0c:10:8d:fd:e6:34:42:6b:b9:42:5d:9c:ce:5e:d6:dd:a6:72: b7:32:d2:c7:c6:5a:93:f6:4a:9f:e1:9b:7a:48:cf:94:17:75: 9e:89:75:76:dd:f5:03:2c:ce:58:1f:8c:02:f4:8a:89:49:ca: 17:d1:1e:cb:25:7e:12:fe:43:2e:ab:c6:8f:6d:5e:9b:c0:74: c0:44:58:03:22:05:67:cb:24:37:22:45:29:67:6e:94:f9:fb: f5:c9:6f:a2:2c:a4:43:a0:ca:9c:9d:59:d1:fd:a7:58:6b:5d: 38:a3:e6:78:11:53:70:4f:b6:cb:a9:8e:c4:23:b3:42:86:de: e8:21:93:94:46:dc:df:0e:5f:60:78:5a:37:69:2e:fc:71:dd: 9b:dd:23:2b:ba:7f:07:0e:96:61:14:1e:a4:b3:ab:85:ff:1c: f0:97:f5:5d:7f:57:f0:49:2e:a0:1a:ce:e4:13:6e:54:44:93: 1e:e0:fd:d5:16:49:3e:a7:31:47:27:86:ab:a3:3b:46:75:99: 51:4f:dc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQW9m6yMQ30EY2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ODE3YTJmY2UtYmY0YS00MDM2LTkzNzMtY2U0Y2VjNjIyZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT3ekEQdlCG5N3TwnGAxpt919mYYcx5w59wx xfEV9FEQFt3o6nT7ffBzrpGMDICyBAudJE73tM+7t3uPhsYbtedI1UALLUMJWNu5 0NFRkw/Ix+LmlaH8pIihclKpOpIQJsxPWDnHain/LRjFyjZzDGSRvbdnI0hMVT1W C/fRE4RvL2KA67mta9jvfau5VwB4dbNgBlAUSodKVogZrkcig/ewmsXtrrIBF1hw gJd91Jvs2zzonZfH5da3ZAyQSQSiz8VU9BdgFWPeqnRVRXvKRUYApgItnbTnkJdQ lC8GjWDecE6FKZBY657DwX/rT3BQpjMKgkguFcdc6Ft1AdyAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWFcrG0OUqxT38xebvdfDPemYeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODg1MmRiYWYtZmQxNy0z ODBhLWEzODMtYzQwYjY1MjIwYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnQjbx7jucvuLqOIuyhOpr3TtKDiVrZrJjECxS4g9RCkTTYHv04X3rt RwEY+XySHgWswdOgGwwQjf3mNEJruUJdnM5e1t2mcrcy0sfGWpP2Sp/hm3pIz5QX dZ6JdXbd9QMszlgfjAL0iolJyhfRHsslfhL+Qy6rxo9tXpvAdMBEWAMiBWfLJDci RSlnbpT5+/XJb6IspEOgypydWdH9p1hrXTij5ngRU3BPtsupjsQjs0KG3ughk5RG 3N8OX2B4WjdpLvxx3ZvdIyu6fwcOlmEUHqSzq4X/HPCX9V1/V/BJLqAazuQTblRE kx7g/dUWST6nMUcnhqujO0Z1mVFP3D0= -----END CERTIFICATE-----Generated at Sun Apr 6 19:10:40 2025 by rpki-client