$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa File: 8a0e1bff-f033-3495-a807-25f1c3db0753.roa (raw, json) Hash identifier: j0ZCWOOxOhD5Xz9r31+PdovjYndmcBa8EhTW/VccC6w= Subject key identifier: 02:12:0F:97:CD:BB:A9:0F:53:7F:CE:F3:31:C7:FA:6F:6D:28:E4:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965DB330DB376C8E106380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397214 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5d:b3:30:db:37:6c:8e:10:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3504961c-f605-43bc-80a8-85c508529d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:ae:e1:c9:98:d0:52:30:20:6b:13:d1:30: 00:98:1a:72:32:03:9f:59:7f:86:d7:ca:0c:8b:c4: 28:bd:3f:23:74:02:29:1f:ff:d9:ec:02:71:cc:90: db:a5:d8:e0:7f:30:dd:7f:fd:60:e8:cc:36:f8:6a: 16:c9:5a:ea:d2:c1:1b:0d:16:92:51:c2:22:e8:be: b9:09:b2:2c:12:d0:f9:2c:70:80:c1:e4:86:64:0e: 69:12:bf:76:13:54:10:86:74:15:09:bd:b9:92:77: ca:c5:93:ec:68:41:65:11:7d:58:3c:fb:12:2d:df: 30:2e:f3:3e:28:c7:1b:95:2a:12:28:bc:50:8b:28: 0d:87:fd:35:49:e6:ee:98:a8:d3:f1:c0:96:21:c8: 1e:84:81:12:ef:fb:49:11:7a:2a:d3:9a:61:c9:52: 6b:ad:da:4f:cf:b3:e9:e2:45:12:55:b5:90:15:fe: 1d:ed:9d:d9:db:6d:87:8e:3f:70:8d:a8:fe:44:85: 46:59:c8:ea:ea:b1:97:40:3b:84:86:0c:f8:57:2c: cf:85:92:b8:04:39:43:7a:23:1b:5a:19:d2:42:b7: 59:3c:28:26:ce:20:35:36:f2:d5:12:dc:6f:a2:30: f9:d2:57:3b:1d:e7:3b:62:1f:df:a5:c6:0a:c9:4a: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:0F:97:CD:BB:A9:0F:53:7F:CE:F3:31:C7:FA:6F:6D:28:E4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d8:e1:c6:85:59:b9:ae:0d:7d:8d:56:00:71:ee:78:30:b7: 25:2a:48:6d:dd:44:f1:a4:e1:24:ea:db:5d:42:39:0c:72:d4: 08:50:fa:6e:81:be:49:50:03:05:80:b4:dc:27:a2:1c:c4:66: 81:4b:f4:3a:4f:ed:7e:78:15:e3:4e:10:da:3f:8b:ec:d6:28: c5:75:a7:9a:73:3f:ed:f0:53:3f:f1:26:47:31:3f:9b:a6:95: a6:3c:cb:d7:34:97:64:d1:4e:91:39:32:6f:86:cc:b9:2a:c1: 65:d0:c5:a5:45:71:65:cf:ed:4d:f1:aa:e9:4e:68:a7:d0:f4: 86:6d:d4:17:98:21:28:72:6d:29:9f:c4:7c:3d:f6:91:9f:f4: 0c:57:37:63:0a:7b:c8:41:6c:69:a4:0f:03:d3:a5:ee:13:c8: 73:80:25:1b:21:c5:e3:f4:4a:be:c8:5d:91:05:31:ed:ad:ba: f2:85:ae:0b:7e:e2:4c:2f:b6:22:60:bd:36:94:16:fb:7a:ad: 90:b9:25:22:82:17:01:60:15:1f:d0:c3:50:78:88:fe:2f:8e: 36:64:63:9d:cb:51:f6:93:d4:a6:72:80:de:6e:d9:9e:18:10: f3:d9:a1:01:74:1a:30:fc:1f:62:5c:f3:93:9b:b7:88:2d:62: 53:b0:ef:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll2zMNs3bI4QY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzUwNDk2MWMtZjYwNS00M2JjLTgwYTgtODVjNTA4NTI5ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWu4cmY0FIwIGsT0TAAmBpyMgOfWX+G18oM i8QovT8jdAIpH//Z7AJxzJDbpdjgfzDdf/1g6Mw2+GoWyVrq0sEbDRaSUcIi6L65 CbIsEtD5LHCAweSGZA5pEr92E1QQhnQVCb25knfKxZPsaEFlEX1YPPsSLd8wLvM+ KMcblSoSKLxQiygNh/01SebumKjT8cCWIcgehIES7/tJEXoq05phyVJrrdpPz7Pp 4kUSVbWQFf4d7Z3Z222Hjj9wjaj+RIVGWcjq6rGXQDuEhgz4VyzPhZK4BDlDeiMb WhnSQrdZPCgmziA1NvLVEtxvojD50lc7Hec7Yh/fpcYKyUrxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAISD5fNu6kPU3/O8zHH+m9tKOQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGEwZTFiZmYtZjAzMy0z NDk1LWE4MDctMjVmMWMzZGIwNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLY4caFWbmuDX2NVgBx7ngwtyUqSG3dRPGk4STq211COQxy1AhQ+m6B vklQAwWAtNwnohzEZoFL9DpP7X54FeNOENo/i+zWKMV1p5pzP+3wUz/xJkcxP5um laY8y9c0l2TRTpE5Mm+GzLkqwWXQxaVFcWXP7U3xqulOaKfQ9IZt1BeYIShybSmf xHw99pGf9AxXN2MKe8hBbGmkDwPTpe4TyHOAJRshxeP0Sr7IXZEFMe2tuvKFrgt+ 4kwvtiJgvTaUFvt6rZC5JSKCFwFgFR/Qw1B4iP4vjjZkY53LUfaT1KZygN5u2Z4Y EPPZoQF0GjD8H2Jc85Obt4gtYlOw78M= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:45 2025 by rpki-client