$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9308a515-35c0-35ef-be0f-c1994b825553.roa File: 9308a515-35c0-35ef-be0f-c1994b825553.roa (raw, json) Hash identifier: j3S42XCLnlxEqMq2J+a4r+tum8PVOD8bqezPj/mkOZA= Subject key identifier: 75:79:85:5F:70:DD:AF:3F:6D:22:AB:F0:A4:29:9B:C0:66:EF:C8:17 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210C600DD34339F4A53600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9308a515-35c0-35ef-be0f-c1994b825553.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397234 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0c:60:0d:d3:43:39:f4:a5:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=dc9074ab-fd8d-4e1f-9218-022bba246a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:d5:ec:ef:4a:f2:ea:5a:46:fc:b9:55:d7: 28:3c:6d:ed:bd:d7:4a:3b:9c:b2:7b:50:40:55:e9: 3c:fc:90:e8:0b:1e:1e:95:81:bc:a5:93:da:0f:ef: 61:b9:f8:45:14:b6:9c:6b:f1:19:fd:84:fb:2a:35: 27:d2:1a:81:07:5c:67:61:10:fc:e0:f3:49:aa:66: e3:84:59:ff:e9:d0:c5:b7:32:5e:88:23:0e:d1:69: 7a:9c:cd:9d:84:cf:6f:ed:d9:cb:38:23:5c:45:b6: 88:bc:08:58:ac:4b:9b:de:a6:99:a6:37:fd:a3:a9: 51:ae:79:e2:29:77:2d:f3:e7:95:b1:52:70:41:52: 9b:a9:5d:44:79:75:63:fa:d8:bb:d7:0b:76:d0:d2: 17:0b:f6:b9:8d:d5:ee:74:ab:10:17:bd:51:45:82: 60:a6:62:df:21:c6:6e:b4:95:8a:74:20:b1:39:a2: 8c:d0:bb:68:e6:ab:45:68:0c:50:8e:e4:b5:36:78: ef:41:3d:45:1c:01:a8:1d:de:cb:38:22:a7:8d:74: 24:52:8c:bb:1c:5a:ee:c5:10:a2:f6:90:0e:2a:96: 89:94:b8:43:ae:a0:cc:8e:10:28:96:48:2f:d6:d3: 8b:c5:ef:2a:ec:79:f4:94:e6:9c:54:ba:4f:e4:24: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:85:5F:70:DD:AF:3F:6D:22:AB:F0:A4:29:9B:C0:66:EF:C8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9308a515-35c0-35ef-be0f-c1994b825553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e5:6a:e3:18:10:c4:12:1a:31:57:8a:f7:ce:92:98:98:b0: a3:97:77:f0:1b:22:30:84:70:66:9d:ca:a6:36:9e:32:9b:52: d3:5f:4e:ba:e7:f3:fc:40:ed:60:51:0c:3b:2c:87:38:92:ff: c7:79:47:0a:0e:32:f1:a0:a2:6a:8d:6f:7b:06:bf:da:bc:88: 1a:5b:ba:08:9e:32:ae:42:c6:b9:72:ec:4f:1d:99:aa:49:85: ca:73:12:f9:3f:ba:c0:44:c3:84:ca:dc:8b:da:ea:b9:c0:06: 2d:7b:f5:2b:9c:c4:c3:17:83:cb:99:54:e3:83:8e:1d:eb:47: 85:1b:81:4a:23:de:ed:31:34:d5:0f:bc:ea:df:3f:a2:7d:0d: 56:50:3c:7e:ad:b4:85:52:f7:d8:c3:fc:ad:dc:6e:a6:54:0f: 28:f1:ba:ca:dd:e4:ba:b7:42:9a:a8:f1:c1:de:7c:d7:c2:3c: 1b:65:65:fd:2c:3a:05:37:0b:6e:16:a1:39:7c:16:41:4d:7a: 9c:93:ac:55:a8:80:f3:8f:2d:a9:7f:4f:4b:02:5e:ba:01:2c: 66:07:a3:fa:b9:19:04:0c:8e:6c:7b:84:72:b4:75:04:ab:b2: 12:bc:d7:47:39:76:84:d6:32:6b:f3:0f:62:bd:ac:29:ed:c5: cb:fc:7b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQxgDdNDOfSlNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZGM5MDc0YWItZmQ4ZC00ZTFmLTkyMTgtMDIyYmJhMjQ2YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYTV7O9K8upaRvy5VdcoPG3tvddKO5yye1BA Vek8/JDoCx4elYG8pZPaD+9hufhFFLaca/EZ/YT7KjUn0hqBB1xnYRD84PNJqmbj hFn/6dDFtzJeiCMO0Wl6nM2dhM9v7dnLOCNcRbaIvAhYrEub3qaZpjf9o6lRrnni KXct8+eVsVJwQVKbqV1EeXVj+ti71wt20NIXC/a5jdXudKsQF71RRYJgpmLfIcZu tJWKdCCxOaKM0Lto5qtFaAxQjuS1NnjvQT1FHAGoHd7LOCKnjXQkUoy7HFruxRCi 9pAOKpaJlLhDrqDMjhAolkgv1tOLxe8q7Hn0lOacVLpP5CSerQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV5hV9w3a8/bSKr8KQpm8Bm78gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTMwOGE1MTUtMzVjMC0z NWVmLWJlMGYtYzE5OTRiODI1NTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7lauMYEMQSGjFXivfOkpiYsKOXd/AbIjCEcGadyqY2njKbUtNfTrrn 8/xA7WBRDDsshziS/8d5RwoOMvGgomqNb3sGv9q8iBpbugieMq5Cxrly7E8dmapJ hcpzEvk/usBEw4TK3Iva6rnABi179SucxMMXg8uZVOODjh3rR4UbgUoj3u0xNNUP vOrfP6J9DVZQPH6ttIVS99jD/K3cbqZUDyjxusrd5Lq3Qpqo8cHefNfCPBtlZf0s OgU3C24WoTl8FkFNepyTrFWogPOPLal/T0sCXroBLGYHo/q5GQQMjmx7hHK0dQSr shK810c5doTWMmvzD2K9rCntxcv8e0s= -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:50 2025 by rpki-client