$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa File: 939a6336-aae9-3493-918b-a3783c63d4c0.roa (raw, json) Hash identifier: GlsxHIG0LG89aNXjYn0UIl69fU2Ud+3EP0vzXrrgmUQ= Subject key identifier: 03:69:0A:EB:29:CA:50:CC:15:0D:17:3A:00:2D:9D:40:A4:C2:BE:1E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965B8BDF6813E44B684300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397234 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5b:8b:df:68:13:e4:4b:68:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=acea2093-2748-413f-9111-adfad7888a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:1d:2b:b6:66:17:d3:9a:66:14:bf:91:99: bc:eb:f7:42:c0:81:cf:7a:83:f2:30:d5:73:ad:71: 11:e3:3c:d0:bc:10:a2:42:c2:e9:71:28:f3:bb:d0: d9:ed:7d:22:31:73:ac:5f:d5:87:f1:f5:84:fb:52: 2c:49:73:a6:39:87:98:ea:a3:a0:87:47:86:70:1d: 41:8a:84:38:65:b2:6c:2c:f8:40:e0:43:50:b9:53: e4:19:eb:5a:7f:65:d2:d1:bd:bf:27:6d:c0:63:54: 15:8c:ec:0e:e3:7f:44:bf:fc:f4:ac:88:08:32:50: d7:5f:0e:a6:35:93:f2:4d:7f:c4:ee:7e:a2:92:15: 59:af:40:75:4b:c4:53:72:bb:f9:26:f0:52:7c:8c: 00:4e:a2:4b:32:26:22:92:ff:45:3b:02:48:65:e9: af:b6:b7:76:3d:c8:8a:7b:a9:ae:35:c4:23:eb:43: bf:4f:8d:50:0f:9e:f5:5c:83:1e:8d:6b:3e:f9:04: 91:41:cc:87:c7:6c:96:5f:c4:6a:2f:b3:79:18:a4: 73:f9:26:13:0d:ed:c1:47:90:81:a1:73:78:8b:ed: 7f:9e:87:d3:29:f0:6e:e7:f4:8e:ad:02:55:f3:6f: a6:4a:51:5c:07:ac:29:62:04:a5:3a:a9:f5:b1:6d: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:69:0A:EB:29:CA:50:CC:15:0D:17:3A:00:2D:9D:40:A4:C2:BE:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9d:ca:87:6f:1c:e0:4a:83:cd:57:c9:9d:9d:06:b4:93:22: f0:11:02:d3:e3:5d:88:7c:f8:fb:99:20:7b:f3:94:bb:fe:a1: d0:f1:77:bd:9a:04:00:e5:db:67:2e:b3:cb:4b:b7:ff:d4:f8: 37:80:45:c9:63:d8:7c:f2:34:2d:1a:51:1c:68:16:91:d8:be: 1b:57:6e:aa:70:f3:0a:52:49:a0:f8:26:73:90:20:c5:e7:5c: 8c:f2:66:b9:da:4e:98:c2:37:2d:5c:d3:fa:95:8e:e6:64:e1: 37:10:ba:49:0d:f0:d8:19:63:7a:b4:32:88:b8:91:5d:3a:fa: 19:d9:12:f3:e0:f9:08:54:02:8b:0e:72:24:0c:ec:52:a0:80: a4:c4:7f:34:05:37:8a:c3:73:73:f8:2f:04:69:cc:3b:da:a2: fc:41:35:0e:68:c3:09:40:52:60:13:a6:62:11:3d:ab:4a:22: 62:b9:95:65:ef:c6:32:fb:db:93:16:9f:fa:09:cd:77:2c:98: 1c:27:1e:1b:d8:85:e1:68:b4:0b:89:0a:a2:2c:71:1e:54:60: 7f:b3:0d:fb:3d:9f:78:18:9c:be:c5:7e:69:3b:97:66:72:6d: 5e:73:85:65:8e:36:d4:80:90:2c:05:55:53:81:bc:e7:7e:87: 0f:f9:35:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplluL32gT5EtoQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWNlYTIwOTMtMjc0OC00MTNmLTkxMTEtYWRmYWQ3ODg4YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOwdK7ZmF9OaZhS/kZm86/dCwIHPeoPyMNVz rXER4zzQvBCiQsLpcSjzu9DZ7X0iMXOsX9WH8fWE+1IsSXOmOYeY6qOgh0eGcB1B ioQ4ZbJsLPhA4ENQuVPkGetaf2XS0b2/J23AY1QVjOwO439Ev/z0rIgIMlDXXw6m NZPyTX/E7n6ikhVZr0B1S8RTcrv5JvBSfIwATqJLMiYikv9FOwJIZemvtrd2PciK e6muNcQj60O/T41QD571XIMejWs++QSRQcyHx2yWX8RqL7N5GKRz+SYTDe3BR5CB oXN4i+1/nofTKfBu5/SOrQJV82+mSlFcB6wpYgSlOqn1sW0wVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANpCuspylDMFQ0XOgAtnUCkwr4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTM5YTYzMzYtYWFlOS0z NDkzLTkxOGItYTM3ODNjNjNkNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqdyodvHOBKg81XyZ2dBrSTIvARAtPjXYh8+PuZIHvzlLv+odDxd72a BADl22cus8tLt//U+DeARclj2HzyNC0aURxoFpHYvhtXbqpw8wpSSaD4JnOQIMXn XIzyZrnaTpjCNy1c0/qVjuZk4TcQukkN8NgZY3q0Moi4kV06+hnZEvPg+QhUAosO ciQM7FKggKTEfzQFN4rDc3P4LwRpzDvaovxBNQ5owwlAUmATpmIRPatKImK5lWXv xjL725MWn/oJzXcsmBwnHhvYheFotAuJCqIscR5UYH+zDfs9n3gYnL7Ffmk7l2Zy bV5zhWWONtSAkCwFVVOBvOd+hw/5NYc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:48 2025 by rpki-client