$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa File: 9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa (raw, json) Hash identifier: Cf5DmVV3wrhOpvTgu8OZ/87sL56dWCM1oegu4nysRTA= Subject key identifier: 49:46:DF:EC:65:99:24:7E:0C:C0:C9:7F:F6:61:69:0F:C3:1B:65:1A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996585DA17C5F5302594480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397236 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:58:5d:a1:7c:5f:53:02:59:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=edf971ad-5523-4bf8-8d25-eb7b5f48cc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:b3:d3:9f:58:d5:cd:43:5f:e4:41:16:7e: 46:53:ba:76:84:d3:98:1d:50:a5:e8:36:b5:31:c4: 35:28:e4:27:4a:af:2d:94:62:84:04:a2:48:fd:55: bb:19:a0:c7:e8:90:b4:a0:8f:0e:cf:1b:97:69:58: 65:a2:2b:e6:24:8d:9c:8b:5e:39:cd:b7:20:d5:f7: 66:1a:41:8c:99:24:c0:03:21:8e:3d:be:c2:4b:78: 8d:47:d7:aa:18:f7:09:3a:f4:cf:18:15:6c:7b:86: a7:08:9d:8d:07:5e:48:a3:c7:15:99:cb:2c:50:df: be:c9:cc:3f:5c:01:74:cf:b3:ee:e2:9a:e4:62:47: 82:d1:3e:66:b6:c4:2c:d3:f1:e7:af:3b:59:55:71: 2f:a0:78:05:09:50:fd:3c:01:9b:46:b3:cd:ab:b8: b5:e9:8a:eb:30:56:d7:3c:8f:0e:c0:08:fd:7b:34: 70:ca:d4:a1:00:8f:db:6a:c2:a1:5f:e3:43:c2:23: 51:cd:6c:c0:83:e9:26:e8:cf:f0:5c:21:f6:84:f7: 14:2d:df:e8:12:96:7a:bf:56:b5:ca:df:b5:c6:c4: ae:48:59:30:d9:a5:14:e6:8e:ef:f8:84:cc:43:80: 02:41:55:0c:0f:86:79:92:4a:5c:eb:a6:55:ec:8d: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:DF:EC:65:99:24:7E:0C:C0:C9:7F:F6:61:69:0F:C3:1B:65:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ac:d5:a5:97:40:6c:d3:37:a8:ae:15:62:12:b9:8a:99:57: 86:02:f1:52:ca:34:70:2f:b6:30:ff:2c:5f:7d:06:3e:56:43: b9:f3:be:a8:3f:bb:58:0c:d7:16:8f:c8:ac:d8:cb:8e:69:30: de:51:7c:fb:d7:5b:d5:dc:27:d9:31:dc:c5:8d:67:d0:75:39: 61:9a:47:3e:f0:32:81:9b:70:44:e6:9c:a1:18:d9:4a:50:d4: c2:ae:1c:18:17:4b:cf:07:78:cb:d2:b7:4b:23:61:2e:bd:6d: 6f:d6:b6:1f:06:3d:98:05:9e:11:d4:f9:61:0f:a4:56:8b:af: da:63:d5:c0:69:f8:16:f1:b1:2e:c2:38:a0:41:f3:e3:2f:51: 24:47:19:c3:33:81:50:b1:e0:2b:33:64:a0:71:ba:7c:ef:d3: ec:3e:4c:b8:55:71:f4:c0:78:a8:e1:d8:d8:ab:79:2a:37:6a: f6:d1:eb:9e:9a:5e:eb:d4:cc:80:90:bd:09:a0:9a:11:02:e7: a4:34:05:48:e9:16:62:59:ca:11:24:55:99:18:a8:08:ab:0d: 34:0c:c3:65:e1:6c:0d:16:73:be:5f:77:03:4b:9f:9e:30:fb: 91:fd:c8:ef:58:7d:cd:f4:da:5a:fa:f6:99:0b:07:2f:e4:b9: 09:7f:97:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllhdoXxfUwJZRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWRmOTcxYWQtNTUyMy00YmY4LThkMjUtZWI3YjVmNDhjYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtaz059Y1c1DX+RBFn5GU7p2hNOYHVCl6Da1 McQ1KOQnSq8tlGKEBKJI/VW7GaDH6JC0oI8OzxuXaVhloivmJI2ci145zbcg1fdm GkGMmSTAAyGOPb7CS3iNR9eqGPcJOvTPGBVse4anCJ2NB15Io8cVmcssUN++ycw/ XAF0z7Pu4prkYkeC0T5mtsQs0/HnrztZVXEvoHgFCVD9PAGbRrPNq7i16YrrMFbX PI8OwAj9ezRwytShAI/basKhX+NDwiNRzWzAg+km6M/wXCH2hPcULd/oEpZ6v1a1 yt+1xsSuSFkw2aUU5o7v+ITMQ4ACQVUMD4Z5kkpc66ZV7I0SjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElG3+xlmSR+DMDJf/ZhaQ/DG2UaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEyYmY4ZjQtZjlkNC0z OTQ5LThhYTUtMzhlOGU4NWJmNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFis1aWXQGzTN6iuFWISuYqZV4YC8VLKNHAvtjD/LF99Bj5WQ7nzvqg/ u1gM1xaPyKzYy45pMN5RfPvXW9XcJ9kx3MWNZ9B1OWGaRz7wMoGbcETmnKEY2UpQ 1MKuHBgXS88HeMvSt0sjYS69bW/Wth8GPZgFnhHU+WEPpFaLr9pj1cBp+BbxsS7C OKBB8+MvUSRHGcMzgVCx4CszZKBxunzv0+w+TLhVcfTAeKjh2NireSo3avbR656a XuvUzICQvQmgmhEC56Q0BUjpFmJZyhEkVZkYqAirDTQMw2XhbA0Wc75fdwNLn54w +5H9yO9Yfc302lr69pkLBy/kuQl/l04= -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:31 2025 by rpki-client