$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa File: 9b8de757-738a-3a39-a4b0-e09174c4d533.roa (raw, json) Hash identifier: Yimim8DVgq0yq2kw37zawqB+Jri+1Ao4gwO3AuAyweI= Subject key identifier: 8F:A7:25:B0:6E:76:28:97:F2:11:EA:52:51:D6:84:1A:FA:AA:33:35 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99656CF31CE335E1132D780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397236 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:56:cf:31:ce:33:5e:11:32:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=07dfcbad-7827-496b-9630-43752c17a57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:a6:c9:ad:c4:00:4d:41:d5:5f:d3:37:2f: b6:2f:d9:a9:07:17:f1:75:c8:91:0a:f2:e0:03:9e: b6:76:6e:ff:ea:bc:5e:8a:6f:9c:22:56:d5:1a:91: 90:49:a7:18:fc:20:7d:24:41:c5:cf:33:73:39:bb: 7f:4e:8c:59:bc:0f:88:ea:0a:13:9b:2c:f8:59:9f: 06:5f:8a:bd:1d:22:24:8f:12:83:eb:67:19:f9:c1: 5b:42:05:c2:a8:33:15:ad:62:d7:21:90:f3:36:77: d7:47:0d:61:80:e6:51:19:d0:89:c6:dd:89:1e:c7: 19:97:4c:da:5e:7f:57:72:2a:1d:d0:e0:39:d3:ea: b2:e3:84:5b:66:1b:7c:53:8e:21:b7:70:99:5c:00: 50:26:72:38:8f:ce:21:de:e5:a7:34:3c:ef:3a:4d: a7:2a:c3:84:43:d3:3e:cd:de:d7:c6:c9:d5:94:d8: b1:25:ff:fe:b5:f8:42:22:8b:f9:4d:9a:b2:d1:2c: 47:4f:d6:86:6b:d5:6c:8a:ae:ab:99:b0:ab:92:52: 2d:0b:18:3e:6f:6f:37:1d:d3:a3:17:c2:14:55:5c: f4:ff:51:72:5c:49:68:91:db:97:36:44:eb:42:98: 18:df:bd:a7:8e:2d:90:ed:be:f6:62:19:e8:8e:b3: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:25:B0:6E:76:28:97:F2:11:EA:52:51:D6:84:1A:FA:AA:33:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ea:4f:03:e4:8f:bb:be:8c:82:22:25:22:a0:0c:3a:db:21: 84:fc:96:3e:20:c6:c6:17:4a:1c:7d:81:59:a5:aa:bb:de:68: 4a:b9:93:6e:9a:51:68:ee:f0:19:90:e0:31:7c:a7:6a:37:80: b2:cd:b0:cd:24:92:b2:e9:c0:5a:4e:4f:59:69:eb:c1:f6:4b: b5:fb:79:39:6b:ed:c9:ea:8e:e5:01:79:72:9d:f8:5c:09:54: 2c:22:ae:8f:f2:e6:e0:2b:d8:9e:11:37:7f:59:7e:e7:29:27: 79:bf:2d:b2:62:e5:21:8c:b7:0d:2d:5f:78:db:b3:10:b7:c4: f6:99:27:d5:79:a7:e1:b6:0a:b1:c8:b2:02:4e:f6:bb:9e:33: 39:aa:27:17:a9:f5:7f:1a:be:24:ec:90:1a:40:38:1a:11:ab: 3d:a5:d6:bc:67:48:fe:a2:b0:31:02:dd:a4:e6:22:eb:72:e5: 82:89:a1:68:70:92:54:7c:34:e1:9b:88:35:e9:87:15:80:37: 19:49:1e:6b:18:87:c0:88:d6:df:45:8d:47:25:7a:8f:ce:49: d5:c0:9c:3e:b8:92:24:b1:f3:cf:1e:fe:0c:e9:e3:4f:a9:28: 0b:67:3d:b3:29:e7:27:7c:0b:44:8b:53:de:5d:23:65:06:bc: cc:8e:34:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllbPMc4zXhEy14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDdkZmNiYWQtNzgyNy00OTZiLTk2MzAtNDM3NTJjMTdhNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAKmya3EAE1B1V/TNy+2L9mpBxfxdciRCvLg A562dm7/6rxeim+cIlbVGpGQSacY/CB9JEHFzzNzObt/ToxZvA+I6goTmyz4WZ8G X4q9HSIkjxKD62cZ+cFbQgXCqDMVrWLXIZDzNnfXRw1hgOZRGdCJxt2JHscZl0za Xn9Xciod0OA50+qy44RbZht8U44ht3CZXABQJnI4j84h3uWnNDzvOk2nKsOEQ9M+ zd7XxsnVlNixJf/+tfhCIov5TZqy0SxHT9aGa9Vsiq6rmbCrklItCxg+b283HdOj F8IUVVz0/1FyXElokduXNkTrQpgY372nji2Q7b72YhnojrOXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+nJbBudiiX8hHqUlHWhBr6qjM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWI4ZGU3NTctNzM4YS0z YTM5LWE0YjAtZTA5MTc0YzRkNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnqTwPkj7u+jIIiJSKgDDrbIYT8lj4gxsYXShx9gVmlqrveaEq5k26a UWju8BmQ4DF8p2o3gLLNsM0kkrLpwFpOT1lp68H2S7X7eTlr7cnqjuUBeXKd+FwJ VCwiro/y5uAr2J4RN39ZfucpJ3m/LbJi5SGMtw0tX3jbsxC3xPaZJ9V5p+G2CrHI sgJO9rueMzmqJxep9X8aviTskBpAOBoRqz2l1rxnSP6isDEC3aTmIuty5YKJoWhw klR8NOGbiDXphxWANxlJHmsYh8CI1t9FjUcleo/OSdXAnD64kiSx888e/gzp40+p KAtnPbMp5yd8C0SLU95dI2UGvMyONAw= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:34 2025 by rpki-client