$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b953010-e898-378e-8a05-3536f04281c0.roa File: 9b953010-e898-378e-8a05-3536f04281c0.roa (raw, json) Hash identifier: QtqLf6wH9ELAXNLPAJKOTMJ9seTeGWG8xE+foRsTGq0= Subject key identifier: 4A:FD:7F:6E:F4:B5:01:BA:B6:C8:8C:57:D8:19:56:A2:CA:5C:06:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EE2CD3023327FE2BDB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b953010-e898-378e-8a05-3536f04281c0.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397230 IP address blocks: 156.154.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ee:2c:d3:02:33:27:fe:2b:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f7d633d5-0425-4343-88b6-00c01aadcb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:fe:f9:68:21:dd:3b:5c:f0:1a:1a:cf:29: b5:00:53:7f:93:2e:f9:b3:b5:f8:b6:87:c6:52:35: 83:9f:ac:1d:ff:21:d5:f3:d4:b2:db:32:ec:76:8a: 4f:d4:a7:87:3d:67:de:0f:28:98:8f:b9:63:ff:be: eb:b4:c8:a2:7b:0a:95:b7:72:8e:34:de:7f:f6:f1: 16:aa:bc:53:a2:7c:e6:94:04:34:1a:5c:ac:05:70: 66:13:25:d1:6c:70:bf:38:db:a7:aa:24:89:46:30: e8:8e:2f:f0:59:9a:00:98:13:76:bd:be:1d:55:1f: b5:32:3c:4f:c4:5d:79:a2:6c:95:62:4f:2d:5b:db: 99:e5:4f:b7:10:ff:04:b5:6c:f1:b5:f5:b4:83:a9: cd:3f:e9:b5:ac:f0:44:b4:f5:68:e5:86:00:80:8d: 0e:98:bd:26:6b:6e:0e:1e:92:9f:47:4a:55:37:6e: fc:ab:2f:06:a1:d6:1d:49:8f:a1:53:95:60:02:72: db:05:e0:2f:aa:84:b6:98:03:1a:a3:23:60:68:d3: 97:ca:ab:76:b8:96:e2:a0:81:32:11:ba:cf:9a:ce: cb:97:62:db:c1:e4:c4:7b:f5:4d:6b:ac:dd:cb:13: ed:14:c4:10:ef:28:b6:31:c6:71:85:07:22:5d:74: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:7F:6E:F4:B5:01:BA:B6:C8:8C:57:D8:19:56:A2:CA:5C:06:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b953010-e898-378e-8a05-3536f04281c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:71:38:8e:eb:46:66:f3:94:48:d0:22:b4:32:af:e0:8c: 6c:f5:b1:18:ae:3c:60:12:e0:c1:af:f8:8b:d8:a9:74:8c:32: d8:10:c7:55:29:bb:49:5c:31:59:05:fc:ed:11:45:28:cd:fe: 11:6e:fe:e1:be:08:9f:3f:f7:99:25:77:47:ff:88:47:73:28: c1:7c:f1:b7:da:52:46:08:86:7f:26:73:43:15:7c:0f:c5:ba: d5:b3:84:0b:f0:5b:aa:72:a1:06:0b:4d:9f:11:2b:d9:7d:be: 23:9a:f4:d0:6c:2e:c5:1a:3c:5c:c8:51:87:fe:37:01:04:dd: 8a:7e:bb:ea:c5:db:e8:6e:fa:bb:bd:35:52:65:0f:50:4c:06: ca:ea:da:4b:b4:88:53:26:d8:06:61:21:d8:65:b0:19:6e:6b: 85:54:f8:73:14:5d:78:30:95:7e:f0:d0:d7:a1:16:f2:8f:1a: 2c:d1:42:1d:3e:e7:4e:13:07:cc:5a:d8:45:a0:a7:c2:86:97: 16:98:ba:07:ee:8e:7a:60:a3:28:17:bb:bb:d1:86:66:17:71: cd:91:66:a9:c4:09:d5:b6:1e:44:24:15:62:16:6a:79:b4:61: 27:56:fc:9e:e5:ef:18:8f:13:31:5f:7b:c3:b4:c2:48:5d:c4: 82:63:50:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu4s0wIzJ/4r2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjdkNjMzZDUtMDQyNS00MzQzLTg4YjYtMDBjMDFhYWRjYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZf++Wgh3Ttc8Boazym1AFN/ky75s7X4tofG UjWDn6wd/yHV89Sy2zLsdopP1KeHPWfeDyiYj7lj/77rtMiiewqVt3KONN5/9vEW qrxTonzmlAQ0GlysBXBmEyXRbHC/ONunqiSJRjDoji/wWZoAmBN2vb4dVR+1MjxP xF15omyVYk8tW9uZ5U+3EP8EtWzxtfW0g6nNP+m1rPBEtPVo5YYAgI0OmL0ma24O HpKfR0pVN278qy8GodYdSY+hU5VgAnLbBeAvqoS2mAMaoyNgaNOXyqt2uJbioIEy EbrPms7Ll2LbweTEe/VNa6zdyxPtFMQQ7yi2McZxhQciXXTGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr9f270tQG6tsiMV9gZVqLKXAY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWI5NTMwMTAtZTg5OC0z NzhlLThhMDUtMzUzNmYwNDI4MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUcTiO60Zm85RI0CK0Mq/gjGz1sRiuPGAS4MGv+IvYqXSMMtgQx1Up u0lcMVkF/O0RRSjN/hFu/uG+CJ8/95kld0f/iEdzKMF88bfaUkYIhn8mc0MVfA/F utWzhAvwW6pyoQYLTZ8RK9l9viOa9NBsLsUaPFzIUYf+NwEE3Yp+u+rF2+hu+ru9 NVJlD1BMBsrq2ku0iFMm2AZhIdhlsBlua4VU+HMUXXgwlX7w0NehFvKPGizRQh0+ 504TB8xa2EWgp8KGlxaYugfujnpgoygXu7vRhmYXcc2RZqnECdW2HkQkFWIWanm0 YSdW/J7l7xiPEzFfe8O0wkhdxIJjUIU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:05:44 2025 by rpki-client