$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa File: 9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa (raw, json) Hash identifier: g+Rmo6voIZJ1gzOO7OU+ebluj2zva5HWF1qz/b1AWEI= Subject key identifier: 2C:87:87:66:90:E8:23:D9:5D:1F:89:3C:E2:1E:AC:3B:78:26:46:A1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20EDFAB8703B2DFE6C9F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397223 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ed:fa:b8:70:3b:2d:fe:6c:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=40df18a8-9be9-463f-8ac0-629c893b455a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:58:ba:32:5a:ed:5d:c0:64:a5:38:6a:80: cd:e5:d8:54:a5:1c:98:17:dc:0f:8b:90:63:d4:35: 77:50:55:82:e2:fd:a6:e1:ba:51:34:90:1f:30:33: 26:eb:ef:47:7b:c5:62:35:2b:c6:39:1c:e1:e4:ef: a7:cc:e0:10:40:37:58:49:a8:bc:17:13:95:34:40: d2:79:35:5d:bf:5d:cf:ab:5b:ac:66:42:49:b2:79: 7b:99:28:8b:19:15:33:e9:0e:0d:a1:12:5e:b9:fb: a5:70:66:43:96:71:27:66:85:6d:ec:e0:1d:c3:f2: 32:6d:7b:f9:a0:2c:63:ed:04:66:bc:04:44:22:25: 4c:1c:16:9f:cd:cf:d4:0a:e8:b4:c5:30:87:dc:ad: 06:c7:8c:7a:6f:38:48:4a:ee:79:52:a3:e5:f8:07: c8:ab:12:e7:2b:81:37:7f:3d:a2:50:b6:a5:6d:06: d2:57:d0:cb:ef:74:3f:fe:1b:9e:ff:a8:3e:e3:6d: c9:08:ce:91:78:a2:98:fa:23:67:73:a4:21:5d:6d: b4:42:11:b7:67:c7:69:bf:a3:d2:17:fd:14:c2:c6: ca:81:0f:78:ad:05:0a:76:8d:5e:88:35:09:90:57: ca:4e:ad:6e:71:1e:b5:2a:82:b5:59:1e:a6:b9:49: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:87:66:90:E8:23:D9:5D:1F:89:3C:E2:1E:AC:3B:78:26:46:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:80:5d:28:c1:ea:01:d5:61:cd:d0:31:ac:30:c6:75:43:b4: 76:7a:7b:88:f8:42:03:d3:cd:e0:00:b5:da:02:e5:b5:5b:d9: 87:a3:5d:31:f5:1e:c3:51:2a:f6:56:a4:6f:e7:26:94:13:98: 91:5e:ec:6e:7b:68:ba:78:e5:bd:4f:f2:d2:2a:bb:40:49:39: 04:38:65:c2:5b:4d:b5:00:47:8f:6c:15:f7:2e:54:1c:71:18: 44:f0:84:ce:2f:53:de:62:58:8b:8a:84:25:94:ac:d6:e1:23: f5:4a:db:1f:fa:e7:36:6b:63:5d:8e:c7:59:fb:db:9a:8b:e1: b5:08:02:c1:e0:c2:aa:d2:56:8c:5c:4f:a8:ba:35:85:81:1f: 5c:d8:35:be:7b:7e:51:e4:8f:35:34:67:d5:90:d5:53:e1:3a: ea:c1:ef:74:18:03:72:6a:27:49:86:24:ba:20:02:81:b4:5a: 14:15:4c:06:44:7c:00:51:4b:9f:de:8a:09:f6:e8:19:98:97: 1a:6c:49:96:2b:2a:4e:23:e1:43:07:d7:41:be:2d:b5:71:1e: 9b:f6:d8:3c:67:19:4c:6d:c9:99:eb:f4:35:8d:37:30:55:75: cd:7c:0d:3e:95:41:bd:cd:f2:f5:f5:9c:44:fd:6c:59:66:84: 53:8e:6b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IO36uHA7Lf5snwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NDBkZjE4YTgtOWJlOS00NjNmLThhYzAtNjI5Yzg5M2I0NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5YujJa7V3AZKU4aoDN5dhUpRyYF9wPi5Bj 1DV3UFWC4v2m4bpRNJAfMDMm6+9He8ViNSvGORzh5O+nzOAQQDdYSai8FxOVNEDS eTVdv13Pq1usZkJJsnl7mSiLGRUz6Q4NoRJeufulcGZDlnEnZoVt7OAdw/IybXv5 oCxj7QRmvAREIiVMHBafzc/UCui0xTCH3K0Gx4x6bzhISu55UqPl+AfIqxLnK4E3 fz2iULalbQbSV9DL73Q//hue/6g+423JCM6ReKKY+iNnc6QhXW20QhG3Z8dpv6PS F/0UwsbKgQ94rQUKdo1eiDUJkFfKTq1ucR61KoK1WR6muUmVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyHh2aQ6CPZXR+JPOIerDt4JkahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWY0MDA0YzItYjczZC0z MmUxLTllNmMtMmE5MTk5MDNkZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeAXSjB6gHVYc3QMawwxnVDtHZ6e4j4QgPTzeAAtdoC5bVb2YejXTH1 HsNRKvZWpG/nJpQTmJFe7G57aLp45b1P8tIqu0BJOQQ4ZcJbTbUAR49sFfcuVBxx GETwhM4vU95iWIuKhCWUrNbhI/VK2x/65zZrY12Ox1n725qL4bUIAsHgwqrSVoxc T6i6NYWBH1zYNb57flHkjzU0Z9WQ1VPhOurB73QYA3JqJ0mGJLogAoG0WhQVTAZE fABRS5/eign26BmYlxpsSZYrKk4j4UMH10G+LbVxHpv22DxnGUxtyZnr9DWNNzBV dc18DT6VQb3N8vX1nET9bFlmhFOOa1Q= -----END CERTIFICATE-----Generated at Sun Apr 6 00:47:56 2025 by rpki-client