$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa File: a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa (raw, json) Hash identifier: va3mPLZDtbVR8o0q2zPoHJtmjaUFTvh1GFulQW567zI= Subject key identifier: 1A:30:75:E5:D2:0C:E0:2C:15:EA:1A:46:B3:66:76:B6:67:A4:0C:91 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965620A23DAB52EBDD2000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397221 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:56:20:a2:3d:ab:52:eb:dd:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=0a76a02f-7f10-46b8-91b3-49cbbefdfa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:bf:a7:ad:2b:d6:e7:3d:03:3c:6f:e2:cf: 14:3c:89:fd:6a:64:04:97:56:66:f8:dc:12:58:7c: ed:1a:66:86:0a:7a:18:8e:4e:57:21:15:55:9b:85: 35:1f:81:16:47:83:e2:b0:3f:47:9f:6b:27:b3:77: ea:2a:b7:e6:5a:d7:48:f2:ab:db:4e:a8:44:72:40: 24:84:61:3a:1d:95:07:5b:f7:63:84:ba:2d:41:ac: 6e:8c:0e:a5:9d:11:cd:90:c3:52:34:50:d0:a4:f8: 7c:6d:ff:19:fd:82:fa:e6:61:19:e3:7a:41:13:49: 77:fd:a1:e6:6b:d3:47:90:60:42:36:bc:c1:39:e9: 24:53:ba:9e:ca:f7:d3:70:0a:98:c5:d5:3d:c6:83: 7f:ab:84:24:a1:18:31:9c:53:31:de:9a:a4:6a:c1: 22:6f:23:4f:aa:0b:03:08:5e:b5:09:32:ea:30:db: f3:8c:cd:74:54:6d:99:eb:7f:13:e5:93:e5:3e:3a: 8a:33:c5:ac:e8:be:42:41:b3:7b:6b:65:00:f2:f9: 5f:63:0f:96:a3:e2:00:60:95:f9:f5:81:0b:c3:01: 28:c6:5c:cd:35:08:e0:b7:b9:5a:11:6d:35:f0:2f: 43:0a:c5:ed:26:df:c9:92:f1:91:b9:e3:a3:e2:76: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:75:E5:D2:0C:E0:2C:15:EA:1A:46:B3:66:76:B6:67:A4:0C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f6:c3:9b:93:dd:9a:8f:fc:99:a8:3b:a0:d3:0a:c8:f6:d9: e3:e0:35:79:c3:0b:22:ed:fa:a3:28:a0:82:49:aa:96:13:14: 12:cd:13:0e:89:9e:8f:9c:88:a1:f0:03:5c:ec:a7:be:84:c4: 09:82:ea:00:2e:60:6a:dc:42:ef:ac:99:64:ed:a0:08:66:e7: 94:35:e1:3c:0d:f4:ea:65:a0:12:05:39:68:2c:26:cc:81:57: 01:de:0f:8a:c1:14:b4:e2:b6:e6:ee:e7:fa:aa:e8:04:1b:8f: 41:b3:2b:7c:0b:f0:2e:6a:7d:b5:42:61:dd:e1:6e:ed:25:6e: 5a:85:f4:16:42:8e:f6:1c:e7:1b:1b:cd:fd:1c:4b:e6:d9:d1: a8:66:81:61:20:03:87:c8:62:c9:3f:f3:44:a3:e7:5f:fd:fc: 9d:77:84:7a:59:00:a7:4e:cb:14:3b:2c:e1:4d:e5:73:62:b0: b7:61:34:6c:a7:57:fc:e4:a2:02:96:89:bb:a3:7e:bd:59:69: 1c:f3:da:3f:e8:89:f4:9a:c8:8e:bf:fb:a1:42:fd:42:69:50: 8a:ec:35:c9:35:61:9f:61:67:d2:8f:a5:ef:14:c5:37:c0:cf: 92:4f:cd:b5:ca:77:9d:4f:b4:ff:de:ba:43:80:44:53:79:d6: c2:27:2c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllYgoj2rUuvdIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGE3NmEwMmYtN2YxMC00NmI4LTkxYjMtNDljYmJlZmRmYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVG/p60r1uc9Azxv4s8UPIn9amQEl1Zm+NwS WHztGmaGCnoYjk5XIRVVm4U1H4EWR4PisD9Hn2sns3fqKrfmWtdI8qvbTqhEckAk hGE6HZUHW/djhLotQaxujA6lnRHNkMNSNFDQpPh8bf8Z/YL65mEZ43pBE0l3/aHm a9NHkGBCNrzBOekkU7qeyvfTcAqYxdU9xoN/q4QkoRgxnFMx3pqkasEibyNPqgsD CF61CTLqMNvzjM10VG2Z638T5ZPlPjqKM8Ws6L5CQbN7a2UA8vlfYw+Wo+IAYJX5 9YELwwEoxlzNNQjgt7laEW018C9DCsXtJt/JkvGRueOj4nYfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBowdeXSDOAsFeoaRrNmdrZnpAyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTNkODczZGYtOWRkZi0z NjkyLWJlNjEtZDU2YTJlZTZlNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn2w5uT3ZqP/JmoO6DTCsj22ePgNXnDCyLt+qMooIJJqpYTFBLNEw6J no+ciKHwA1zsp76ExAmC6gAuYGrcQu+smWTtoAhm55Q14TwN9OploBIFOWgsJsyB VwHeD4rBFLTitubu5/qq6AQbj0GzK3wL8C5qfbVCYd3hbu0lblqF9BZCjvYc5xsb zf0cS+bZ0ahmgWEgA4fIYsk/80Sj51/9/J13hHpZAKdOyxQ7LOFN5XNisLdhNGyn V/zkogKWibujfr1ZaRzz2j/oifSayI6/+6FC/UJpUIrsNck1YZ9hZ9KPpe8UxTfA z5JPzbXKd51PtP/eukOARFN51sInLLo= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:40 2025 by rpki-client