$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa File: a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa (raw, json) Hash identifier: CHSLm4DMLPrndB0l3D5uF1Tf4mRetJI4c2NjnecpdFw= Subject key identifier: E0:CC:F9:B9:40:62:B3:EF:CA:50:07:96:52:EC:E8:F3:B6:DA:8B:E5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210F15EF3B8A76BCB91080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397218 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0f:15:ef:3b:8a:76:bc:b9:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=f41a97a9-6358-476a-8b59-ee752f49e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:5e:d2:68:40:28:e9:ac:04:ed:dd:a5:90: 9e:cd:5c:f0:b9:c1:d0:42:0a:a7:78:97:37:7e:69: d2:88:30:38:c9:7b:b7:13:af:c2:e2:4e:e6:d6:58: a2:58:fa:36:66:0b:11:44:50:e3:7c:dd:65:77:02: 42:d3:b5:f9:14:5f:88:84:e0:27:be:a2:a1:ef:72: 7e:0f:8c:bd:c5:f8:08:5d:ac:40:4e:74:30:50:4c: 6b:26:86:71:07:ff:03:bd:a8:dc:e4:0e:2d:ab:69: 43:0a:fc:37:4e:62:2e:c7:6e:d3:42:4c:c0:38:5d: 1c:5c:32:a6:b5:2f:35:24:6a:ad:8d:c0:ef:02:1b: 4e:8b:81:9c:07:db:38:67:b5:2c:d1:7b:5d:33:a2: 44:81:e1:ec:0f:86:40:0b:7e:4c:dd:9a:4e:34:97: c8:08:a6:50:cd:f0:de:53:2c:30:09:d2:cb:71:59: ae:17:6f:64:8e:9d:b4:d9:03:29:29:fc:0b:63:8f: 55:13:5a:81:c1:74:79:11:f1:e0:56:5a:32:ec:d8: 75:e7:c0:b7:1b:b8:3c:1c:a7:e0:4f:00:ec:b5:fe: 2c:b5:31:61:ec:be:d6:dc:13:ed:12:df:d6:f7:2d: 84:c2:6f:9c:ee:ec:3d:ae:99:43:60:2e:8a:43:0c: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:F9:B9:40:62:B3:EF:CA:50:07:96:52:EC:E8:F3:B6:DA:8B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:30:b3:d6:fc:3c:25:50:bb:98:64:39:79:71:81:f6:7b:9c: 3b:d3:a6:52:19:82:25:c6:c5:bb:2e:18:67:51:cc:12:1d:e4: 8e:d8:92:60:4d:6d:d2:77:04:88:ad:23:16:5d:49:22:a8:13: 51:69:8b:50:19:0e:85:c5:95:73:30:02:5e:dc:61:1a:61:0f: 3a:fe:6e:9c:cc:8b:2d:da:2e:57:26:57:90:ea:5f:d0:bc:bc: c3:72:d7:cc:97:ba:e2:80:6e:e3:7a:b6:83:43:5c:76:67:59: 93:55:b6:9f:a8:8b:c0:1a:13:1c:cc:34:a7:27:09:47:56:bb: ca:45:50:70:40:4c:ed:a8:4f:37:1f:53:75:22:ed:c0:d5:ea: bd:b9:63:24:f0:08:04:64:a3:6a:97:de:24:f3:04:fd:54:d4: 08:f7:f5:9f:64:9d:af:c0:33:e3:5b:35:5e:b1:83:b8:f9:87: f6:96:61:cc:08:1f:b4:73:89:f2:6d:17:f9:14:3f:8f:d9:ae: 89:8d:21:fb:a7:5c:3c:df:25:0c:3b:80:27:7f:5d:c9:fa:9c: 49:5e:29:22:b8:c4:c5:da:77:38:4c:55:e5:34:0d:ea:93:26: 1a:9b:48:ec:d1:c8:dc:4b:30:be:39:cc:ed:8e:7e:28:43:37: ea:0c:f7:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ8V7zuKdry5EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZjQxYTk3YTktNjM1OC00NzZhLThiNTktZWU3NTJmNDllNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89Fe0mhAKOmsBO3dpZCezVzwucHQQgqneJc3 fmnSiDA4yXu3E6/C4k7m1liiWPo2ZgsRRFDjfN1ldwJC07X5FF+IhOAnvqKh73J+ D4y9xfgIXaxATnQwUExrJoZxB/8Dvajc5A4tq2lDCvw3TmIux27TQkzAOF0cXDKm tS81JGqtjcDvAhtOi4GcB9s4Z7Us0XtdM6JEgeHsD4ZAC35M3ZpONJfICKZQzfDe UywwCdLLcVmuF29kjp202QMpKfwLY49VE1qBwXR5EfHgVloy7Nh158C3G7g8HKfg TwDstf4stTFh7L7W3BPtEt/W9y2Ewm+c7uw9rplDYC6KQwx6HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODM+blAYrPvylAHllLs6PO22ovlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTg4YjBkMzEtZTY1Yy0z ODU3LWI2NjctN2VmOGUyMGJjZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwws9b8PCVQu5hkOXlxgfZ7nDvTplIZgiXGxbsuGGdRzBId5I7YkmBN bdJ3BIitIxZdSSKoE1Fpi1AZDoXFlXMwAl7cYRphDzr+bpzMiy3aLlcmV5DqX9C8 vMNy18yXuuKAbuN6toNDXHZnWZNVtp+oi8AaExzMNKcnCUdWu8pFUHBATO2oTzcf U3Ui7cDV6r25YyTwCARko2qX3iTzBP1U1Aj39Z9kna/AM+NbNV6xg7j5h/aWYcwI H7RzifJtF/kUP4/ZromNIfunXDzfJQw7gCd/Xcn6nEleKSK4xMXadzhMVeU0DeqT JhqbSOzRyNxLML45zO2OfihDN+oM98Q= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:54 2025 by rpki-client