$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa File: aafb6155-52c1-3131-ad8d-45ae2f608420.roa (raw, json) Hash identifier: zLscgEnxVHwLbo+vxzpArDR/2BqGW4r3Q1z4GCPy9jg= Subject key identifier: 53:4E:5F:44:2A:3C:E5:66:53:9A:47:12:D5:A8:C2:12:E9:C2:A9:00 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210504C6C358F3A56CA680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:05:04:c6:c3:58:f3:a5:6c:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=1ec45df8-3c7f-45d9-9c57-91b70c04fe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:f9:fc:a8:f6:e5:7a:5c:d0:5f:41:91:02: 2e:15:23:7c:db:ce:c1:47:7d:ee:3d:01:de:c1:81: 00:ae:0e:e9:6c:97:aa:e3:13:c9:3e:11:b6:ca:97: 9a:1b:85:ba:d9:ed:9c:92:43:d2:3b:60:9d:a1:80: 96:dc:b6:45:2f:2b:c1:4a:de:a1:f5:84:62:bf:1b: 6c:80:5f:02:4d:8e:58:69:02:14:a2:18:dc:10:29: cf:b1:80:1c:48:0d:58:ac:ec:0f:30:f2:b7:59:9a: c1:7a:5f:06:c9:59:04:89:dd:59:ec:67:68:40:09: 2d:ee:1a:bf:04:6a:88:d4:7a:2f:99:ac:aa:b6:89: ed:11:4a:56:aa:4f:31:9a:70:29:ac:88:63:41:c4: 2b:60:6a:f8:0a:59:43:05:85:c2:bd:b9:60:d5:e7: 23:9d:40:bc:7e:c1:62:a4:71:80:73:ce:5b:52:06: 4f:db:1e:75:67:fa:1f:c7:29:c2:7e:8e:be:cc:8e: 5b:17:40:1d:5d:ec:9e:8d:a9:3b:3b:ac:b2:1c:59: 4b:23:d7:78:93:2c:bd:f5:0f:9b:ed:a6:a9:d3:6c: 7c:62:33:d9:0b:1b:48:ba:04:04:1b:e5:50:bd:55: cd:47:0e:2f:7b:b3:55:eb:78:90:28:c1:bc:73:ec: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:5F:44:2A:3C:E5:66:53:9A:47:12:D5:A8:C2:12:E9:C2:A9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f5:fb:1f:e3:c3:af:29:b9:eb:62:60:57:c0:9e:dd:4c:db: b6:11:b8:de:cf:60:e3:cd:c0:c5:5c:03:69:d6:9d:2e:94:95: 42:a6:8d:02:ea:66:b3:5e:02:69:e2:d6:3e:f0:22:fb:ac:6a: 00:59:d2:5c:97:3b:79:8a:1f:1d:6c:1a:03:3e:3f:1c:ae:52: 4a:0f:66:88:4d:e6:9b:4a:1e:ac:cf:ad:a4:b4:b0:c5:08:b4: 4c:c1:f1:a3:cc:7c:03:20:ce:af:00:df:ef:e4:10:de:d7:cb: df:51:42:01:2c:55:b5:6a:d9:4e:30:f2:16:f3:87:80:cc:99: 6b:04:e6:78:d6:6d:9f:db:e1:d7:82:9a:4a:1b:8a:86:fa:ca: ea:2b:6e:db:65:ae:e4:c1:d1:f5:bf:5b:61:65:32:82:c1:0b: 2d:4c:18:1d:8f:2d:22:b0:51:9c:4a:d7:f9:1a:57:c6:c8:c3: 1f:e0:24:f6:41:17:ad:f5:e6:d0:f3:ff:c5:a6:d0:17:4a:61: 76:92:d5:b1:43:45:c4:2c:9f:5f:fa:1c:bd:da:b9:7e:ae:88: 77:3f:3e:bc:67:d2:63:40:8a:a8:03:96:2f:52:b5:46:5a:d3: 50:5f:4d:41:1e:32:21:44:6d:cc:e8:5f:da:da:bd:be:2c:38: da:9e:a1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQUExsNY86VspoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MWVjNDVkZjgtM2M3Zi00NWQ5LTljNTctOTFiNzBjMDRmZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh35/Kj25Xpc0F9BkQIuFSN8287BR33uPQHe wYEArg7pbJeq4xPJPhG2ypeaG4W62e2ckkPSO2CdoYCW3LZFLyvBSt6h9YRivxts gF8CTY5YaQIUohjcECnPsYAcSA1YrOwPMPK3WZrBel8GyVkEid1Z7GdoQAkt7hq/ BGqI1HovmayqtontEUpWqk8xmnAprIhjQcQrYGr4CllDBYXCvblg1ecjnUC8fsFi pHGAc85bUgZP2x51Z/ofxynCfo6+zI5bF0AdXeyejak7O6yyHFlLI9d4kyy99Q+b 7aap02x8YjPZCxtIugQEG+VQvVXNRw4ve7NV63iQKMG8c+wzFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNOX0QqPOVmU5pHEtWowhLpwqkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWFmYjYxNTUtNTJjMS0z MTMxLWFkOGQtNDVhZTJmNjA4NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn1+x/jw68puetiYFfAnt1M27YRuN7PYOPNwMVcA2nWnS6UlUKmjQLq ZrNeAmni1j7wIvusagBZ0lyXO3mKHx1sGgM+PxyuUkoPZohN5ptKHqzPraS0sMUI tEzB8aPMfAMgzq8A3+/kEN7Xy99RQgEsVbVq2U4w8hbzh4DMmWsE5njWbZ/b4deC mkobiob6yuorbttlruTB0fW/W2FlMoLBCy1MGB2PLSKwUZxK1/kaV8bIwx/gJPZB F6315tDz/8Wm0BdKYXaS1bFDRcQsn1/6HL3auX6uiHc/Prxn0mNAiqgDli9StUZa 01BfTUEeMiFEbczoX9ravb4sONqeoXM= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:53 2025 by rpki-client