$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abcb23af-0841-36d7-a9db-5132c11fab9d.roa File: abcb23af-0841-36d7-a9db-5132c11fab9d.roa (raw, json) Hash identifier: QA0BwnOGYagRh7ZTsMj12vBy6BK3+YuB4CZ+OZGgVhM= Subject key identifier: C8:CC:C4:E5:19:54:9D:F7:F6:57:CA:E2:B0:F1:E1:61:29:73:91:BA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99645ED0816D49F79E94600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abcb23af-0841-36d7-a9db-5132c11fab9d.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397228 IP address blocks: 204.69.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:45:ed:08:16:d4:9f:79:e9:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ca6cc433-c46c-4809-a596-58ab48cb74d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:72:37:05:7b:31:6f:07:4b:ae:d9:44:1b: 82:59:01:53:04:e6:eb:df:07:28:8f:b9:d3:b5:5f: 5d:cf:73:38:50:38:fd:2d:ce:9f:10:14:14:81:d1: ee:83:6a:f6:58:d4:af:c0:e0:62:8e:aa:3a:36:ac: e1:3c:93:b6:1e:fc:8c:d1:1d:15:7f:09:fa:78:20: c0:4c:36:ef:0c:fe:50:3c:fc:c6:93:a4:1c:ac:37: a4:83:e3:06:df:cd:9f:13:75:9c:02:1a:44:3d:ab: 9e:05:8c:52:97:0a:13:81:ae:99:6d:7f:1d:d0:b1: bd:bd:54:b1:f9:28:21:7c:54:21:b5:43:f1:14:b6: 60:0e:60:3a:ab:f6:1e:82:ba:74:1b:47:54:65:36: fb:6a:2e:be:92:b6:65:99:98:3e:f8:95:63:e8:f8: cf:40:36:7a:f2:4b:12:2b:73:45:af:ff:1e:f1:d0: d9:64:d6:82:f1:ab:9a:bd:d0:71:34:87:53:56:61: 89:5a:9a:08:18:8f:df:74:23:49:a1:49:ac:c6:ad: e2:14:ac:9d:d3:1c:2d:a3:9f:09:4b:9e:bd:34:68: 0b:ef:03:2a:8f:06:75:37:b7:2f:22:20:62:be:da: b8:4c:e5:f6:9e:dd:6d:e9:69:43:7b:3b:8c:b4:19: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CC:C4:E5:19:54:9D:F7:F6:57:CA:E2:B0:F1:E1:61:29:73:91:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abcb23af-0841-36d7-a9db-5132c11fab9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.69.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d9:78:fe:da:28:9b:28:95:fe:62:11:8c:f6:69:c0:36:96: df:04:e8:a6:87:96:49:ad:c9:58:c8:00:27:e8:82:ff:92:f5: e9:7e:6d:e0:6b:1f:29:4f:1b:3c:e3:86:2a:77:eb:5e:01:2f: 79:8c:f9:06:10:54:2a:d2:1c:1f:90:a0:ed:e1:11:46:ac:b1: 36:65:34:a6:88:5b:b2:d5:38:20:3e:6d:52:4f:3e:8a:56:f2: 47:8f:20:6d:49:7c:93:d1:80:7e:c3:5d:41:4a:53:db:69:3b: 28:93:db:81:88:b5:82:d0:33:18:e9:64:da:28:2c:8f:f0:a1: 9c:02:90:0f:7c:4f:12:04:57:86:12:be:d2:e4:60:96:1a:5c: 91:6b:82:b8:9f:58:18:3e:7f:e1:75:24:03:34:48:47:e8:c8: 33:41:f6:bf:ae:48:c0:83:21:03:e1:4d:00:a8:b0:5e:37:52: be:6e:a4:31:41:97:f5:ad:94:29:fb:5a:79:f1:51:7c:12:d3: 39:43:fa:81:5e:dc:cd:3f:88:30:81:fa:e8:08:f5:95:76:1b: 1a:39:68:74:a7:c7:3d:56:45:82:df:11:ec:e1:23:6a:0c:a7: 65:66:5e:15:ed:ed:8f:46:cf:fc:8c:7d:19:bf:5d:eb:e2:e2: cc:22:ea:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkXtCBbUn3npRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2E2Y2M0MzMtYzQ2Yy00ODA5LWE1OTYtNThhYjQ4Y2I3NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R1yNwV7MW8HS67ZRBuCWQFTBObr3wcoj7nT tV9dz3M4UDj9Lc6fEBQUgdHug2r2WNSvwOBijqo6NqzhPJO2HvyM0R0Vfwn6eCDA TDbvDP5QPPzGk6QcrDekg+MG382fE3WcAhpEPaueBYxSlwoTga6ZbX8d0LG9vVSx +SghfFQhtUPxFLZgDmA6q/Yegrp0G0dUZTb7ai6+krZlmZg++JVj6PjPQDZ68ksS K3NFr/8e8dDZZNaC8auavdBxNIdTVmGJWpoIGI/fdCNJoUmsxq3iFKyd0xwto58J S569NGgL7wMqjwZ1N7cvIiBivtq4TOX2nt1t6WlDezuMtBnQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjMxOUZVJ339lfK4rDx4WEpc5G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWJjYjIzYWYtMDg0MS0z NmQ3LWE5ZGItNTEzMmMxMWZhYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzZeP7aKJsolf5iEYz2acA2lt8E6KaHlkmtyVjIACfogv+S9el+beBr HylPGzzjhip3614BL3mM+QYQVCrSHB+QoO3hEUassTZlNKaIW7LVOCA+bVJPPopW 8kePIG1JfJPRgH7DXUFKU9tpOyiT24GItYLQMxjpZNooLI/woZwCkA98TxIEV4YS vtLkYJYaXJFrgrifWBg+f+F1JAM0SEfoyDNB9r+uSMCDIQPhTQCosF43Ur5upDFB l/WtlCn7WnnxUXwS0zlD+oFe3M0/iDCB+ugI9ZV2Gxo5aHSnxz1WRYLfEezhI2oM p2VmXhXt7Y9Gz/yMfRm/Xevi4swi6pM= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:31 2025 by rpki-client