$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa File: af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa (raw, json) Hash identifier: ziuNCDJP2qnxh5gwXGDNdaDUuyHYmbZwxMQs4Hqy0So= Subject key identifier: 57:3D:17:90:EB:46:8E:9D:5A:5D:4E:AB:87:D2:4C:3D:6E:A7:2B:8D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20E923FE766DC073732080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397214 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e9:23:fe:76:6d:c0:73:73:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=26afeae9-5696-4bb7-9e98-93addeb20f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:d2:44:f2:af:10:6e:75:27:f2:4f:fd:eb: 89:32:0a:f4:5b:90:2f:b8:26:3a:77:4b:0e:9e:8c: 62:d2:b5:7a:09:3f:32:10:41:e3:9f:7f:e0:aa:d8: 3d:ea:66:3d:b9:f6:fb:48:ec:f7:3f:86:1b:b9:01: 37:97:79:8b:e2:06:77:78:bb:66:92:f3:ce:9a:1e: 5a:9c:6f:09:a9:0b:d6:97:21:54:6f:3a:1f:e1:41: f8:2e:b2:1e:32:e2:fd:ba:e3:ad:e9:33:93:fd:1c: 10:c4:f8:37:49:a7:6d:10:20:b7:d7:21:6f:3a:f7: aa:d0:bf:67:b9:65:b7:a1:f0:80:e3:e0:f5:da:62: cb:e8:fb:a3:74:5d:b5:be:59:1a:07:45:c9:c1:ad: 27:a7:e1:18:11:f7:f2:86:f5:e9:c9:09:a3:1e:be: dc:d9:71:1e:29:8c:5b:a8:7f:47:cf:e0:74:93:90: fc:c2:da:f9:e6:91:ed:98:b0:6e:ff:2a:d5:42:f9: 0a:35:77:fd:15:6a:7e:7f:55:48:d8:15:c6:44:80: a3:b3:7f:61:61:d3:ad:e3:0e:58:8a:01:8a:8b:70: 18:f5:56:11:81:db:6a:f3:00:78:6c:d1:8d:6a:a3: 1a:c8:16:2d:5a:bb:cf:35:d5:69:91:f3:24:7e:65: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:17:90:EB:46:8E:9D:5A:5D:4E:AB:87:D2:4C:3D:6E:A7:2B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:54:b9:e7:8a:d1:d1:f5:36:11:c0:4a:f8:33:a9:f6:8d:b8: b8:87:06:94:1f:02:1e:e4:0e:13:fe:c4:a8:2d:64:77:8a:58: 8a:37:d5:a8:e8:db:91:f4:5d:cd:86:3d:41:1c:48:15:23:8b: 40:7d:5f:02:e4:91:c5:ee:37:a3:14:e3:0f:c5:24:c7:94:a8: cb:f6:ee:5a:c0:b0:bb:de:b0:35:1e:76:80:67:d0:15:29:b5: 55:bb:44:7e:e1:73:d9:f6:42:f2:f6:d0:91:53:0b:3d:5e:23: 4a:9d:aa:94:2d:ce:47:2b:8a:9d:b8:21:13:5b:0a:6f:33:66: db:d0:78:fb:b2:c0:68:67:cc:3d:17:67:3b:79:af:ea:d9:a3: e8:35:ab:05:6f:f6:7a:77:24:71:ac:5b:2d:95:d7:6e:0d:3d: d2:42:28:d6:1e:89:24:76:79:ad:c1:c2:9c:9e:37:7e:f9:bf: 0d:ed:44:5b:c6:69:1d:1a:3a:19:32:2e:5b:19:7a:3b:60:84: c3:d8:c6:23:0a:9f:7a:2d:fc:42:56:ae:08:1f:98:74:19:a3: ae:11:1d:75:e5:56:52:c0:53:76:6c:24:8c:3a:a0:26:56:aa: b9:4d:3e:cb:a2:52:47:17:be:05:18:f2:dc:23:d7:81:0e:cd: 21:b8:ec:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOkj/nZtwHNzIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MjZhZmVhZTktNTY5Ni00YmI3LTllOTgtOTNhZGRlYjIwZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm63SRPKvEG51J/JP/euJMgr0W5AvuCY6d0sO noxi0rV6CT8yEEHjn3/gqtg96mY9ufb7SOz3P4YbuQE3l3mL4gZ3eLtmkvPOmh5a nG8JqQvWlyFUbzof4UH4LrIeMuL9uuOt6TOT/RwQxPg3SadtECC31yFvOveq0L9n uWW3ofCA4+D12mLL6PujdF21vlkaB0XJwa0np+EYEffyhvXpyQmjHr7c2XEeKYxb qH9Hz+B0k5D8wtr55pHtmLBu/yrVQvkKNXf9FWp+f1VI2BXGRICjs39hYdOt4w5Y igGKi3AY9VYRgdtq8wB4bNGNaqMayBYtWrvPNdVpkfMkfmUHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc9F5DrRo6dWl1Oq4fSTD1upyuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWYzOGEwYjAtOTUyNS0z YmY1LTk1ZTItYTgxMjE4ZWFkYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1UueeK0dH1NhHASvgzqfaNuLiHBpQfAh7kDhP+xKgtZHeKWIo31ajo 25H0Xc2GPUEcSBUji0B9XwLkkcXuN6MU4w/FJMeUqMv27lrAsLvesDUedoBn0BUp tVW7RH7hc9n2QvL20JFTCz1eI0qdqpQtzkcrip24IRNbCm8zZtvQePuywGhnzD0X Zzt5r+rZo+g1qwVv9np3JHGsWy2V124NPdJCKNYeiSR2ea3BwpyeN375vw3tRFvG aR0aOhkyLlsZejtghMPYxiMKn3ot/EJWrggfmHQZo64RHXXlVlLAU3ZsJIw6oCZW qrlNPsuiUkcXvgUY8twj14EOzSG47KQ= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:43 2025 by rpki-client