$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af4df03f-3642-3b40-b595-099065c22a0d.roa File: af4df03f-3642-3b40-b595-099065c22a0d.roa (raw, json) Hash identifier: eMeQy1wdHayNvyxFuRcGNAp4di3/gE0Zqvy/Yet3b9E= Subject key identifier: 78:BF:A0:D7:5A:D6:F4:F3:48:EC:EB:22:BE:AB:A5:4C:BC:EA:04:CD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2100B141B523056F0E8280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af4df03f-3642-3b40-b595-099065c22a0d.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397230 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:00:b1:41:b5:23:05:6f:0e:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=8f8a510f-279f-4153-ba50-522e836dcdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:b5:e6:06:b1:97:fb:52:88:a9:49:2d:de: 9b:67:12:5a:28:f3:b8:08:c9:05:bb:a4:0b:28:c8: a3:30:ed:26:8e:a8:21:a3:33:80:c1:57:4b:5c:4c: 97:2b:09:5d:a4:ea:c5:fc:16:4a:b5:a4:28:cf:bd: 81:85:6a:ef:7d:5b:f8:6d:df:18:a5:0e:89:0c:ef: 6f:96:97:e4:7a:08:0b:09:fb:04:19:8b:c4:77:7c: e4:47:2f:9a:67:82:19:3d:a8:94:a2:56:e0:ce:6e: 2e:41:8e:82:80:01:fe:3e:cf:51:b4:e8:56:f1:64: 68:9f:55:25:da:a1:7c:12:91:54:b9:81:2f:08:01: db:07:ae:11:70:fd:7b:0a:81:d2:17:b7:fc:74:69: b8:d2:b1:7c:86:e6:45:b0:67:2e:59:67:dc:53:24: 09:6f:94:6f:d9:f9:39:6f:59:01:bd:1b:78:18:a6: ac:37:4d:68:39:01:78:dc:cd:95:c0:8f:95:d3:eb: cf:5f:ca:e6:2a:5c:5f:8f:fd:83:f3:db:4a:83:90: 6f:51:34:8a:e9:87:64:41:cf:f6:54:b6:97:1a:ce: 82:f9:be:d7:32:a7:c2:ec:2a:29:d5:4a:79:88:b2: 9f:e9:1f:a3:bb:0a:04:2f:15:62:cb:f7:08:62:e1: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:A0:D7:5A:D6:F4:F3:48:EC:EB:22:BE:AB:A5:4C:BC:EA:04:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af4df03f-3642-3b40-b595-099065c22a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:18:41:8b:5d:8e:4c:e6:5d:6c:75:68:bf:3d:77:0b:ce:11: 25:e6:60:40:b6:12:82:05:6f:dc:cd:7f:24:2f:e9:5f:c4:03: 1e:c2:a5:6c:e9:cf:27:97:f4:af:ed:5b:97:d2:19:ff:aa:f3: 5e:49:05:f3:af:05:51:84:68:a8:dc:03:7e:2e:d5:fd:79:0f: ff:b4:61:a1:eb:71:c2:43:ca:d3:5c:83:21:ce:31:c5:6a:72: 95:01:9e:3f:d6:37:f1:07:b5:ab:84:7c:7b:8b:0d:2a:5a:32: 1e:e6:db:9e:58:21:f5:fc:ff:1b:f2:7f:e3:6e:8b:cb:4e:39: b4:e6:71:c8:d2:28:7a:bd:8f:7b:34:10:aa:aa:e6:e2:b1:b8: 97:73:75:c1:c8:ef:6b:3a:b3:a0:ab:56:22:f6:4d:57:d2:cb: 36:db:ba:3c:f1:29:f7:8a:24:6e:7f:45:31:6e:38:54:21:b1: 46:57:5d:8b:e8:6f:0f:59:66:a0:18:a2:af:05:b5:f7:bc:58: cc:2d:49:42:66:d6:11:5a:eb:f6:29:69:52:fe:05:08:07:ef: 96:d3:16:1c:df:73:42:79:30:d2:63:cf:1e:c9:0d:b9:ca:b1: eb:3d:0f:a1:ec:58:be:29:7b:bd:59:76:c4:e0:ca:cb:2d:53: 7c:48:eb:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQCxQbUjBW8OgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk OGY4YTUxMGYtMjc5Zi00MTUzLWJhNTAtNTIyZTgzNmRjZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19m15gaxl/tSiKlJLd6bZxJaKPO4CMkFu6QL KMijMO0mjqghozOAwVdLXEyXKwldpOrF/BZKtaQoz72BhWrvfVv4bd8YpQ6JDO9v lpfkeggLCfsEGYvEd3zkRy+aZ4IZPaiUolbgzm4uQY6CgAH+Ps9RtOhW8WRon1Ul 2qF8EpFUuYEvCAHbB64RcP17CoHSF7f8dGm40rF8huZFsGcuWWfcUyQJb5Rv2fk5 b1kBvRt4GKasN01oOQF43M2VwI+V0+vPX8rmKlxfj/2D89tKg5BvUTSK6YdkQc/2 VLaXGs6C+b7XMqfC7Cop1Up5iLKf6R+juwoELxViy/cIYuExLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi/oNda1vTzSOzrIr6rpUy86gTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY0ZGYwM2YtMzY0Mi0z YjQwLWI1OTUtMDk5MDY1YzIyYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcYQYtdjkzmXWx1aL89dwvOESXmYEC2EoIFb9zNfyQv6V/EAx7CpWzp zyeX9K/tW5fSGf+q815JBfOvBVGEaKjcA34u1f15D/+0YaHrccJDytNcgyHOMcVq cpUBnj/WN/EHtauEfHuLDSpaMh7m255YIfX8/xvyf+Nui8tOObTmccjSKHq9j3s0 EKqq5uKxuJdzdcHI72s6s6CrViL2TVfSyzbbujzxKfeKJG5/RTFuOFQhsUZXXYvo bw9ZZqAYoq8Ftfe8WMwtSUJm1hFa6/YpaVL+BQgH75bTFhzfc0J5MNJjzx7JDbnK ses9D6HsWL4pe71ZdsTgysstU3xI60M= -----END CERTIFICATE-----Generated at Sun Apr 6 07:40:20 2025 by rpki-client