$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afed9f44-7e3e-3d54-914b-d88c8b2f9ffe.roa File: afed9f44-7e3e-3d54-914b-d88c8b2f9ffe.roa (raw, json) Hash identifier: tHT5BomfNnqkSYXD6GkBfW7uY8qT6m1sjI4sBHGOnE8= Subject key identifier: E9:4B:C4:F7:FC:3A:DD:61:50:40:C7:43:26:4B:9D:90:5B:B4:18:D4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210A1C80F746809725E6A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afed9f44-7e3e-3d54-914b-d88c8b2f9ffe.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397230 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0a:1c:80:f7:46:80:97:25:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=1deb47e7-622c-447b-96ba-afa678ea8ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:ea:c3:c4:9b:40:d9:b7:1f:d8:61:c6:1c: 0f:40:5d:33:6b:01:fe:ba:cd:1f:b1:dd:2f:ee:0f: 35:b5:79:71:c9:f4:5f:c9:96:cd:4c:2c:0d:f6:54: d2:33:41:90:f5:c9:4b:3a:26:e1:f3:b6:0f:dc:cd: d1:c0:fc:00:de:b4:ba:5f:54:53:62:4f:b3:17:d0: e6:90:35:a7:c8:48:4e:ca:cf:3a:26:fd:ee:23:ee: 44:4f:4c:83:e7:06:e0:62:7b:f0:80:f8:a4:ed:7f: 9f:b5:ef:b5:1d:51:10:f9:02:a5:98:3e:b8:75:97: eb:2a:e1:86:fb:db:54:e9:ef:31:1c:b3:ea:20:b4: 28:bd:a9:a4:2f:7a:1e:36:4e:ab:6a:46:72:4a:87: ce:16:3d:66:59:0b:bc:23:45:90:54:b6:c1:ab:16: 32:62:d4:1f:86:fa:86:45:c5:16:01:dd:fc:47:7a: 65:eb:9b:3a:8e:c3:3a:b0:49:83:0f:94:0a:74:60: 87:e8:c3:52:68:d4:11:98:15:25:16:50:4f:0b:24: c0:56:d7:10:69:ea:fa:12:10:b9:77:9d:cc:b2:0f: 50:09:b9:b0:a5:90:82:4a:e1:dc:d1:7d:76:96:cb: c9:fd:96:df:5f:9d:14:3f:87:d4:03:dc:86:ae:df: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4B:C4:F7:FC:3A:DD:61:50:40:C7:43:26:4B:9D:90:5B:B4:18:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afed9f44-7e3e-3d54-914b-d88c8b2f9ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9e:aa:b8:8d:a7:fd:b2:58:c4:62:c1:38:3c:98:b2:58:00: 96:cd:2c:98:09:f3:ba:83:1d:b5:7f:74:a1:3d:43:21:11:d0: 2c:a6:d7:e4:12:b0:d4:b7:2f:51:85:5d:b7:7e:86:6b:15:fa: c3:c8:77:4f:f6:6c:89:f6:fd:59:8e:1b:4f:06:b0:e0:48:93: ce:7a:ee:d0:24:0f:12:a2:b7:a4:72:c9:b4:b7:f2:10:bc:0c: 16:9a:86:48:9a:88:9f:31:3d:83:26:15:3d:25:79:79:0c:f6: 36:8a:d9:fc:6b:2b:69:20:52:b1:49:09:d6:af:3f:76:87:63: 8d:1a:33:d7:67:7e:0d:d9:8f:d6:0d:8e:d1:87:74:c5:36:f2: cd:ba:f0:9e:7a:b3:e0:8c:ca:86:9f:b7:c2:cc:c1:bc:4f:a5: 6d:68:8a:4c:fe:2d:a1:1c:8d:71:02:e2:ec:f6:2f:f5:2a:64: 38:c1:81:3f:0c:17:dd:36:8c:4e:df:a8:f3:0f:35:02:3f:68: 20:b3:f3:b5:71:90:0e:8d:81:03:5c:3c:8c:c4:e9:bb:80:0f: dc:71:54:a3:f5:6c:25:71:2c:cb:bb:52:3a:1b:9e:11:5d:08: 09:29:95:ce:d9:73:d1:a7:ab:b4:d2:62:f4:1e:f2:e8:9b:7c: 9a:f3:b1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQocgPdGgJcl5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MWRlYjQ3ZTctNjIyYy00NDdiLTk2YmEtYWZhNjc4ZWE4Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYHqw8SbQNm3H9hhxhwPQF0zawH+us0fsd0v 7g81tXlxyfRfyZbNTCwN9lTSM0GQ9clLOibh87YP3M3RwPwA3rS6X1RTYk+zF9Dm kDWnyEhOys86Jv3uI+5ET0yD5wbgYnvwgPik7X+fte+1HVEQ+QKlmD64dZfrKuGG +9tU6e8xHLPqILQovamkL3oeNk6rakZySofOFj1mWQu8I0WQVLbBqxYyYtQfhvqG RcUWAd38R3pl65s6jsM6sEmDD5QKdGCH6MNSaNQRmBUlFlBPCyTAVtcQaer6EhC5 d53Msg9QCbmwpZCCSuHc0X12lsvJ/ZbfX50UP4fUA9yGrt8gaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlLxPf8Ot1hUEDHQyZLnZBbtBjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWZlZDlmNDQtN2UzZS0z ZDU0LTkxNGItZDg4YzhiMmY5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaeqriNp/2yWMRiwTg8mLJYAJbNLJgJ87qDHbV/dKE9QyER0Cym1+QS sNS3L1GFXbd+hmsV+sPId0/2bIn2/VmOG08GsOBIk8567tAkDxKit6RyybS38hC8 DBaahkiaiJ8xPYMmFT0leXkM9jaK2fxrK2kgUrFJCdavP3aHY40aM9dnfg3Zj9YN jtGHdMU28s268J56s+CMyoaft8LMwbxPpW1oikz+LaEcjXEC4uz2L/UqZDjBgT8M F902jE7fqPMPNQI/aCCz87VxkA6NgQNcPIzE6buAD9xxVKP1bCVxLMu7UjobnhFd CAkplc7Zc9Gnq7TSYvQe8uibfJrzsSA= -----END CERTIFICATE-----Generated at Sun Apr 6 00:04:11 2025 by rpki-client