$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b401e867-f96b-3336-bda3-e756a60a85f1.roa File: b401e867-f96b-3336-bda3-e756a60a85f1.roa (raw, json) Hash identifier: EwZaC4eZth1Z3CTMJx46iFOHyoaS5geImMlOmmVTQk4= Subject key identifier: 42:91:AF:CA:D6:0C:67:BE:7D:D0:70:83:49:00:28:80:14:9B:6F:A1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DF330AAF3D71B01B8830 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b401e867-f96b-3336-bda3-e756a60a85f1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397226 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:df:33:0a:af:3d:71:b0:1b:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bd3195ff-2bdb-49a0-9c87-853050b79282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:4f:66:99:21:7b:6b:32:e8:10:16:e1:c1: b4:68:5e:67:e4:7a:32:8a:17:08:61:0d:d4:e1:6a: 6b:a0:8d:ef:a0:c6:ba:d1:e2:d4:aa:ec:9b:46:72: ea:a4:51:5f:a3:ca:01:f7:a2:76:05:04:d5:f0:43: 6a:ab:af:ae:e6:35:8f:f5:0e:95:93:b2:3d:57:70: e4:d0:57:7e:57:27:1c:44:48:e3:8e:75:e2:a9:63: 87:03:e7:06:c0:36:50:11:dc:fe:8a:39:cb:80:59: 91:be:58:c8:7b:1a:44:d7:e1:0a:b5:b4:13:77:23: 5f:b6:f3:a9:51:b2:0a:67:99:d0:d5:9e:e1:c2:56: 66:f6:c0:11:b4:92:37:01:3c:ed:bd:51:0b:4c:89: 0f:11:70:70:0b:ea:63:dd:06:6d:21:ac:69:bb:ae: f9:76:67:82:a5:b9:4c:54:e7:a7:62:68:39:6d:36: a7:c8:35:e3:9e:9a:2b:79:84:93:11:8a:0f:2a:33: 68:d7:19:1b:bc:5c:57:8c:53:4d:b2:91:60:2f:5f: a2:f4:17:a7:ad:a5:4b:be:99:37:02:9a:2d:c4:c9: 7c:aa:af:0b:34:5e:cb:10:c7:2f:e9:3c:9a:a0:70: d3:db:56:d5:de:16:d2:0a:d8:d9:39:ca:a5:e2:d2: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:AF:CA:D6:0C:67:BE:7D:D0:70:83:49:00:28:80:14:9B:6F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b401e867-f96b-3336-bda3-e756a60a85f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:56:64:89:ae:a4:a1:c2:27:97:eb:79:88:69:c1:ce:04:57: 0d:5c:6f:da:62:2a:eb:eb:52:ed:cb:7c:5a:44:d1:1b:11:07: 9f:17:0f:67:2b:61:28:c2:9c:a9:b7:be:d1:cc:73:3e:17:0a: b5:2e:c8:24:8b:54:34:04:72:2e:22:c3:e5:17:1b:54:a8:28: cf:79:fa:f7:b3:d4:3b:59:ba:80:79:d6:40:e8:0e:54:cd:50: 0c:4d:d3:01:d1:a8:44:dc:e9:2b:34:56:89:8f:22:e8:b2:78: df:67:dc:f8:ed:b6:0c:ae:62:d5:1f:b6:e9:8c:c1:af:92:ce: bb:0c:e6:14:a1:4c:aa:9b:e8:fb:bc:b2:ef:10:f6:7c:51:da: 18:ab:53:b4:a2:85:c0:13:30:12:ca:bc:c4:04:84:bf:28:4e: 4b:45:cc:34:99:70:e9:0d:f8:01:84:90:4e:16:13:f3:0a:2a: d0:8b:3f:3d:b6:26:56:0a:8b:32:c8:45:5a:8b:e6:9b:74:fe: 3a:13:f9:3e:42:9c:0c:ef:ea:ca:3b:04:5e:44:35:33:a4:b6: 16:12:a2:4d:cb:71:16:d9:d5:ce:83:86:f3:90:ff:0d:d4:65: f2:47:c7:0b:da:be:c3:8b:7f:92:87:5b:80:79:4d:f4:1a:a3: be:dc:5f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt8zCq89cbAbiDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmQzMTk1ZmYtMmJkYi00OWEwLTljODctODUzMDUwYjc5MjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSRPZpkhe2sy6BAW4cG0aF5n5HoyihcIYQ3U 4WproI3voMa60eLUquybRnLqpFFfo8oB96J2BQTV8ENqq6+u5jWP9Q6Vk7I9V3Dk 0Fd+VyccREjjjnXiqWOHA+cGwDZQEdz+ijnLgFmRvljIexpE1+EKtbQTdyNftvOp UbIKZ5nQ1Z7hwlZm9sARtJI3ATztvVELTIkPEXBwC+pj3QZtIaxpu675dmeCpblM VOenYmg5bTanyDXjnporeYSTEYoPKjNo1xkbvFxXjFNNspFgL1+i9BenraVLvpk3 ApotxMl8qq8LNF7LEMcv6TyaoHDT21bV3hbSCtjZOcql4tKrewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKRr8rWDGe+fdBwg0kAKIAUm2+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjQwMWU4NjctZjk2Yi0z MzM2LWJkYTMtZTc1NmE2MGE4NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9WZImupKHCJ5freYhpwc4EVw1cb9piKuvrUu3LfFpE0RsRB58XD2cr YSjCnKm3vtHMcz4XCrUuyCSLVDQEci4iw+UXG1SoKM95+vez1DtZuoB51kDoDlTN UAxN0wHRqETc6Ss0VomPIuiyeN9n3PjttgyuYtUftumMwa+SzrsM5hShTKqb6Pu8 su8Q9nxR2hirU7SihcATMBLKvMQEhL8oTktFzDSZcOkN+AGEkE4WE/MKKtCLPz22 JlYKizLIRVqL5pt0/joT+T5CnAzv6so7BF5ENTOkthYSok3LcRbZ1c6DhvOQ/w3U ZfJHxwvavsOLf5KHW4B5TfQao77cX78= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:33 2025 by rpki-client