$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa File: b4c617f6-eff6-30a6-8ecc-742537d4d899.roa (raw, json) Hash identifier: tn+Pk764VCJ36K347XAUdkFpnMnqRv/0Llkx8rpg124= Subject key identifier: 4E:B6:3C:26:34:A7:79:F4:DF:27:86:6F:D7:54:73:10:AA:9C:7B:7F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DE1B55E67DDE1C162D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397237 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:1b:55:e6:7d:de:1c:16:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bf3084b0-3a42-479e-adbf-e8e4906a400a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:85:ad:80:38:fc:af:72:bd:c4:67:c8:99: 5b:2f:3f:b8:8f:93:59:a2:fc:f5:81:55:ea:1b:45: 30:01:9e:5e:a8:b8:c0:4e:b0:c8:a0:75:c5:9b:8c: d7:c6:12:50:df:28:15:ad:ca:4d:56:9d:ee:a8:21: 8e:22:d3:74:eb:b7:56:05:3b:4b:5e:01:f8:bb:2d: 57:db:ae:41:02:66:ef:9f:3c:9f:9e:b6:e3:a2:d7: 5d:a7:c1:5e:3f:6d:de:71:7f:d8:77:7d:44:18:8b: ed:5f:6f:c1:1f:dd:98:36:06:7f:68:35:1c:25:39: fd:ea:89:2f:15:a9:d8:7a:10:12:d2:5d:64:fb:40: a9:e0:e3:5a:34:35:59:4f:48:98:e8:0f:38:35:91: fe:fc:dc:41:49:5f:23:ac:6e:68:87:5c:d6:cb:8e: f9:a2:34:55:0d:01:0d:af:20:80:af:7c:66:4f:db: e6:ed:dd:76:30:3d:5d:00:09:ed:00:10:6e:c0:18: 51:7f:35:66:78:95:39:09:2f:b2:35:09:41:27:90: 27:1f:5f:f9:21:8a:6b:fe:47:02:42:55:f0:77:e6: 8d:93:0b:8e:a6:db:0f:b1:6f:01:07:72:90:d1:c3: 08:96:68:cc:06:e5:48:4b:d3:38:c2:77:cc:6b:22: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B6:3C:26:34:A7:79:F4:DF:27:86:6F:D7:54:73:10:AA:9C:7B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a2:13:ca:ee:5d:fa:0e:43:b0:72:8c:ae:54:87:53:68:2c: d1:28:b6:f6:41:0d:f9:dc:16:12:58:b3:8f:8c:95:b5:9b:a3: 96:cf:6f:e3:88:83:c4:42:7a:cd:c2:32:0a:1b:82:a0:da:7e: 28:49:99:a0:1e:14:ef:03:a9:43:c4:51:98:81:dc:7b:06:9e: b5:1f:5f:79:3c:ca:c5:7c:83:3f:7b:be:aa:f4:25:7e:7c:8b: 0d:76:32:b7:89:62:52:ab:77:87:77:75:66:29:ad:02:74:4b: 15:35:dd:11:a2:09:f9:1b:9b:46:87:91:95:6f:9a:0b:51:df: 04:fc:e7:26:20:4b:35:07:f0:aa:69:0a:f0:d3:92:35:ab:77: d4:3d:d2:94:ca:75:59:e0:7b:4e:12:d3:15:df:b7:d1:97:a8: f3:df:ce:04:db:a6:4a:19:13:56:fd:69:b8:b2:1e:15:aa:e2: 5a:c5:b8:6e:85:41:12:61:3a:d6:ad:a0:0c:35:59:8c:a9:7c: ef:84:b5:c9:12:23:5d:e5:bf:68:94:f0:45:6e:11:19:91:22: 6c:31:31:01:7e:05:10:7e:d5:ab:40:a2:c9:fe:bc:56:45:01: bb:7e:09:df:44:ee:d8:a9:15:2b:ce:79:d2:2f:34:fc:09:dc: 7e:bd:6a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt4bVeZ93hwWLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmYzMDg0YjAtM2E0Mi00NzllLWFkYmYtZThlNDkwNmE0MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEuFrYA4/K9yvcRnyJlbLz+4j5NZovz1gVXq G0UwAZ5eqLjATrDIoHXFm4zXxhJQ3ygVrcpNVp3uqCGOItN067dWBTtLXgH4uy1X 265BAmbvnzyfnrbjotddp8FeP23ecX/Yd31EGIvtX2/BH92YNgZ/aDUcJTn96okv FanYehAS0l1k+0Cp4ONaNDVZT0iY6A84NZH+/NxBSV8jrG5oh1zWy475ojRVDQEN ryCAr3xmT9vm7d12MD1dAAntABBuwBhRfzVmeJU5CS+yNQlBJ5AnH1/5IYpr/kcC QlXwd+aNkwuOptsPsW8BB3KQ0cMIlmjMBuVIS9M4wnfMayIOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE62PCY0p3n03yeGb9dUcxCqnHt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjRjNjE3ZjYtZWZmNi0z MGE2LThlY2MtNzQyNTM3ZDRkODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyiE8ruXfoOQ7ByjK5Uh1NoLNEotvZBDfncFhJYs4+MlbWbo5bPb+OI g8RCes3CMgobgqDafihJmaAeFO8DqUPEUZiB3HsGnrUfX3k8ysV8gz97vqr0JX58 iw12MreJYlKrd4d3dWYprQJ0SxU13RGiCfkbm0aHkZVvmgtR3wT85yYgSzUH8Kpp CvDTkjWrd9Q90pTKdVnge04S0xXft9GXqPPfzgTbpkoZE1b9abiyHhWq4lrFuG6F QRJhOtatoAw1WYypfO+EtckSI13lv2iU8EVuERmRImwxMQF+BRB+1atAosn+vFZF Abt+Cd9E7tipFSvOedIvNPwJ3H69alQ= -----END CERTIFICATE-----Generated at Sun Apr 6 03:31:31 2025 by rpki-client