$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6ff9b4c-adfe-331b-bab8-6a681db8f62b.roa File: b6ff9b4c-adfe-331b-bab8-6a681db8f62b.roa (raw, json) Hash identifier: SsBWFUhcPGof6KDLwvJANjIsQqaC9vxBko8P12Y3fs8= Subject key identifier: 95:90:C2:BA:E5:8D:FE:D7:CF:2B:41:B1:DD:2A:CE:77:5F:86:B6:FA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD210B0DC52D7405617DF500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6ff9b4c-adfe-331b-bab8-6a681db8f62b.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 12008 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:0b:0d:c5:2d:74:05:61:7d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=db8f2fd7-4db8-42a9-bb87-e0c5fbb11860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:0f:80:a8:56:76:1f:9d:71:c1:35:2b:5f: b3:96:66:f4:8b:82:63:3a:0c:9e:98:e6:c0:4e:b5: 7d:b3:c5:b1:4c:ba:23:b4:93:b7:a6:27:ee:0a:89: 0e:f1:d2:20:f5:3c:c5:6a:f4:1c:d8:95:f1:99:12: 98:2f:6c:be:aa:67:f8:01:da:55:04:84:2d:15:34: 83:81:d5:28:eb:c1:c4:2d:e8:0a:c3:10:b7:9f:0d: a9:e6:7a:d9:14:7e:28:0e:d2:73:80:17:62:b6:71: 70:02:15:4d:18:3f:0b:57:d3:7a:4a:8c:83:0b:60: 5b:38:62:b0:a1:b3:c3:d4:4c:95:5a:06:fe:7f:fa: c7:41:99:24:b6:a6:54:c6:a1:d2:17:b9:30:4e:08: 57:69:57:7b:ef:0e:fd:1e:f8:fc:19:86:d8:6f:e3: 4d:b5:ce:f5:e4:57:41:88:72:87:6e:fa:a5:e5:7b: 81:ec:a9:65:b0:0c:0f:a3:30:de:2b:06:b1:82:3d: 1d:c7:30:e3:2b:96:04:a5:af:e6:2f:53:b8:2e:07: 28:de:70:6e:5e:f7:4f:af:80:d8:5a:34:57:2f:4e: f3:b7:29:6d:b2:28:ae:32:dd:f4:eb:01:ea:26:06: d7:93:0f:9d:ba:53:2a:f5:72:0d:b0:ae:bc:85:9e: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:90:C2:BA:E5:8D:FE:D7:CF:2B:41:B1:DD:2A:CE:77:5F:86:B6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b6ff9b4c-adfe-331b-bab8-6a681db8f62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5c:1a:39:6d:4a:e9:66:24:67:d5:66:c5:ed:b9:57:54:79: d4:9d:48:61:af:d6:0b:98:79:42:3b:c3:0a:08:b9:7c:53:9f: cd:b8:78:b7:45:a7:20:a0:48:ee:97:e0:41:60:29:d1:ab:11: 40:b0:bf:cb:3f:8f:8f:76:27:ef:95:3f:db:06:95:82:f3:37: 5a:8d:10:34:a3:f0:31:ad:13:49:ef:7f:89:64:99:77:76:50: dd:0a:c4:cf:1c:8c:f1:c9:91:49:a0:0c:b4:b0:ab:15:22:39: 14:76:ba:aa:bd:23:4e:29:a0:d5:f6:0b:91:db:3f:0b:fc:20: 76:ee:2d:d2:f6:5a:e2:9e:ec:17:1d:f7:46:d0:92:74:59:1e: a6:af:09:90:9f:b7:d3:67:28:2e:30:d5:38:42:20:23:bf:c7: d0:27:6a:e0:15:7b:94:ee:c5:50:be:0a:77:cf:03:4d:3f:25: db:49:e9:52:11:1a:00:c5:ec:71:f7:b4:ac:a0:36:be:fd:69: 23:b2:c0:e5:94:4a:23:4e:5f:b6:e4:00:4f:b4:d5:49:f4:83: dd:63:59:f1:b5:62:c4:fc:2b:04:5c:2e:f1:3f:56:43:6f:a6: 4a:42:9a:94:47:dc:1f:9e:62:86:4a:3d:89:03:da:7b:37:21: f3:21:aa:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQsNxS10BWF99QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZGI4ZjJmZDctNGRiOC00MmE5LWJiODctZTBjNWZiYjExODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD4PgKhWdh+dccE1K1+zlmb0i4JjOgyemObA TrV9s8WxTLojtJO3pifuCokO8dIg9TzFavQc2JXxmRKYL2y+qmf4AdpVBIQtFTSD gdUo68HELegKwxC3nw2p5nrZFH4oDtJzgBditnFwAhVNGD8LV9N6SoyDC2BbOGKw obPD1EyVWgb+f/rHQZkktqZUxqHSF7kwTghXaVd77w79Hvj8GYbYb+NNtc715FdB iHKHbvql5XuB7KllsAwPozDeKwaxgj0dxzDjK5YEpa/mL1O4Lgco3nBuXvdPr4DY WjRXL07ztyltsiiuMt306wHqJgbXkw+dulMq9XINsK68hZ4PjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWQwrrljf7XzytBsd0qzndfhrb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjZmZjliNGMtYWRmZS0z MzFiLWJhYjgtNmE2ODFkYjhmNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5cGjltSulmJGfVZsXtuVdUedSdSGGv1guYeUI7wwoIuXxTn824eLdF pyCgSO6X4EFgKdGrEUCwv8s/j492J++VP9sGlYLzN1qNEDSj8DGtE0nvf4lkmXd2 UN0KxM8cjPHJkUmgDLSwqxUiORR2uqq9I04poNX2C5HbPwv8IHbuLdL2WuKe7Bcd 90bQknRZHqavCZCft9NnKC4w1ThCICO/x9AnauAVe5TuxVC+CnfPA00/JdtJ6VIR GgDF7HH3tKygNr79aSOywOWUSiNOX7bkAE+01Un0g91jWfG1YsT8KwRcLvE/VkNv pkpCmpRH3B+eYoZKPYkD2ns3IfMhqsw= -----END CERTIFICATE-----Generated at Mon Apr 7 01:08:22 2025 by rpki-client