$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa File: bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa (raw, json) Hash identifier: uyHcOYux5+eF1PMPZYXGP4/rvLMeeWx6exebaN2O4Ug= Subject key identifier: B3:04:7C:66:EF:8B:27:70:0B:D2:07:00:5C:4A:BC:1D:EB:8A:02:16 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996566687730428F657EEE4 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397227 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:56:66:87:73:04:28:f6:57:ee:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ce92b4d5-949a-401f-a797-b65004b55225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:34:f5:df:11:c1:ad:28:da:87:2d:c1:ce: 60:dd:f6:d4:3b:8c:37:86:69:fc:78:6b:6a:55:7f: 3c:76:70:c8:3e:6d:3a:53:dc:d0:24:88:06:78:59: e4:ca:86:8e:34:8f:24:26:f1:c7:f5:18:be:a8:b1: 7c:0c:99:1b:7c:db:b0:07:25:d2:89:60:4b:46:60: 04:cd:d8:ef:18:c5:64:2e:d2:9f:da:24:b0:16:dd: ab:5f:13:36:65:38:51:12:26:d1:f6:c0:53:a8:64: 14:98:ba:ce:18:84:70:fd:5c:88:85:fd:37:38:e8: f0:3a:1f:be:22:6d:6a:bc:da:34:42:94:f5:38:68: af:88:76:0f:4a:db:f4:f8:29:fa:f9:66:ab:50:07: fb:e3:dc:2c:b6:b6:35:f7:15:98:c3:e9:a6:ef:56: 16:45:f0:97:3b:22:2f:11:bb:d6:59:c3:e2:42:67: 48:fe:2d:6e:11:4b:23:9a:04:5e:0e:18:40:30:59: 57:7b:1e:79:5e:cc:17:e0:8f:49:72:97:08:30:2b: 36:ac:71:00:5d:bf:75:5f:5f:a2:25:d5:39:5a:06: fd:84:4c:d8:7f:bf:dc:ff:81:b3:31:3c:59:6c:29: 77:9f:cb:76:6b:09:7c:26:c5:5a:db:a3:af:81:36: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:04:7C:66:EF:8B:27:70:0B:D2:07:00:5C:4A:BC:1D:EB:8A:02:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6a:24:cc:1b:c5:39:62:8b:35:c7:ca:e1:7a:9e:d7:9e:9f: 79:14:fd:27:6b:00:6a:bc:a7:25:69:1a:ce:c5:27:b0:27:75: 5c:bf:71:ba:d9:06:51:f1:c1:3d:9a:43:02:fc:e1:3b:bc:02: 81:ec:8a:ec:dc:8b:4d:72:e1:61:7b:ac:3b:3d:24:51:ca:27: f8:0b:f2:d4:84:d5:5c:aa:f9:9f:31:3f:4f:0e:2f:b5:07:68: 26:1f:82:e5:cc:77:65:05:e8:2c:f5:9d:ba:8f:1e:0b:57:2d: cd:77:61:72:43:cb:67:28:72:f5:d5:cf:43:39:a5:66:96:a4: 32:d3:21:d7:65:4d:d0:e5:25:ac:a5:7f:9b:46:62:d5:4d:90: e7:a9:a4:be:91:96:30:36:e3:7c:e7:79:02:24:be:78:ce:82: 5d:48:7a:dc:b7:bc:35:0d:a1:cc:4f:f6:88:0d:17:4c:10:05: 96:f3:0b:5d:6e:1a:06:29:b3:3b:bc:3e:8b:75:fb:a6:01:65: 2f:b4:c5:89:08:ec:31:12:08:b9:fa:a8:2d:ec:b6:e2:44:24: be:35:ba:02:18:d3:f3:1c:a6:c1:b5:17:12:fe:a2:2e:a4:45: 63:69:e6:7f:58:eb:b6:bd:92:13:14:07:0e:e8:33:78:34:7a: 0e:20:0d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllZmh3MEKPZX7uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U5MmI0ZDUtOTQ5YS00MDFmLWE3OTctYjY1MDA0YjU1MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtI09d8Rwa0o2octwc5g3fbUO4w3hmn8eGtq VX88dnDIPm06U9zQJIgGeFnkyoaONI8kJvHH9Ri+qLF8DJkbfNuwByXSiWBLRmAE zdjvGMVkLtKf2iSwFt2rXxM2ZThREibR9sBTqGQUmLrOGIRw/VyIhf03OOjwOh++ Im1qvNo0QpT1OGiviHYPStv0+Cn6+WarUAf749wstrY19xWYw+mm71YWRfCXOyIv EbvWWcPiQmdI/i1uEUsjmgReDhhAMFlXex55XswX4I9JcpcIMCs2rHEAXb91X1+i JdU5Wgb9hEzYf7/c/4GzMTxZbCl3n8t2awl8JsVa26OvgTa9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMEfGbviydwC9IHAFxKvB3rigIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmIwNDY3OTUtMTkwZi0z ZThiLTg5MWUtYzJmNDhmYTJmNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVqJMwbxTliizXHyuF6nteen3kU/SdrAGq8pyVpGs7FJ7AndVy/cbrZ BlHxwT2aQwL84Tu8AoHsiuzci01y4WF7rDs9JFHKJ/gL8tSE1Vyq+Z8xP08OL7UH aCYfguXMd2UF6Cz1nbqPHgtXLc13YXJDy2cocvXVz0M5pWaWpDLTIddlTdDlJayl f5tGYtVNkOeppL6RljA243zneQIkvnjOgl1Iety3vDUNocxP9ogNF0wQBZbzC11u GgYpszu8Pot1+6YBZS+0xYkI7DESCLn6qC3stuJEJL41ugIY0/McpsG1FxL+oi6k RWNp5n9Y67a9khMUBw7oM3g0eg4gDXc= -----END CERTIFICATE-----Generated at Sun Apr 6 09:45:46 2025 by rpki-client