$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa File: bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa (raw, json) Hash identifier: D9iP+Vr9xsz4xUYPYURHMl/rdTKnxJ99yPXsX1gcrCI= Subject key identifier: 31:D2:20:46:7C:C7:C4:D2:AB:A9:CC:A6:EE:3F:98:1E:A7:87:53:56 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996596D3D092BD0AAD30780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397226 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:59:6d:3d:09:2b:d0:aa:d3:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=30b77b76-6ca2-4249-a454-24261e58fe96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:5f:16:59:a2:e6:66:c9:35:c6:2c:57:08: 97:9c:a5:9c:86:79:f0:5d:f3:e0:32:02:08:83:17: 00:f5:81:14:1c:d5:f2:f6:7e:5a:f3:66:ae:7e:b5: 29:f8:af:cc:99:fc:c3:62:58:85:65:d1:46:fc:48: 92:1d:27:b1:23:ed:3b:e7:1a:b8:07:02:86:94:7b: 5b:cf:cf:31:99:98:6c:d3:4e:76:03:58:5b:4e:9f: 61:e0:e6:eb:38:c6:bb:d5:98:9f:e7:a4:f8:a4:ca: 7a:bb:46:9b:4d:97:5a:57:44:bf:71:5e:97:9e:45: 44:16:85:b4:b1:7c:ce:d8:b7:7a:3c:4f:00:36:b6: ca:c8:77:10:f3:b7:81:96:64:92:b6:fc:a1:9c:55: 54:64:ee:5e:a6:5f:29:c4:20:b2:39:fc:d3:56:a9: be:96:e6:a5:c5:df:2e:5a:fa:d4:66:ca:21:6d:3a: fa:f6:ec:4b:5a:2c:bc:91:ac:73:d9:f5:7c:84:25: d3:69:8b:c9:3e:ce:83:7b:1f:0a:fd:09:ef:0f:86: 6d:95:c8:be:65:55:63:3d:55:b7:d6:74:c7:4f:ca: ad:66:42:07:7e:d5:e4:2d:cf:1c:29:be:7f:00:75: 36:ef:87:41:7f:34:be:3e:4d:6b:07:9c:d4:8e:cc: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:20:46:7C:C7:C4:D2:AB:A9:CC:A6:EE:3F:98:1E:A7:87:53:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2d:96:86:bc:6d:a0:f0:6a:bf:5b:a7:d3:bf:6a:20:ba:2a: e0:97:ef:2e:d4:b0:cd:3d:8e:6b:19:83:18:80:cc:cb:ec:9f: b9:a2:36:bd:02:76:ce:85:a8:fc:28:85:d8:66:fa:3c:50:fe: 3d:f5:80:f8:d7:ee:3d:bb:32:89:7a:47:ed:6e:b5:75:d8:7f: a7:d2:c5:4c:29:12:77:24:ce:e2:11:fa:4c:9c:5a:23:e3:0b: 46:fe:c6:75:ca:83:0b:c9:e0:9b:2f:5f:e1:d3:1d:1c:97:86: 3e:31:32:a0:0f:ad:bc:c6:96:98:a0:56:8e:70:52:05:35:fb: 6c:0b:18:ef:52:83:48:a9:ad:35:b0:18:05:27:8c:6b:3e:46: b8:09:15:94:a8:6e:58:3f:49:53:5f:58:e0:fb:45:11:e4:18: c9:3d:29:22:34:a1:23:cb:9e:1e:ba:80:c2:70:ab:11:0d:6a: c8:5d:0a:c1:ab:b8:04:ac:c7:c2:ac:98:d1:01:58:89:fa:c3: 41:2e:b7:19:f4:aa:5b:93:0c:91:35:d9:93:ce:28:1f:70:de: 47:11:2f:0b:25:82:5c:a6:b0:54:38:19:7a:06:20:62:29:80: cb:dc:ef:a8:00:2f:d0:08:14:63:ca:ba:b2:e2:98:e9:a2:c8: 78:3b:1a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllltPQkr0KrTB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzBiNzdiNzYtNmNhMi00MjQ5LWE0NTQtMjQyNjFlNThmZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkFfFlmi5mbJNcYsVwiXnKWchnnwXfPgMgII gxcA9YEUHNXy9n5a82aufrUp+K/MmfzDYliFZdFG/EiSHSexI+075xq4BwKGlHtb z88xmZhs0052A1hbTp9h4ObrOMa71Zif56T4pMp6u0abTZdaV0S/cV6XnkVEFoW0 sXzO2Ld6PE8ANrbKyHcQ87eBlmSStvyhnFVUZO5epl8pxCCyOfzTVqm+lualxd8u WvrUZsohbTr69uxLWiy8kaxz2fV8hCXTaYvJPs6Dex8K/QnvD4Ztlci+ZVVjPVW3 1nTHT8qtZkIHftXkLc8cKb5/AHU274dBfzS+Pk1rB5zUjsw0HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHSIEZ8x8TSq6nMpu4/mB6nh1NWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmJjMGUxZWYtN2RjNy0z MTVmLWEyZGItMGY0ODE3NzRkMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUtloa8baDwar9bp9O/aiC6KuCX7y7UsM09jmsZgxiAzMvsn7miNr0C ds6FqPwohdhm+jxQ/j31gPjX7j27Mol6R+1utXXYf6fSxUwpEnckzuIR+kycWiPj C0b+xnXKgwvJ4JsvX+HTHRyXhj4xMqAPrbzGlpigVo5wUgU1+2wLGO9Sg0iprTWw GAUnjGs+RrgJFZSoblg/SVNfWOD7RRHkGMk9KSI0oSPLnh66gMJwqxENashdCsGr uASsx8KsmNEBWIn6w0Eutxn0qluTDJE12ZPOKB9w3kcRLwslglymsFQ4GXoGIGIp gMvc76gAL9AIFGPKurLimOmiyHg7Gvg= -----END CERTIFICATE-----Generated at Sat Apr 5 22:33:46 2025 by rpki-client