$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa File: bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa (raw, json) Hash identifier: 0oZxe++cINqLB0jcSJN09z1CWMS7lOQWkAq1x22efGs= Subject key identifier: FA:A7:56:F5:0B:D7:70:6C:02:29:B7:7E:02:17:9A:82:82:B5:FD:C6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E57DA5C9AB8A2A2F16C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397238 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e5:7d:a5:c9:ab:8a:2a:2f:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8e8c3b44-9e37-4085-8958-51f4efc10479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:26:d3:4e:90:a9:fb:25:02:9d:37:c7:f7: 78:67:29:50:f7:d7:88:78:b8:02:82:38:cd:49:aa: 97:01:9b:27:1b:99:f0:ae:27:5f:c0:58:78:c0:37: 38:fe:f2:e8:c1:e1:cf:a4:3c:07:91:dd:1a:5d:fc: cc:27:79:81:ec:fa:b5:aa:83:f8:c5:cc:85:5b:63: 6c:d6:9a:63:f2:a6:ee:52:0a:c9:ee:e2:48:aa:29: f4:13:57:fe:28:d8:0f:15:ce:1e:40:46:5b:46:b1: 4d:8a:11:44:d2:25:c6:23:5b:45:78:c5:40:61:2d: e8:60:67:1b:1d:ce:e7:0a:82:44:01:99:16:24:23: 2b:d4:98:ce:ac:46:6e:49:09:a1:5b:e3:48:03:81: 14:8e:18:88:dc:72:9b:37:82:b9:6d:6e:ca:a2:90: e8:30:bb:44:8f:f8:ae:fb:22:c9:08:63:87:c1:c5: 81:9a:5b:27:ce:ca:37:3b:6d:ad:a8:7d:24:dc:b5: 21:1a:eb:47:e6:31:20:1a:4b:68:c5:50:03:2a:37: 0c:30:e1:d4:95:6d:50:ce:d7:9b:89:9c:6e:91:0e: b2:bf:22:83:39:02:52:60:cd:a2:35:e9:f6:51:d1: 5f:f0:2e:a6:4d:6b:a9:49:a4:6a:ca:89:be:26:dd: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A7:56:F5:0B:D7:70:6C:02:29:B7:7E:02:17:9A:82:82:B5:FD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc99b82-2c4c-30f0-b9ee-95344e9a5881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2c:e2:c8:15:5a:10:f9:43:60:93:02:31:73:49:b9:27:b8: 76:a8:b7:f7:e2:4e:c7:56:31:9f:ab:91:03:28:5b:9f:a0:12: b6:35:a9:f1:2e:dc:28:dc:8e:61:d8:ac:68:df:f8:06:1c:09: b1:fd:79:e2:c8:6b:4c:e1:40:8f:6a:aa:99:43:e7:9c:9a:a4: f6:14:e9:e4:4b:0f:2e:fe:32:95:18:73:54:66:7a:c1:05:c7: bb:fc:8a:52:55:b5:56:bd:8f:2d:bd:80:09:25:dc:2c:5e:40: c5:ba:46:93:b3:c9:d9:ce:9b:cd:1d:31:f9:b3:b2:f5:0f:d4: 1d:38:78:12:c2:4f:2c:d9:ae:d3:c1:b6:42:60:be:a5:c0:55: fe:4d:28:1a:0d:c3:89:6d:7b:d3:46:dc:f8:f4:2c:26:94:3c: 2d:ea:9a:7d:45:93:71:fd:7f:36:81:50:27:84:3e:2f:43:bb: 31:54:31:fd:69:20:29:85:38:41:43:09:de:cc:84:35:45:f7: 61:51:7a:1f:32:19:45:9e:2a:74:40:17:38:10:92:d7:08:9c: 95:dc:f4:88:c6:26:d4:a2:87:80:71:63:05:4f:d7:6c:c2:25: 7d:68:7f:4e:0f:ea:aa:09:d3:f4:d2:f6:3e:59:9a:63:65:28: b2:9a:97:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuV9pcmriiovFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OGU4YzNiNDQtOWUzNy00MDg1LTg5NTgtNTFmNGVmYzEwNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37Qm006QqfslAp03x/d4ZylQ99eIeLgCgjjN SaqXAZsnG5nwridfwFh4wDc4/vLoweHPpDwHkd0aXfzMJ3mB7Pq1qoP4xcyFW2Ns 1ppj8qbuUgrJ7uJIqin0E1f+KNgPFc4eQEZbRrFNihFE0iXGI1tFeMVAYS3oYGcb Hc7nCoJEAZkWJCMr1JjOrEZuSQmhW+NIA4EUjhiI3HKbN4K5bW7KopDoMLtEj/iu +yLJCGOHwcWBmlsnzso3O22tqH0k3LUhGutH5jEgGktoxVADKjcMMOHUlW1Qzteb iZxukQ6yvyKDOQJSYM2iNen2UdFf8C6mTWupSaRqyom+Jt2qsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqnVvUL13BsAim3fgIXmoKCtf3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmJjOTliODItMmM0Yy0z MGYwLWI5ZWUtOTUzNDRlOWE1ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMs4sgVWhD5Q2CTAjFzSbknuHaot/fiTsdWMZ+rkQMoW5+gErY1qfEu 3CjcjmHYrGjf+AYcCbH9eeLIa0zhQI9qqplD55yapPYU6eRLDy7+MpUYc1RmesEF x7v8ilJVtVa9jy29gAkl3CxeQMW6RpOzydnOm80dMfmzsvUP1B04eBLCTyzZrtPB tkJgvqXAVf5NKBoNw4lte9NG3Pj0LCaUPC3qmn1Fk3H9fzaBUCeEPi9DuzFUMf1p ICmFOEFDCd7MhDVF92FReh8yGUWeKnRAFzgQktcInJXc9IjGJtSih4BxYwVP12zC JX1of04P6qoJ0/TS9j5ZmmNlKLKalxA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:21 2025 by rpki-client