$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa File: be9254d4-a76c-3e34-86c2-4a1020eac210.roa (raw, json) Hash identifier: E/E5iZLVgwooz2NdKJalNn3iV0IJrAY/wcxsDwB/MEs= Subject key identifier: 25:78:F3:E7:7F:F2:D9:A2:51:4D:31:FA:42:73:45:27:B9:AD:62:97 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E4AC610264D49BB9BA60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397222 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e4:ac:61:02:64:d4:9b:b9:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2cb1b7ed-f996-49ba-9c78-58aefdd36bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:fa:51:a2:a2:80:39:2e:d3:1c:3c:aa:2a: 65:cd:75:b8:ff:ae:12:fc:c0:3a:2b:2a:65:e6:56: 4a:6a:e5:d2:a3:72:54:5d:e6:ca:ae:b6:24:07:95: 88:0a:b1:60:cc:ed:3a:29:d7:10:9d:f3:54:e7:a3: b5:64:85:8b:06:1d:3e:0e:7d:f3:36:d1:1d:5d:f1: 20:a0:6e:fc:1b:f4:fc:0e:76:ef:72:f1:bb:34:4b: 77:a2:3e:97:de:9d:47:ed:63:cd:14:64:8e:2c:cc: 9a:44:31:f9:a3:f5:ad:ce:0f:51:f8:73:70:f8:24: 1c:d2:95:85:91:f1:14:cf:fc:9f:26:5d:c2:35:30: ed:e1:0a:3a:d5:b8:9f:32:5a:29:c9:6b:cb:ab:5e: a5:59:50:a3:67:93:bd:f4:2a:af:82:d8:31:81:f8: e3:8b:97:79:7b:24:a4:3c:7a:d2:b5:13:87:47:f8: 6e:ae:0d:96:34:6a:4d:af:c8:46:fb:de:e4:00:9c: 55:10:5a:e8:9c:d3:f9:6f:23:59:b9:da:c6:07:8f: 5d:3d:23:e5:49:c3:be:1a:6f:db:5c:8f:fc:c8:af: db:35:12:de:16:6a:7f:44:fc:64:88:ed:ba:71:74: e3:d3:ad:dc:26:12:00:12:2d:30:34:97:38:d8:20: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:78:F3:E7:7F:F2:D9:A2:51:4D:31:FA:42:73:45:27:B9:AD:62:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be9254d4-a76c-3e34-86c2-4a1020eac210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8f:cb:e2:e1:0e:d2:16:ba:12:06:dc:14:26:99:7f:33:08: 0e:cc:e8:aa:9e:32:e6:a5:61:65:68:af:b7:70:cf:7e:45:8b: 3d:24:e4:49:65:b0:50:62:61:bb:7a:2e:71:57:c6:98:b8:a5: 92:a2:f9:01:d7:d2:cf:ca:67:ed:97:1a:5b:c8:8d:77:b0:a0: 99:d1:1c:47:a3:85:ec:ec:49:97:06:19:50:a5:75:b5:2e:5f: 75:5c:b7:49:e5:e4:e9:cd:77:6a:7d:71:76:17:b5:8a:f1:b1: d8:a8:76:07:d7:f9:39:fb:93:ca:f2:1a:6c:f6:05:85:7e:83: d4:22:73:7d:03:d6:b7:da:c2:0a:83:f7:2d:02:6b:76:24:cf: 00:f2:a2:74:a8:97:ba:f5:22:09:81:e3:97:a7:c5:50:09:50: 16:f5:1a:fd:81:8f:94:36:25:c8:cf:53:99:5d:a7:e9:56:91: 37:51:2c:88:f8:42:9c:f7:50:35:6c:2e:82:e2:38:70:c7:9f: 6e:ad:68:87:84:83:c7:e8:f3:1e:41:db:64:72:d6:aa:90:a2: f6:d8:cc:fa:91:14:28:44:f6:1d:99:bd:84:59:ac:76:2c:6a: fd:8f:93:10:d1:c1:9c:34:e8:4a:37:c2:9f:fe:d8:0f:7d:00: e2:ed:fe:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuSsYQJk1Ju5umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmNiMWI3ZWQtZjk5Ni00OWJhLTljNzgtNThhZWZkZDM2YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL76UaKigDku0xw8qiplzXW4/64S/MA6Kypl 5lZKauXSo3JUXebKrrYkB5WICrFgzO06KdcQnfNU56O1ZIWLBh0+Dn3zNtEdXfEg oG78G/T8DnbvcvG7NEt3oj6X3p1H7WPNFGSOLMyaRDH5o/Wtzg9R+HNw+CQc0pWF kfEUz/yfJl3CNTDt4Qo61bifMlopyWvLq16lWVCjZ5O99Cqvgtgxgfjji5d5eySk PHrStROHR/hurg2WNGpNr8hG+97kAJxVEFronNP5byNZudrGB49dPSPlScO+Gm/b XI/8yK/bNRLeFmp/RPxkiO26cXTj063cJhIAEi0wNJc42CCJRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV48+d/8tmiUU0x+kJzRSe5rWKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmU5MjU0ZDQtYTc2Yy0z ZTM0LTg2YzItNGExMDIwZWFjMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuPy+LhDtIWuhIG3BQmmX8zCA7M6KqeMualYWVor7dwz35Fiz0k5Ell sFBiYbt6LnFXxpi4pZKi+QHX0s/KZ+2XGlvIjXewoJnRHEejhezsSZcGGVCldbUu X3Vct0nl5OnNd2p9cXYXtYrxsdiodgfX+Tn7k8ryGmz2BYV+g9Qic30D1rfawgqD 9y0Ca3YkzwDyonSol7r1IgmB45enxVAJUBb1Gv2Bj5Q2JcjPU5ldp+lWkTdRLIj4 Qpz3UDVsLoLiOHDHn26taIeEg8fo8x5B22Ry1qqQovbYzPqRFChE9h2ZvYRZrHYs av2PkxDRwZw06Eo3wp/+2A99AOLt/vg= -----END CERTIFICATE-----Generated at Sun Apr 6 00:49:07 2025 by rpki-client