$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c124985d-1c5f-3ed2-92b9-4393093631a9.roa File: c124985d-1c5f-3ed2-92b9-4393093631a9.roa (raw, json) Hash identifier: OlrwQIlSDzrA0uGI3A4uKefCt/uifnIx155nG1BM9yY= Subject key identifier: 94:BF:E4:5B:37:46:68:4F:44:84:F8:70:C9:02:44:9B:B2:8D:36:2D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20FE1BE9C7CD62AFF25A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c124985d-1c5f-3ed2-92b9-4393093631a9.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397223 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:fe:1b:e9:c7:cd:62:af:f2:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=5140ccd8-4dba-489c-9fe0-9c36032cd6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:55:61:45:08:57:01:d0:ea:11:00:55:b1:d1: c2:66:46:7b:88:9b:29:ea:83:a2:f0:c1:69:02:b7: 59:d3:8b:43:08:be:60:93:f6:f8:e7:7f:9a:b8:98: 19:bb:89:b9:42:27:e8:00:35:ef:82:b0:7c:40:6a: be:cc:47:c0:4a:dd:b7:0d:23:78:d4:0b:da:ab:6f: c9:3c:8e:aa:d9:f6:7a:39:a3:22:9a:b6:1f:39:74: 07:ca:eb:48:b5:dc:82:80:dc:9f:14:20:90:32:86: f3:61:9b:70:48:c3:17:18:58:da:f2:b3:c9:c7:e0: 93:51:ad:0e:4c:19:b5:dc:e8:ee:db:1b:a3:f1:d4: 6c:7f:25:63:37:ae:6b:f3:92:f9:c0:eb:a1:c4:60: 24:84:c7:a2:4d:76:cd:fa:36:ae:fd:5e:af:21:e6: 37:36:8e:24:81:94:f8:a7:eb:9e:13:e7:13:1a:58: a1:ce:e2:79:00:d7:fa:55:22:ee:6b:d6:65:e5:d2: 50:d8:f4:c9:7a:57:27:a1:1f:95:8c:60:58:91:fe: fd:73:83:c1:d9:f1:a3:38:6a:b9:31:bd:10:c6:cf: 75:d1:87:c9:ba:51:2c:46:e1:ee:ec:3d:ee:5e:9c: 7b:4d:70:29:b2:15:0f:84:c8:57:34:98:54:18:ed: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:E4:5B:37:46:68:4F:44:84:F8:70:C9:02:44:9B:B2:8D:36:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c124985d-1c5f-3ed2-92b9-4393093631a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3c:35:85:4c:9d:74:48:47:c9:81:16:9c:9a:03:2b:0e:9a: 52:7f:d1:19:16:11:8a:49:6c:4e:30:c4:72:a0:f9:1b:76:5c: c6:c3:24:a3:29:11:24:57:6f:d0:b7:79:b1:7e:6e:80:63:6a: dd:c7:bd:cb:ba:ab:85:70:14:d3:6d:c8:52:42:c1:a7:a1:fd: 5d:0d:d6:7e:35:27:1c:f5:05:4d:89:ee:1c:72:0a:0c:36:a6: 82:3a:3a:35:97:fa:0e:27:29:c5:9a:3c:cb:6a:62:f9:14:59: cd:c7:86:be:af:96:ca:c7:9e:69:a0:5d:73:d9:9f:35:45:59: 7b:08:93:c5:c8:58:9c:2e:37:86:f7:9b:a8:d3:e8:b4:69:a5: 5b:3d:5b:87:97:17:cc:9c:fb:5f:8e:bd:da:f4:83:91:ca:af: 24:f7:d0:ed:ef:8c:50:ab:9c:e7:00:92:8d:71:d0:b5:f3:4d: 01:97:7c:5f:f4:cf:09:0b:9c:ba:27:64:88:c5:d0:ff:a0:76: aa:74:f3:d4:f5:df:63:21:bd:8c:af:29:7f:c1:35:25:76:3e: b1:b2:a9:8b:88:32:80:4e:61:c4:14:6c:d7:7a:87:90:29:1f: 30:a4:be:90:28:4b:01:ca:33:1d:d3:43:fc:05:33:a2:64:30: 67:1c:62:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP4b6cfNYq/yWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NTE0MGNjZDgtNGRiYS00ODljLTlmZTAtOWMzNjAzMmNkNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVhRQhXAdDqEQBVsdHCZkZ7iJsp6oOi8MFp ArdZ04tDCL5gk/b453+auJgZu4m5QifoADXvgrB8QGq+zEfASt23DSN41Avaq2/J PI6q2fZ6OaMimrYfOXQHyutItdyCgNyfFCCQMobzYZtwSMMXGFja8rPJx+CTUa0O TBm13Oju2xuj8dRsfyVjN65r85L5wOuhxGAkhMeiTXbN+jau/V6vIeY3No4kgZT4 p+ueE+cTGlihzuJ5ANf6VSLua9Zl5dJQ2PTJelcnoR+VjGBYkf79c4PB2fGjOGq5 Mb0Qxs910YfJulEsRuHu7D3uXpx7TXApshUPhMhXNJhUGO0gKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS/5Fs3RmhPRIT4cMkCRJuyjTYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzEyNDk4NWQtMWM1Zi0z ZWQyLTkyYjktNDM5MzA5MzYzMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU8NYVMnXRIR8mBFpyaAysOmlJ/0RkWEYpJbE4wxHKg+Rt2XMbDJKMp ESRXb9C3ebF+boBjat3Hvcu6q4VwFNNtyFJCwaeh/V0N1n41Jxz1BU2J7hxyCgw2 poI6OjWX+g4nKcWaPMtqYvkUWc3Hhr6vlsrHnmmgXXPZnzVFWXsIk8XIWJwuN4b3 m6jT6LRppVs9W4eXF8yc+1+Ovdr0g5HKryT30O3vjFCrnOcAko1x0LXzTQGXfF/0 zwkLnLonZIjF0P+gdqp089T132MhvYyvKX/BNSV2PrGyqYuIMoBOYcQUbNd6h5Ap HzCkvpAoSwHKMx3TQ/wFM6JkMGccYmE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:52 2025 by rpki-client