$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c55019b9-c41f-3d60-8211-ac118c98740a.roa File: c55019b9-c41f-3d60-8211-ac118c98740a.roa (raw, json) Hash identifier: z8ubefrTOlha+juYvfiuyYAWemr9oF0NmoNxmXN89QE= Subject key identifier: EC:41:C6:09:AE:9D:0C:7E:45:C3:DC:05:D7:77:2C:D4:8F:A5:CE:EE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2110A687A348E61B28A340 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c55019b9-c41f-3d60-8211-ac118c98740a.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 12008 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:10:a6:87:a3:48:e6:1b:28:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=41e04377-4d62-45ba-a1a9-4fd9d041af8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:50:b2:c9:81:c9:4c:bb:1c:b4:dd:99:43:b4: 92:5a:5e:a6:4e:e6:48:3f:ea:04:d5:6d:2b:29:5c: 19:37:db:f6:1a:bd:1b:50:ef:1d:56:ef:b6:83:01: 60:fd:59:ea:6c:46:93:cd:e5:30:9b:d5:27:89:15: d0:79:52:1d:0e:cd:fb:ba:01:36:02:83:65:95:58: 3b:a0:fb:a5:75:87:e8:55:69:17:d2:f8:b6:a7:6f: 80:db:73:ea:0d:94:e8:df:f8:0e:c4:df:cf:fd:48: 6e:f2:17:c9:61:b7:d2:ce:3f:a4:bc:91:a2:97:77: 54:1f:84:eb:9e:c7:eb:72:b9:6a:80:65:c7:db:7c: 73:6f:59:fe:b6:c3:47:70:60:1a:3f:50:2e:b2:60: 4f:ee:22:20:44:f9:34:3c:1f:b1:06:70:0a:e9:16: aa:c8:61:95:7c:e3:c9:78:f0:61:4f:7f:fa:a1:fa: 20:70:9a:b4:a9:38:2c:cb:54:1d:4f:fd:0b:0b:11: 7e:51:98:b3:67:bb:72:b0:d0:8f:61:73:48:75:fd: 58:c6:ee:ad:b6:03:95:6d:93:11:be:aa:eb:95:69: cd:8f:c2:b4:b0:1c:38:9c:97:09:5a:30:df:3d:c1: ac:66:7c:e5:62:43:ba:1f:d4:42:79:e9:64:e1:86: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:41:C6:09:AE:9D:0C:7E:45:C3:DC:05:D7:77:2C:D4:8F:A5:CE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c55019b9-c41f-3d60-8211-ac118c98740a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:63:9c:7a:6b:f9:95:c1:06:67:86:6d:ed:2b:1e:67:9b:f0: 4b:00:9e:88:08:91:5d:e0:ac:51:86:93:8c:c5:99:df:1a:40: 78:f5:3a:7b:8d:af:14:c7:f1:d4:9b:33:0a:14:1e:0a:b3:db: cf:db:92:99:e2:9d:c0:49:61:4a:d3:1a:29:2f:da:25:21:8b: 25:fa:5d:42:68:29:96:54:84:ee:66:9f:6f:2e:dc:9d:67:a8: da:45:cf:5e:20:2f:b5:d2:24:95:58:c6:28:ff:b9:f6:a0:6e: 38:d1:2e:4a:7a:a1:63:46:05:c3:22:8b:24:44:71:fc:b1:5e: 9b:72:e8:54:db:7b:bf:4f:9f:07:1b:70:01:f2:68:24:b2:0d: 88:ca:ee:17:fb:d6:25:65:93:3e:83:3d:48:eb:8b:bb:34:97: 0e:d1:8b:ad:38:1f:ed:00:9d:58:5a:81:ab:45:61:9a:9a:fd: f5:1b:b7:ac:56:e4:0a:87:3a:8b:7a:62:ed:7e:0a:bc:2c:52: 05:42:2a:25:85:98:40:1d:b9:2d:1a:e1:11:50:0d:b7:23:c6: c9:14:c2:52:6b:a3:72:a6:03:ab:15:04:82:49:88:9e:52:ee: 4d:ad:ae:b1:f4:af:ac:97:84:79:51:20:b7:12:6d:c9:f9:7b: 0f:44:06:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRCmh6NI5hsoo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NDFlMDQzNzctNGQ2Mi00NWJhLWExYTktNGZkOWQwNDFhZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFCyyYHJTLsctN2ZQ7SSWl6mTuZIP+oE1W0r KVwZN9v2Gr0bUO8dVu+2gwFg/VnqbEaTzeUwm9UniRXQeVIdDs37ugE2AoNllVg7 oPuldYfoVWkX0vi2p2+A23PqDZTo3/gOxN/P/Uhu8hfJYbfSzj+kvJGil3dUH4Tr nsfrcrlqgGXH23xzb1n+tsNHcGAaP1AusmBP7iIgRPk0PB+xBnAK6RaqyGGVfOPJ ePBhT3/6ofogcJq0qTgsy1QdT/0LCxF+UZizZ7tysNCPYXNIdf1Yxu6ttgOVbZMR vqrrlWnNj8K0sBw4nJcJWjDfPcGsZnzlYkO6H9RCeelk4YYqOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxBxgmunQx+RcPcBdd3LNSPpc7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzU1MDE5YjktYzQxZi0z ZDYwLTgyMTEtYWMxMThjOTg3NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpjnHpr+ZXBBmeGbe0rHmeb8EsAnogIkV3grFGGk4zFmd8aQHj1OnuN rxTH8dSbMwoUHgqz28/bkpnincBJYUrTGikv2iUhiyX6XUJoKZZUhO5mn28u3J1n qNpFz14gL7XSJJVYxij/ufagbjjRLkp6oWNGBcMiiyREcfyxXpty6FTbe79Pnwcb cAHyaCSyDYjK7hf71iVlkz6DPUjri7s0lw7Ri604H+0AnVhagatFYZqa/fUbt6xW 5AqHOot6Yu1+CrwsUgVCKiWFmEAduS0a4RFQDbcjxskUwlJro3KmA6sVBIJJiJ5S 7k2trrH0r6yXhHlRILcSbcn5ew9EBlA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:20:31 2025 by rpki-client