$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c83a9395-99e1-3557-b484-6d7d7fa72b63.roa File: c83a9395-99e1-3557-b484-6d7d7fa72b63.roa (raw, json) Hash identifier: pe7VBFMRy2ydoa2HvPwoX2rryfq4Ipg5XJZdERR4M3U= Subject key identifier: 8A:03:EF:83:8C:34:E2:9D:84:47:51:FB:0E:57:41:DD:02:58:6B:3F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2105CC4766DE02EDE09400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c83a9395-99e1-3557-b484-6d7d7fa72b63.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397218 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:05:cc:47:66:de:02:ed:e0:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=1a9d64a6-735c-40ab-aedb-79e8f2c95e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:3e:bb:a5:20:b1:63:98:49:31:19:87:c3: e8:e4:80:fe:95:42:f9:47:d3:9e:5d:ba:12:ce:32: d8:67:bc:36:23:d7:e2:e4:02:13:04:d8:f5:e3:6d: a4:fc:3a:29:42:34:0b:ff:f1:50:60:17:ac:3a:72: 4b:05:7d:9a:2b:d3:22:74:62:e7:b3:96:8b:7d:2b: e1:77:52:dc:73:fe:ce:5c:b5:63:bc:f6:d3:b5:b0: a3:d0:7f:5b:11:0d:25:b4:ac:4b:bd:06:6c:f7:7b: 09:cf:c5:d1:7c:93:ec:68:18:c6:60:6a:f6:a0:5a: 44:39:4e:1f:60:01:90:2f:b9:b0:31:e4:6f:ff:11: f6:49:17:a6:4a:6e:99:aa:13:38:dc:ff:42:7e:09: 3d:e9:97:28:82:41:d5:a4:aa:6b:6f:37:95:cd:d5: 48:c5:2b:fb:cb:e6:ad:b9:e3:30:53:64:9e:ce:a7: 9f:db:0a:ed:23:7b:e4:bc:8e:e5:26:88:a4:28:f6: c7:9f:35:7e:8e:91:f8:6a:bd:ca:23:4d:5e:de:6f: 0e:07:7a:d1:82:e7:88:14:48:53:b3:26:77:82:f3: a6:22:1c:9b:2c:d5:2a:60:dd:fc:2e:e7:ac:7e:ef: 09:e2:30:bc:ff:df:8b:18:d0:e9:b5:ac:d2:b0:77: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:EF:83:8C:34:E2:9D:84:47:51:FB:0E:57:41:DD:02:58:6B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c83a9395-99e1-3557-b484-6d7d7fa72b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1d:d8:9b:9e:f6:1a:4b:7e:cf:42:83:ed:a7:8f:c7:6a:54: a3:9a:65:40:b4:0d:ff:2b:9c:a9:da:52:d3:4c:5a:de:d4:05: 90:4d:98:be:87:99:3a:ec:a2:0b:54:f3:67:7f:d2:bb:89:38: 8d:15:f7:57:f2:27:9b:d2:b0:d4:0d:38:56:c8:ca:bc:65:be: 07:87:74:5c:13:d5:40:ca:7a:34:03:45:91:7e:bf:26:54:f9: 09:65:0f:48:2b:20:06:7f:46:38:7f:e0:14:99:a4:2b:a1:2e: 0d:9b:cd:9f:af:ad:51:6a:f5:cc:f5:14:88:51:a1:a4:30:fa: e7:48:ee:77:b6:72:bf:69:f0:da:9a:49:3c:ef:ca:1c:32:04: 64:78:94:cb:ef:4f:11:f1:64:09:d3:c9:59:86:87:6f:ce:f2: f4:4c:07:92:a0:da:1e:a7:f3:98:70:41:a9:f1:33:d0:bb:f6: 2c:e2:3c:b7:2c:ac:86:f0:16:ba:ed:69:16:14:13:50:4c:57: 49:d5:3b:df:15:16:58:87:8e:da:66:d6:8d:bb:9e:28:73:7f: 0a:73:66:9a:07:a6:4e:a2:87:18:68:c6:08:89:e0:44:db:47: 0a:19:48:e0:5d:41:cd:c2:c7:47:1a:bc:e2:a8:53:b6:13:29: c9:94:22:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQXMR2beAu3glAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MWE5ZDY0YTYtNzM1Yy00MGFiLWFlZGItNzllOGYyYzk1ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb4+u6UgsWOYSTEZh8Po5ID+lUL5R9OeXboS zjLYZ7w2I9fi5AITBNj1422k/DopQjQL//FQYBesOnJLBX2aK9MidGLns5aLfSvh d1Lcc/7OXLVjvPbTtbCj0H9bEQ0ltKxLvQZs93sJz8XRfJPsaBjGYGr2oFpEOU4f YAGQL7mwMeRv/xH2SRemSm6ZqhM43P9Cfgk96ZcogkHVpKprbzeVzdVIxSv7y+at ueMwU2Sezqef2wrtI3vkvI7lJoikKPbHnzV+jpH4ar3KI01e3m8OB3rRgueIFEhT syZ3gvOmIhybLNUqYN38Luesfu8J4jC8/9+LGNDptazSsHfCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoD74OMNOKdhEdR+w5XQd0CWGs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzgzYTkzOTUtOTllMS0z NTU3LWI0ODQtNmQ3ZDdmYTcyYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQd2Jue9hpLfs9Cg+2nj8dqVKOaZUC0Df8rnKnaUtNMWt7UBZBNmL6H mTrsogtU82d/0ruJOI0V91fyJ5vSsNQNOFbIyrxlvgeHdFwT1UDKejQDRZF+vyZU +QllD0grIAZ/Rjh/4BSZpCuhLg2bzZ+vrVFq9cz1FIhRoaQw+udI7ne2cr9p8Nqa STzvyhwyBGR4lMvvTxHxZAnTyVmGh2/O8vRMB5Kg2h6n85hwQanxM9C79iziPLcs rIbwFrrtaRYUE1BMV0nVO98VFliHjtpm1o27nihzfwpzZpoHpk6ihxhoxgiJ4ETb RwoZSOBdQc3Cx0cavOKoU7YTKcmUIo8= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:41 2025 by rpki-client