$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa File: cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa (raw, json) Hash identifier: zotd8iKkbcPNnOTani/O3gI+Blrgq+zt1dDfByhYF+U= Subject key identifier: 0C:48:66:A4:6B:B6:9B:40:A6:45:49:C6:A9:CA:DA:20:5C:0A:18:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20FF29D9C52AD2C9C2C7C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ff:29:d9:c5:2a:d2:c9:c2:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=f5a3f4c4-4bde-42e1-a77e-cfeb62337cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:fa:cf:e1:16:90:d3:a4:3d:bc:75:37:b7: 25:47:d3:c8:ef:cc:48:59:9e:e9:50:41:f6:a3:a1: 7b:9a:60:7a:72:d0:bf:c0:76:18:1b:c9:36:aa:92: 79:cc:3b:d8:1f:31:cd:2f:f7:f9:79:c4:bc:db:f8: 3e:81:db:ff:28:8c:93:cd:3e:19:dc:92:5e:94:84: 73:5e:b4:28:f8:77:a1:0b:fe:f4:3b:8c:08:44:a3: 95:7a:ff:59:1e:5b:33:17:9c:0f:1f:e3:7d:dc:93: b8:c8:cd:a3:22:04:b3:c2:76:48:cd:29:ac:84:46: 8f:ff:30:1a:15:a6:d7:45:1c:c9:7f:d0:fe:76:99: 35:31:f5:1c:d6:65:13:f6:00:0a:e6:cf:b0:ff:3b: 20:1b:30:95:53:1e:97:bc:cb:17:58:36:ca:ac:28: 48:11:58:7c:e6:f1:cd:e7:fe:fd:39:79:54:0f:95: 26:c9:56:00:a6:9b:fb:be:63:06:a8:8d:66:52:ed: 2e:bd:b1:8f:32:33:e6:9c:ef:76:64:f3:0d:cf:75: a5:7c:51:b9:77:8b:07:ef:17:94:7a:3f:33:ef:68: 1d:30:bf:a8:8b:7e:0c:6e:59:2a:b0:ab:a1:b6:a8: e6:d4:89:36:9f:0d:af:a3:ed:f2:41:96:70:6a:72: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:48:66:A4:6B:B6:9B:40:A6:45:49:C6:A9:CA:DA:20:5C:0A:18:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5b:cb:eb:cc:ef:52:b1:73:a7:96:5b:ee:03:9e:67:15:f6: 1c:5d:ad:68:af:4d:dc:7b:2a:0a:c1:87:4c:34:11:c0:89:00: 3d:dd:5e:7f:b3:33:10:ce:0f:c1:48:00:94:05:68:11:2b:b6: d5:ec:33:d5:ec:e6:1a:c2:e1:5e:d2:81:7c:ec:37:63:d6:6e: 06:d7:bb:ec:2e:5e:b5:93:b3:29:8c:06:61:66:33:ce:aa:00: a0:22:65:9d:a6:95:06:4d:a4:21:92:4a:dd:5b:84:0a:6f:66: 7c:6c:3d:6d:d1:90:f8:95:07:f1:32:05:cf:0c:89:17:f6:38: 43:dd:80:6b:08:9d:0d:82:9f:30:29:a4:19:3c:3e:40:c2:fa: 23:7a:7f:bc:98:5c:02:76:78:3f:7d:5b:fa:90:97:97:05:d1: 80:53:47:9e:b4:ce:1c:b9:d0:8f:15:b5:d3:17:cc:79:a1:e3: fa:1d:68:b7:a8:ae:c8:48:1f:ed:7d:a5:bf:35:b8:67:bf:57: d5:10:b9:d8:b1:39:62:75:df:6e:20:27:42:42:3d:a2:19:52: 94:f0:e2:03:25:d5:ff:16:af:1b:ec:b2:78:fa:d0:11:10:dd: d7:27:91:7a:7a:1e:f9:9b:ad:d4:db:c5:92:be:8a:92:dc:26: 87:66:86:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP8p2cUq0snCx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZjVhM2Y0YzQtNGJkZS00MmUxLWE3N2UtY2ZlYjYyMzM3Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VP6z+EWkNOkPbx1N7clR9PI78xIWZ7pUEH2 o6F7mmB6ctC/wHYYG8k2qpJ5zDvYHzHNL/f5ecS82/g+gdv/KIyTzT4Z3JJelIRz XrQo+HehC/70O4wIRKOVev9ZHlszF5wPH+N93JO4yM2jIgSzwnZIzSmshEaP/zAa FabXRRzJf9D+dpk1MfUc1mUT9gAK5s+w/zsgGzCVUx6XvMsXWDbKrChIEVh85vHN 5/79OXlUD5UmyVYAppv7vmMGqI1mUu0uvbGPMjPmnO92ZPMNz3WlfFG5d4sH7xeU ej8z72gdML+oi34MblkqsKuhtqjm1Ik2nw2vo+3yQZZwanKbOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxIZqRrtptApkVJxqnK2iBcChh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2I5YmQ5NWQtZWYzZC0z OWNiLTlhYWYtOTI4YWUyODIzNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRby+vM71Kxc6eWW+4DnmcV9hxdrWivTdx7KgrBh0w0EcCJAD3dXn+z MxDOD8FIAJQFaBErttXsM9Xs5hrC4V7SgXzsN2PWbgbXu+wuXrWTsymMBmFmM86q AKAiZZ2mlQZNpCGSSt1bhApvZnxsPW3RkPiVB/EyBc8MiRf2OEPdgGsInQ2CnzAp pBk8PkDC+iN6f7yYXAJ2eD99W/qQl5cF0YBTR560zhy50I8VtdMXzHmh4/odaLeo rshIH+19pb81uGe/V9UQudixOWJ1324gJ0JCPaIZUpTw4gMl1f8Wrxvssnj60BEQ 3dcnkXp6HvmbrdTbxZK+ipLcJodmhgw= -----END CERTIFICATE-----Generated at Sun Apr 6 03:55:17 2025 by rpki-client