$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa File: cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa (raw, json) Hash identifier: BofPOofDD4Atg9rW5Yl/y7XM/sN7XD2MsFzp7Th/cuY= Subject key identifier: 9A:F1:4F:C8:46:78:20:F0:09:4B:5F:1C:8D:9F:90:EF:10:60:30:30 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965961D0FE0300767E8C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397225 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:59:61:d0:fe:03:00:76:7e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3ff3b369-2a04-4e5c-9454-5b5b24aa1a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:59:82:73:80:9d:b4:1e:5c:85:e6:e8:24: f3:81:d2:40:e8:fd:01:17:6e:8b:a0:f3:9a:f3:15: 87:50:c9:9f:69:5e:aa:12:f6:26:21:b4:3a:16:09: 8b:bc:80:f9:f1:37:cc:f1:30:79:e8:64:76:9c:6a: e4:1b:c3:0d:8b:65:93:76:65:a9:81:b8:10:26:fe: 07:01:b6:bc:24:d4:d0:aa:6e:b4:ea:ad:4d:c2:1a: 47:ae:b9:92:ae:bf:ba:e0:18:2b:da:9d:34:81:24: 45:23:54:6a:73:73:ca:09:a8:12:a5:44:a7:05:14: 31:42:34:57:2e:1d:a2:cd:2e:fb:98:9d:06:b1:05: 30:76:f3:f1:62:4c:63:de:25:87:08:6e:c4:f9:93: c0:5a:aa:8d:10:d4:b6:7b:aa:39:db:00:b6:b3:29: 23:bb:02:2e:01:40:07:e6:ae:99:ab:38:80:97:99: 15:0e:b5:d1:6a:52:1a:5e:a2:f5:bf:d5:23:e1:fc: 99:9c:25:38:ca:a4:86:a1:31:1a:93:7a:d4:01:ea: 5f:ee:27:60:6f:d9:77:48:6e:22:c4:7b:29:6f:d1: 8c:a8:b6:55:bd:0b:e5:d3:6d:f2:fe:7f:62:cd:fb: ed:a6:c0:0f:0f:5e:05:5d:4a:ba:5a:2f:33:77:3d: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:4F:C8:46:78:20:F0:09:4B:5F:1C:8D:9F:90:EF:10:60:30:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:90:68:c6:6d:0c:e9:6a:7e:8f:8e:a5:b4:36:a1:ef:73:25: c0:30:ad:89:7a:48:21:e4:13:36:81:91:51:da:4a:eb:24:00: fe:fb:9a:9d:66:10:1e:88:e7:96:25:74:59:15:a2:a9:10:97: 0f:bf:76:c2:f9:e9:d0:20:89:2d:ef:b3:0d:aa:61:c8:66:35: fd:3e:a2:0a:c3:03:cb:b7:b1:3c:e1:d0:ab:1d:1b:d5:b2:9e: bf:eb:17:1c:93:6e:ab:cf:99:be:42:fd:3d:cc:a2:7d:20:39: 2a:0d:0c:51:da:cf:80:26:dc:0b:04:e6:cd:d7:a4:82:27:a3: 47:33:9e:46:44:28:33:aa:99:a0:31:c0:6a:81:27:b6:35:7f: e4:ff:78:1e:2b:d3:31:b6:75:d9:ae:46:3b:7d:26:88:5f:7e: 2b:e0:84:50:96:ad:b5:7d:04:5f:b2:56:88:d2:5b:f3:fb:cd: 6d:2f:00:61:b9:6e:ec:18:b0:52:41:99:ef:74:a7:36:b2:1b: 82:66:84:c5:e4:c4:c5:0c:4c:9c:a8:3e:1c:8e:cb:d3:6e:8b: 76:fc:0a:8e:13:7a:cf:0f:cc:0d:cb:26:28:ef:15:b8:6b:4d: b9:c7:0a:39:51:97:81:21:bd:66:1c:5b:65:9d:19:84:d7:9d: 9e:bc:c6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplllh0P4DAHZ+jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZmM2IzNjktMmEwNC00ZTVjLTk0NTQtNWI1YjI0YWExYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1hZgnOAnbQeXIXm6CTzgdJA6P0BF26LoPOa 8xWHUMmfaV6qEvYmIbQ6FgmLvID58TfM8TB56GR2nGrkG8MNi2WTdmWpgbgQJv4H Aba8JNTQqm606q1NwhpHrrmSrr+64Bgr2p00gSRFI1Rqc3PKCagSpUSnBRQxQjRX Lh2izS77mJ0GsQUwdvPxYkxj3iWHCG7E+ZPAWqqNENS2e6o52wC2sykjuwIuAUAH 5q6ZqziAl5kVDrXRalIaXqL1v9Uj4fyZnCU4yqSGoTEak3rUAepf7idgb9l3SG4i xHspb9GMqLZVvQvl023y/n9izfvtpsAPD14FXUq6Wi8zdz1ZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrxT8hGeCDwCUtfHI2fkO8QYDAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2RkY2EwMmQtMWNmNS0z OTA0LWE4Y2QtYTY2YmY2ZDNhOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiQaMZtDOlqfo+OpbQ2oe9zJcAwrYl6SCHkEzaBkVHaSuskAP77mp1m EB6I55YldFkVoqkQlw+/dsL56dAgiS3vsw2qYchmNf0+ogrDA8u3sTzh0KsdG9Wy nr/rFxyTbqvPmb5C/T3Mon0gOSoNDFHaz4Am3AsE5s3XpIIno0cznkZEKDOqmaAx wGqBJ7Y1f+T/eB4r0zG2ddmuRjt9JohffivghFCWrbV9BF+yVojSW/P7zW0vAGG5 buwYsFJBme90pzayG4JmhMXkxMUMTJyoPhyOy9Nui3b8Co4Tes8PzA3LJijvFbhr TbnHCjlRl4EhvWYcW2WdGYTXnZ68xgA= -----END CERTIFICATE-----Generated at Sun Apr 6 13:21:43 2025 by rpki-client