$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa File: cef05d66-93fc-35e8-bc90-4037679a6a40.roa (raw, json) Hash identifier: ja4Yh7v55DpbAMh63JWDD2WOx8yfAI03I+T6/EtSys8= Subject key identifier: 68:23:37:36:B6:72:B1:AF:34:2A:E1:65:FC:F3:B3:21:3B:C2:7A:37 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965AE009E54753122EC400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397220 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5a:e0:09:e5:47:53:12:2e:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=8a192da8-64c4-4ffc-b47e-144e7a4d8cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:6d:59:e9:23:26:a7:cf:f7:b1:92:8d:bd: 82:29:92:c5:29:e7:2a:30:d1:d7:e2:bf:33:cd:7b: 57:7e:18:21:22:32:fd:72:c6:5d:db:6a:a0:40:b7: 00:c1:15:0c:06:67:cf:23:b5:4e:c9:a4:ba:f1:d7: 65:dd:f3:a0:87:f2:0c:06:86:17:77:7b:7e:68:a1: 40:f6:92:47:12:f3:cf:bd:e9:f7:33:5c:c7:c1:94: a6:89:6d:4f:20:db:55:62:61:c4:f6:44:7a:4f:7f: 9c:8e:dd:50:a0:dd:ae:cc:be:d2:b5:17:81:96:06: dd:24:da:c0:b4:98:62:6c:7c:75:00:10:07:cd:98: 6d:97:ad:19:5a:b0:80:10:3e:ee:4f:78:05:9b:3d: 2e:7b:d4:a0:28:bd:7e:04:5f:b6:cc:a7:78:12:4c: 0f:f7:0b:9f:84:41:bf:b7:d8:41:13:4b:12:79:93: 2c:de:a9:fd:58:22:6c:3a:c0:e9:55:0c:ac:03:85: 88:62:af:60:7e:02:ac:46:f4:bc:9b:2c:22:4e:b1: eb:d9:d3:24:0c:42:9e:16:d3:e2:13:b9:7b:02:72: 3e:2f:f9:2e:1d:76:af:e1:74:72:96:aa:fc:bd:77: e4:e1:63:2f:a1:c4:06:40:ae:54:d6:df:d4:ab:ac: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:37:36:B6:72:B1:AF:34:2A:E1:65:FC:F3:B3:21:3B:C2:7A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a7:ba:52:51:47:e8:35:52:c0:91:72:7c:60:43:5e:78:45: f9:bd:4b:02:13:60:c3:56:29:99:9d:f8:8c:fc:6a:44:0d:35: 86:46:86:29:e6:96:d1:7e:61:f9:a6:06:00:0d:02:5b:f8:78: 0f:03:ed:ac:a1:3d:a4:b3:38:e2:4e:ae:6f:5d:75:91:01:0b: e8:d8:0d:d1:19:3a:fd:29:bb:b9:2e:97:fd:42:b8:45:e6:65: 01:88:ff:0a:4b:8a:cf:f7:cf:29:c1:a8:30:00:f6:20:6a:79: 40:02:20:9d:94:73:80:d1:8b:29:e6:6e:8b:10:92:0d:ef:e7: 80:21:ed:b5:f5:49:65:c7:3e:2c:ee:2c:c7:60:57:2b:b6:84: 18:87:0b:e3:a3:62:ea:b8:82:27:42:80:91:54:01:ac:5e:6a: bd:f2:0e:1d:eb:08:10:57:cf:6a:9a:61:09:ef:93:1e:ca:55: c0:84:1c:ca:9b:21:ca:db:d2:76:5c:a2:41:4f:94:e1:c8:24: 9f:4c:c9:9c:c1:06:bc:52:b6:23:5d:4e:81:82:ec:27:59:66: 65:76:34:6a:7b:b3:e5:0f:62:11:2d:e7:3a:17:8e:2d:87:21: da:ff:c7:6d:4b:b9:e5:89:8b:f6:3e:31:43:93:01:0c:19:8a: 67:a4:f6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllrgCeVHUxIuxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGExOTJkYTgtNjRjNC00ZmZjLWI0N2UtMTQ0ZTdhNGQ4Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMJtWekjJqfP97GSjb2CKZLFKecqMNHX4r8z zXtXfhghIjL9csZd22qgQLcAwRUMBmfPI7VOyaS68ddl3fOgh/IMBoYXd3t+aKFA 9pJHEvPPven3M1zHwZSmiW1PINtVYmHE9kR6T3+cjt1QoN2uzL7StReBlgbdJNrA tJhibHx1ABAHzZhtl60ZWrCAED7uT3gFmz0ue9SgKL1+BF+2zKd4EkwP9wufhEG/ t9hBE0sSeZMs3qn9WCJsOsDpVQysA4WIYq9gfgKsRvS8mywiTrHr2dMkDEKeFtPi E7l7AnI+L/kuHXav4XRylqr8vXfk4WMvocQGQK5U1t/Uq6zMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgjNza2crGvNCrhZfzzsyE7wno3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2VmMDVkNjYtOTNmYy0z NWU4LWJjOTAtNDAzNzY3OWE2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADinulJRR+g1UsCRcnxgQ154Rfm9SwITYMNWKZmd+Iz8akQNNYZGhinm ltF+YfmmBgANAlv4eA8D7ayhPaSzOOJOrm9ddZEBC+jYDdEZOv0pu7kul/1CuEXm ZQGI/wpLis/3zynBqDAA9iBqeUACIJ2Uc4DRiynmbosQkg3v54Ah7bX1SWXHPizu LMdgVyu2hBiHC+OjYuq4gidCgJFUAaxear3yDh3rCBBXz2qaYQnvkx7KVcCEHMqb Icrb0nZcokFPlOHIJJ9MyZzBBrxStiNdToGC7CdZZmV2NGp7s+UPYhEt5zoXji2H Idr/x21LueWJi/Y+MUOTAQwZimek9vI= -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:15 2025 by rpki-client