$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa File: cf81221b-0a41-37b9-9909-8340202ab1e1.roa (raw, json) Hash identifier: 17KvUSseuNEGNTf/KuvPi3eoZXCAoTL4vfSd3KgG38Y= Subject key identifier: DB:A1:F4:F9:D8:91:E4:0A:DA:90:B5:90:94:DF:99:4F:B2:95:27:4B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DEF39CEE333767F11770 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397221 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:de:f3:9c:ee:33:37:67:f1:17:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e290c1a3-4895-4a7c-81d2-88de3092f081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:97:0b:71:ae:66:d1:a2:3d:b2:7d:50:a0: 93:ff:60:fe:37:02:e5:67:e8:7d:04:b8:b2:bd:aa: 41:b6:29:d9:6f:81:7f:df:08:5a:23:32:de:df:51: 9d:ac:e7:f0:c2:f3:bb:1b:9b:e2:b6:a4:2b:39:8a: 9b:89:81:2f:2d:e9:07:48:78:6b:06:0f:0c:ed:b3: 72:ce:df:19:97:97:1a:e7:44:49:2e:ea:46:54:09: 66:90:e7:87:fc:53:1c:2b:9e:61:99:3c:df:c1:e0: fa:9b:f7:b3:8d:58:88:d6:01:a8:f3:39:6d:fd:3a: 37:b6:78:23:3c:b9:33:cf:e9:fa:91:7b:17:cf:7c: f1:f1:fe:68:5d:04:c6:41:3f:e4:6a:2d:78:3c:b3: a8:df:a0:27:9f:d1:2b:9a:db:8d:42:f7:00:da:2d: 48:2d:a6:b4:02:47:95:c8:c7:de:70:88:25:e0:a9: 24:48:a1:eb:b0:5a:92:41:78:5d:8c:06:70:be:70: 04:99:e2:0c:3a:7b:31:0b:5c:fe:a2:b1:0c:82:71: f0:66:45:fb:4d:5c:9b:ca:14:89:f8:a2:c6:7d:37: 58:77:92:0c:d1:73:f0:9f:8b:9f:bf:50:66:f9:f8: 00:99:7e:30:d9:95:da:18:00:e9:2f:8d:ab:f7:79: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:F4:F9:D8:91:E4:0A:DA:90:B5:90:94:DF:99:4F:B2:95:27:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d0:84:50:31:e6:86:2a:6a:04:d6:fe:25:63:08:bc:56:06: f7:25:ae:dd:09:12:c6:95:e0:d6:ee:49:41:03:43:fe:13:10: d5:76:45:ef:6e:a7:fb:56:4a:d5:28:3e:3d:76:d0:81:21:d7: 2e:d4:66:69:22:b7:b1:91:9b:1d:4f:36:fe:72:c9:f0:86:66: d8:3b:bd:73:e0:33:8c:6f:5b:7c:00:87:e4:31:d6:ea:32:f5: ed:b2:80:60:bd:e5:8d:53:8c:b4:e8:73:3b:b6:2e:e2:b2:34: f5:e2:29:98:c5:35:4d:dc:49:c9:b3:6e:6d:bf:39:af:f7:b9: 7f:fc:4f:cb:86:8c:17:a9:68:08:f3:57:16:4b:13:d3:e0:16: 03:1e:0e:dc:fa:ce:c8:51:ed:f7:75:2d:16:0a:ef:8a:58:e1: 2d:dc:52:19:6c:b9:4c:07:75:e3:4b:ee:bc:93:b8:50:9a:c4: 54:81:18:4f:f1:48:90:11:71:af:02:2e:d4:04:be:ce:a1:c6: 9c:34:f9:91:25:93:24:bf:4a:e0:2a:b4:91:54:98:05:b3:97: 18:5f:60:0f:03:9a:0c:a2:76:a8:f7:a1:23:ae:98:ee:93:0c: 55:87:8f:1c:90:4a:3d:e0:0c:66:54:47:b4:d1:a9:08:7b:3a: 9e:3f:3f:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt7znO4zN2fxF3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTI5MGMxYTMtNDg5NS00YTdjLTgxZDItODhkZTMwOTJmMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqaXC3GuZtGiPbJ9UKCT/2D+NwLlZ+h9BLiy vapBtinZb4F/3whaIzLe31GdrOfwwvO7G5vitqQrOYqbiYEvLekHSHhrBg8M7bNy zt8Zl5ca50RJLupGVAlmkOeH/FMcK55hmTzfweD6m/ezjViI1gGo8zlt/To3tngj PLkzz+n6kXsXz3zx8f5oXQTGQT/kai14PLOo36Ann9ErmtuNQvcA2i1ILaa0AkeV yMfecIgl4KkkSKHrsFqSQXhdjAZwvnAEmeIMOnsxC1z+orEMgnHwZkX7TVybyhSJ +KLGfTdYd5IM0XPwn4ufv1Bm+fgAmX4w2ZXaGADpL42r93nIUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuh9PnYkeQK2pC1kJTfmU+ylSdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2Y4MTIyMWItMGE0MS0z N2I5LTk5MDktODM0MDIwMmFiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbQhFAx5oYqagTW/iVjCLxWBvclrt0JEsaV4NbuSUEDQ/4TENV2Re9u p/tWStUoPj120IEh1y7UZmkit7GRmx1PNv5yyfCGZtg7vXPgM4xvW3wAh+Qx1uoy 9e2ygGC95Y1TjLToczu2LuKyNPXiKZjFNU3cScmzbm2/Oa/3uX/8T8uGjBepaAjz VxZLE9PgFgMeDtz6zshR7fd1LRYK74pY4S3cUhlsuUwHdeNL7ryTuFCaxFSBGE/x SJARca8CLtQEvs6hxpw0+ZElkyS/SuAqtJFUmAWzlxhfYA8Dmgyidqj3oSOumO6T DFWHjxyQSj3gDGZUR7TRqQh7Op4/P9Q= -----END CERTIFICATE-----Generated at Sun Apr 6 10:59:51 2025 by rpki-client