$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d24a6d4c-0551-32d3-8fa9-3907a99cd84b.roa File: d24a6d4c-0551-32d3-8fa9-3907a99cd84b.roa (raw, json) Hash identifier: yy3OWEftnuqrsenrlRus9dfbc5RmAib73Ub3M2JQkWY= Subject key identifier: 65:82:96:20:66:3B:A6:4D:29:46:ED:C6:D4:B6:53:ED:7D:39:3E:5E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964DB7F06AF722F9A3A5C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d24a6d4c-0551-32d3-8fa9-3907a99cd84b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 12008 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4d:b7:f0:6a:f7:22:f9:a3:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=0fef9703-6c02-4c51-9a90-ed2923b812ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:de:c3:52:1b:5c:6a:66:24:df:0b:82:4b: fc:f4:7a:2e:53:2b:01:0a:3e:25:72:4a:cc:ef:57: 63:d2:aa:18:3c:96:d8:3a:42:4e:5e:39:c1:c3:eb: fb:6f:f7:ce:21:1c:2e:43:be:0d:55:cc:d9:7d:d9: 30:99:81:6e:05:99:26:86:89:03:84:fc:3f:e1:42: d3:e4:d6:42:95:91:d9:cc:b7:cc:3f:33:67:b5:25: 0b:9c:84:66:bc:20:ce:19:71:84:6b:e3:ad:cb:40: fc:49:c0:78:c6:6b:54:1f:7a:19:19:70:96:64:f3: fe:0a:7c:b3:b7:ea:a5:8b:39:b0:05:4e:77:41:a6: 44:03:71:9b:43:ec:37:1c:89:6b:18:9f:d2:20:fc: c0:ca:dc:dc:53:dd:ea:e7:ee:6a:e9:f9:32:69:3d: 88:a1:7b:2d:b1:c7:b8:e1:a1:28:a9:ab:db:1d:1b: e4:85:d5:2f:07:f4:36:f7:4d:ce:73:50:5d:ad:1b: c3:71:17:1e:39:08:ed:26:db:8a:23:33:a2:80:05: e0:3a:1f:16:f9:04:49:38:e4:8f:25:e1:f3:d3:11: 3e:d2:ad:66:98:7e:c6:68:3e:7d:aa:27:44:a9:96: 88:70:88:c1:aa:56:bf:13:f6:74:6d:62:4e:89:1e: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:96:20:66:3B:A6:4D:29:46:ED:C6:D4:B6:53:ED:7D:39:3E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d24a6d4c-0551-32d3-8fa9-3907a99cd84b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:16:2e:59:24:ab:4c:71:ca:1a:49:cd:43:45:2a:06:e0:50: 6a:05:d8:fe:46:bd:af:ad:64:fa:45:9d:f3:c5:84:9e:ad:67: e6:a8:fe:4c:19:ef:d9:78:aa:39:86:43:31:f8:8f:3a:02:00: 7e:d5:db:35:55:ed:2e:03:59:3f:bb:ba:12:0b:f4:74:30:36: 47:03:68:5f:05:e0:ef:9e:ad:a5:d1:5d:0e:85:ea:6b:0e:1e: 71:1c:9d:50:60:0e:47:a0:cf:eb:c9:58:a1:1f:6e:d4:f9:53: 9f:6d:8b:26:c1:98:5d:21:85:d2:0c:4f:97:ad:16:c9:55:77: fd:c8:eb:f2:a4:bc:9c:a1:40:0e:ba:1f:54:cb:4d:53:31:bb: 63:17:0a:75:ea:58:b0:e6:86:83:a9:02:84:00:6d:25:52:22: 10:c0:8b:0d:4d:4f:f0:88:eb:43:ec:b7:8e:b4:49:cf:52:1e: 73:70:b0:5d:d6:b1:8a:23:8d:c4:f3:9e:0a:5a:b5:4f:c8:d9: 70:f2:d7:0d:23:0e:8f:59:8d:0b:19:1f:fa:a7:fb:fd:f5:16: 75:d7:32:68:02:32:49:f5:0d:3a:e9:13:7b:fd:00:ad:90:73: ea:fd:3a:88:c7:b4:d9:29:7e:54:d3:1b:99:ba:39:50:f2:e1: 30:08:80:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk238Gr3IvmjpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGZlZjk3MDMtNmMwMi00YzUxLTlhOTAtZWQyOTIzYjgxMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrXew1IbXGpmJN8Lgkv89HouUysBCj4lckrM 71dj0qoYPJbYOkJOXjnBw+v7b/fOIRwuQ74NVczZfdkwmYFuBZkmhokDhPw/4ULT 5NZClZHZzLfMPzNntSULnIRmvCDOGXGEa+Oty0D8ScB4xmtUH3oZGXCWZPP+Cnyz t+qlizmwBU53QaZEA3GbQ+w3HIlrGJ/SIPzAytzcU93q5+5q6fkyaT2IoXstsce4 4aEoqavbHRvkhdUvB/Q2903Oc1BdrRvDcRceOQjtJtuKIzOigAXgOh8W+QRJOOSP JeHz0xE+0q1mmH7GaD59qidEqZaIcIjBqla/E/Z0bWJOiR4u+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWCliBmO6ZNKUbtxtS2U+19OT5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDI0YTZkNGMtMDU1MS0z MmQzLThmYTktMzkwN2E5OWNkODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIWLlkkq0xxyhpJzUNFKgbgUGoF2P5Gva+tZPpFnfPFhJ6tZ+ao/kwZ 79l4qjmGQzH4jzoCAH7V2zVV7S4DWT+7uhIL9HQwNkcDaF8F4O+eraXRXQ6F6msO HnEcnVBgDkegz+vJWKEfbtT5U59tiybBmF0hhdIMT5etFslVd/3I6/KkvJyhQA66 H1TLTVMxu2MXCnXqWLDmhoOpAoQAbSVSIhDAiw1NT/CI60Pst460Sc9SHnNwsF3W sYojjcTzngpatU/I2XDy1w0jDo9ZjQsZH/qn+/31FnXXMmgCMkn1DTrpE3v9AK2Q c+r9OojHtNkpflTTG5m6OVDy4TAIgP0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:34:31 2025 by rpki-client