$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa File: d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa (raw, json) Hash identifier: h1NksGzNvMuispb8/OLpzOvAeoufwP2tJY5Sp4G8WYc= Subject key identifier: 17:6B:6B:C5:8E:CB:E8:20:A6:2E:03:2E:3F:26:53:B7:20:54:69:D3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996510B948D3710DD284880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397214 IP address blocks: 156.154.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:51:0b:94:8d:37:10:dd:28:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=de42cea4-367a-4ae1-a7ee-6f71b6251ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:a3:5f:ad:69:12:7f:72:09:b2:8a:aa:9a: ca:34:b3:96:f0:47:b4:5d:4b:22:71:39:c8:b3:c5: f3:f0:e0:ff:08:93:69:76:53:b5:4b:8a:c6:29:8d: b3:2e:6b:87:9c:5a:01:9e:a3:e4:37:15:31:f6:07: a2:c1:a6:9c:66:6c:5b:a3:3e:26:2e:c4:14:f5:84: 1d:c5:87:86:9c:d9:2e:d6:f6:fd:17:26:54:15:b8: 87:e4:57:76:9c:dc:0c:fc:c6:81:46:c5:47:0d:84: 78:dc:16:ac:a9:99:63:3e:85:f3:94:45:d1:6e:a9: 7d:3a:24:73:d1:0d:79:78:17:b3:93:73:c9:90:05: df:5d:2c:b2:61:92:7f:19:5c:f7:48:10:28:69:cd: 0d:6e:27:73:f3:f2:a9:0f:c1:a5:36:69:ef:d1:3f: 71:43:de:5d:ba:90:fc:1a:e0:39:6d:3d:9f:76:2d: a4:00:ce:5b:74:c6:0a:77:ce:38:e4:99:db:a2:87: ca:d9:5a:77:cd:ef:ce:e1:65:3f:21:e4:b9:8a:7e: 95:e3:ad:e3:82:d6:e4:70:a9:4e:06:51:04:dc:29: e0:d5:97:a3:3e:09:21:50:7b:04:c8:d9:42:c4:9d: 9a:7f:cd:b4:78:d4:63:2e:cb:f1:85:be:d4:bf:68: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6B:6B:C5:8E:CB:E8:20:A6:2E:03:2E:3F:26:53:B7:20:54:69:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:26:cd:eb:a6:c9:99:9f:3c:99:24:70:1a:5a:71:00:d8:a5: d9:36:5f:1d:5c:aa:d2:47:44:f4:18:f6:42:83:3c:ad:83:cf: fb:d2:5d:bd:a3:3c:27:23:41:2a:e3:62:4a:1e:f9:6e:88:f7: b9:f3:de:2f:a6:d6:67:69:2c:59:03:ae:e6:7b:a4:f8:2b:f1: 3c:55:0c:6e:a0:64:c8:12:82:bb:bb:e4:36:f4:9c:22:9d:0a: 64:d0:ba:f1:b4:d7:4e:a9:f5:3d:b3:73:02:f6:1d:45:ca:48: 53:62:fd:f2:2e:33:f3:f7:b6:1f:3c:a4:73:08:3d:ea:93:be: 1d:83:21:5c:8d:8d:ea:68:70:85:cf:60:17:93:4d:74:91:ff: f6:67:f1:41:1c:62:ba:a3:51:8e:54:66:7b:8c:b8:87:b1:d9: 6b:ec:2a:6c:47:53:25:28:53:48:23:d8:8e:85:a8:50:dd:ec: 49:a5:46:72:29:bf:54:a1:db:61:f7:4c:22:3d:fd:dd:6a:4c: 32:14:da:0f:a4:de:10:23:52:ae:0a:87:b5:95:ee:94:6d:88: 00:e4:b0:10:35:07:ba:4f:98:ac:45:29:a0:da:f2:2b:ad:45: c6:78:c1:62:9c:80:6b:fb:2b:4a:29:2d:e1:bd:34:cd:94:8e: ef:2a:10:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllELlI03EN0oSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGU0MmNlYTQtMzY3YS00YWUxLWE3ZWUtNmY3MWI2MjUxY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkCjX61pEn9yCbKKqprKNLOW8Ee0XUsicTnI s8Xz8OD/CJNpdlO1S4rGKY2zLmuHnFoBnqPkNxUx9geiwaacZmxboz4mLsQU9YQd xYeGnNku1vb9FyZUFbiH5Fd2nNwM/MaBRsVHDYR43BasqZljPoXzlEXRbql9OiRz 0Q15eBezk3PJkAXfXSyyYZJ/GVz3SBAoac0Nbidz8/KpD8GlNmnv0T9xQ95dupD8 GuA5bT2fdi2kAM5bdMYKd8445JnboofK2Vp3ze/O4WU/IeS5in6V463jgtbkcKlO BlEE3Cng1ZejPgkhUHsEyNlCxJ2af820eNRjLsvxhb7Uv2hYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdra8WOy+ggpi4DLj8mU7cgVGnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDdmNWE4M2UtZDdiOS0z MjU0LTg1YTctOWJhMzI4MTUwYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQmzeumyZmfPJkkcBpacQDYpdk2Xx1cqtJHRPQY9kKDPK2Dz/vSXb2j PCcjQSrjYkoe+W6I97nz3i+m1mdpLFkDruZ7pPgr8TxVDG6gZMgSgru75Db0nCKd CmTQuvG0106p9T2zcwL2HUXKSFNi/fIuM/P3th88pHMIPeqTvh2DIVyNjepocIXP YBeTTXSR//Zn8UEcYrqjUY5UZnuMuIex2WvsKmxHUyUoU0gj2I6FqFDd7EmlRnIp v1Sh22H3TCI9/d1qTDIU2g+k3hAjUq4Kh7WV7pRtiADksBA1B7pPmKxFKaDa8iut RcZ4wWKcgGv7K0opLeG9NM2Uju8qEDA= -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:54 2025 by rpki-client