$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa File: dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa (raw, json) Hash identifier: TCPLy30K+J2POb056EjVmjmi2gCtVKUuCecWut6TU/E= Subject key identifier: 42:D3:CA:0F:45:60:E4:80:19:30:F2:D5:3D:7B:0E:86:18:BD:52:D5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2106437F9B8E032C212CA4 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397226 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:06:43:7f:9b:8e:03:2c:21:2c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=bdfc68c4-e52b-4b74-9ab9-3e1b32b44fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:ad:ce:bc:6b:29:35:f3:84:86:24:e9:7f: f5:22:25:ad:3c:4c:cd:ff:87:2e:79:53:b1:73:4b: 03:9c:44:44:b5:35:a5:d9:7e:1c:c2:6a:dc:a3:5d: a7:d3:d0:03:c2:7f:3f:d8:64:ff:ea:d4:92:4b:26: e5:4c:d4:71:c8:53:85:bb:45:ed:8e:5a:a4:93:05: c8:ee:61:9a:f1:20:c7:b2:eb:b8:3d:f5:32:ae:5b: 3b:27:54:a9:59:bb:0d:24:b6:31:69:7e:eb:37:75: a5:b6:f3:b1:a9:03:df:61:39:8c:0f:01:74:93:b3: a5:bf:ca:ae:a5:ee:d9:dc:23:5f:1a:99:6d:d0:a7: bd:21:82:60:1d:cd:d0:ac:64:8a:8b:b9:96:c4:41: 67:dc:70:62:bd:e6:7e:46:02:77:51:a8:a0:8f:1e: 20:24:08:47:81:c9:75:c9:63:4a:07:89:b6:ed:9d: c9:49:f8:fb:58:92:0f:7f:18:78:31:36:7e:1a:f7: e4:6e:9d:32:84:f7:2a:da:dd:8e:24:75:c3:44:e0: fd:9c:56:c9:ee:0c:7e:0d:b5:41:51:f6:6b:b7:7f: 2a:a6:1a:4d:d2:1e:d2:81:0b:43:8a:28:aa:d2:87: 0a:4e:79:b3:2b:03:8b:9b:88:c5:ff:11:a3:82:2d: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D3:CA:0F:45:60:E4:80:19:30:F2:D5:3D:7B:0E:86:18:BD:52:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7a:db:65:2a:59:97:0a:ba:d4:3e:e2:2d:11:a8:44:a0:bb: ef:97:5b:51:fa:80:fe:c1:5e:cb:72:60:c8:f3:84:cf:8a:3b: 0b:ac:6e:f2:ed:ae:18:6d:ee:60:92:fe:0c:77:58:2f:1a:ed: 17:1e:d4:46:f2:4b:d8:b1:d9:63:89:fc:17:f9:48:ec:4a:ad: 10:07:c1:87:fc:fd:f3:16:d8:9e:67:32:c2:8a:60:2f:67:f4: 1f:c3:21:0b:77:8f:c2:32:91:a8:9b:c5:33:fc:7a:4f:31:28: 65:fa:5f:f9:b0:9f:72:bf:cc:34:2d:a8:5b:e9:76:48:b9:fb: 09:65:fd:f7:e0:ec:de:a6:22:0b:c1:51:47:d2:31:04:79:64: 27:d6:73:17:a2:78:fd:61:0e:db:f4:32:f3:ef:e9:72:5d:5f: d1:89:52:06:8e:2f:b7:88:c5:ab:db:71:73:6f:4e:02:eb:e7: 02:5b:3b:1d:28:bb:74:eb:63:64:d0:0e:5c:e3:66:88:f1:ce: bb:0f:57:90:22:65:78:e9:50:bb:4c:01:37:dd:6c:a0:53:b4: 85:c4:8e:2c:75:ec:a3:e8:6d:39:b0:99:06:56:e7:37:6b:09: 71:eb:92:9d:fd:86:7e:95:97:42:19:75:50:f8:a7:07:07:38: ea:fd:b2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQZDf5uOAywhLKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YmRmYzY4YzQtZTUyYi00Yjc0LTlhYjktM2UxYjMyYjQ0ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6tzrxrKTXzhIYk6X/1IiWtPEzN/4cueVOx c0sDnEREtTWl2X4cwmrco12n09ADwn8/2GT/6tSSSyblTNRxyFOFu0XtjlqkkwXI 7mGa8SDHsuu4PfUyrls7J1SpWbsNJLYxaX7rN3WltvOxqQPfYTmMDwF0k7Olv8qu pe7Z3CNfGplt0Ke9IYJgHc3QrGSKi7mWxEFn3HBiveZ+RgJ3Uaigjx4gJAhHgcl1 yWNKB4m27Z3JSfj7WJIPfxh4MTZ+Gvfkbp0yhPcq2t2OJHXDROD9nFbJ7gx+DbVB UfZrt38qphpN0h7SgQtDiiiq0ocKTnmzKwOLm4jF/xGjgi03QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELTyg9FYOSAGTDy1T17DoYYvVLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM3ODlkN2MtNjhhZS0z NGNhLWExYTktYzQyZTBmZjgyYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV622UqWZcKutQ+4i0RqESgu++XW1H6gP7BXstyYMjzhM+KOwusbvLt rhht7mCS/gx3WC8a7Rce1EbyS9ix2WOJ/Bf5SOxKrRAHwYf8/fMW2J5nMsKKYC9n 9B/DIQt3j8IykaibxTP8ek8xKGX6X/mwn3K/zDQtqFvpdki5+wll/ffg7N6mIgvB UUfSMQR5ZCfWcxeieP1hDtv0MvPv6XJdX9GJUgaOL7eIxavbcXNvTgLr5wJbOx0o u3TrY2TQDlzjZojxzrsPV5AiZXjpULtMATfdbKBTtIXEjix17KPobTmwmQZW5zdr CXHrkp39hn6Vl0IZdVD4pwcHOOr9sl0= -----END CERTIFICATE-----Generated at Sun Apr 6 04:55:31 2025 by rpki-client