$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa File: dda9eb20-2d36-33fe-8705-27586da0d749.roa (raw, json) Hash identifier: 9kwRV2bPocoyUbNGg72xxzIQWx1zeLeMMRXcnvi/Tjs= Subject key identifier: B0:F8:F5:5C:E0:95:86:84:13:87:FD:0C:D0:01:42:94:62:31:AD:54 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99651F30F711158DD0B7200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397233 IP address blocks: 156.154.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:51:f3:0f:71:11:58:dd:0b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d16f5f3b-98ba-4429-8c48-d8ec0335604c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:a6:79:93:13:d2:19:46:e8:6d:0a:b7:e4: c8:92:b6:0e:db:9d:7c:7f:6f:3a:a7:7e:96:3a:5f: c7:70:fc:01:9e:2f:32:a2:5a:cd:6c:fd:d4:f6:3c: 85:1c:7f:35:e1:28:ef:30:fe:e9:eb:c3:f0:e0:5a: f0:22:eb:c8:61:b7:84:1f:37:74:43:a6:d6:b8:f4: 3d:6a:2d:ab:67:18:55:15:1f:70:4a:66:9d:e6:3f: c3:1f:80:19:44:9f:34:16:ed:42:8a:49:e2:03:9e: 6f:f1:f3:bc:b3:55:66:fc:27:84:6a:1c:cf:75:b7: 22:46:98:ee:d0:17:1b:f6:33:41:f2:60:60:ca:82: 37:04:84:3b:75:56:b2:a0:fc:05:0c:36:3e:f4:41: 15:98:28:5d:ce:a1:14:19:ab:0a:ed:d6:7b:9e:64: 19:7b:ff:aa:4e:0f:95:57:be:bd:42:41:8c:54:c1: 9a:b5:09:2f:47:67:85:6c:ee:a5:51:bf:95:b2:b3: a3:1c:4e:9f:26:40:4a:1f:a0:f5:d5:e5:bb:99:bc: 48:43:72:bc:66:20:cf:b5:23:9f:62:3f:f9:28:5f: ef:bf:dd:8e:eb:01:a0:4d:2b:47:ec:0e:61:5d:cc: f9:a6:4d:da:51:6f:3b:0e:8e:bc:40:bb:69:43:2f: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F8:F5:5C:E0:95:86:84:13:87:FD:0C:D0:01:42:94:62:31:AD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:81:4e:0e:65:f7:71:68:69:f2:5a:34:96:cf:37:f6:1d:3b: 0c:40:be:c1:6d:53:7b:eb:76:df:e4:3a:44:82:ea:c6:71:01: be:33:13:0e:3e:4b:0a:af:cf:b8:74:cd:62:6c:af:2e:cd:5d: 37:d9:cc:16:46:89:9a:63:b7:45:2a:c8:2f:9f:dd:1f:d2:e1: 6d:d9:ad:6d:c7:57:7d:1d:f7:7c:d0:6e:56:90:7d:70:90:28: fc:4f:d2:4b:36:81:70:5e:4b:78:bf:66:77:05:ac:ec:d9:bb: d1:a4:a0:c2:a8:52:28:be:17:d3:46:18:44:b4:c5:15:57:2e: c5:99:b2:97:d3:17:2c:fd:32:f7:a1:5f:cf:a2:6b:2e:1a:bc: 69:18:49:8d:b8:08:eb:8b:c7:6e:02:c1:92:0a:f8:a4:14:68: dd:8c:32:db:49:f9:11:f5:85:a1:33:e6:41:f7:dd:55:8d:d3: 78:fa:a8:6b:a2:be:30:8d:8b:ff:de:2b:52:35:e2:01:75:f3: 84:2e:d8:ab:f8:4b:99:7d:85:07:f3:ae:31:8e:1c:18:ac:42: 4c:a7:94:bc:c5:d8:1b:6e:c7:de:15:49:e9:9a:d8:35:93:db: 88:80:cd:a7:c7:3c:4f:eb:66:9c:71:11:91:a5:0f:46:a8:58: 86:1a:5b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllHzD3ERWN0LcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDE2ZjVmM2ItOThiYS00NDI5LThjNDgtZDhlYzAzMzU2MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUqmeZMT0hlG6G0Kt+TIkrYO2518f286p36W Ol/HcPwBni8yolrNbP3U9jyFHH814SjvMP7p68Pw4FrwIuvIYbeEHzd0Q6bWuPQ9 ai2rZxhVFR9wSmad5j/DH4AZRJ80Fu1CikniA55v8fO8s1Vm/CeEahzPdbciRpju 0Bcb9jNB8mBgyoI3BIQ7dVayoPwFDDY+9EEVmChdzqEUGasK7dZ7nmQZe/+qTg+V V769QkGMVMGatQkvR2eFbO6lUb+VsrOjHE6fJkBKH6D11eW7mbxIQ3K8ZiDPtSOf Yj/5KF/vv92O6wGgTStH7A5hXcz5pk3aUW87Do68QLtpQy98mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD49VzglYaEE4f9DNABQpRiMa1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRhOWViMjAtMmQzNi0z M2ZlLTg3MDUtMjc1ODZkYTBkNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKBTg5l93FoafJaNJbPN/YdOwxAvsFtU3vrdt/kOkSC6sZxAb4zEw4+ Swqvz7h0zWJsry7NXTfZzBZGiZpjt0UqyC+f3R/S4W3ZrW3HV30d93zQblaQfXCQ KPxP0ks2gXBeS3i/ZncFrOzZu9GkoMKoUii+F9NGGES0xRVXLsWZspfTFyz9Mveh X8+iay4avGkYSY24COuLx24CwZIK+KQUaN2MMttJ+RH1haEz5kH33VWN03j6qGui vjCNi//eK1I14gF184Qu2Kv4S5l9hQfzrjGOHBisQkynlLzF2Btux94VSema2DWT 24iAzafHPE/rZpxxEZGlD0aoWIYaWxU= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:41 2025 by rpki-client