$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa File: de2102d6-30e1-30c4-bde1-407cdd90a778.roa (raw, json) Hash identifier: sESOD80HBvSr8dSMC4+35zl2EzxXmOgFkypZdqmvbxc= Subject key identifier: A2:46:CB:76:F9:42:50:3C:FF:40:28:1E:C2:1F:C4:A0:EF:BE:1D:8D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2109A6565F1211327CC700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397221 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:09:a6:56:5f:12:11:32:7c:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=36716f85-0dab-4032-9550-eb29d3b83f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:f5:0a:35:06:77:32:1e:ca:ca:c0:2b:d9: 4a:dd:b8:df:16:71:e6:ca:8b:07:66:6f:87:75:75: 52:14:cd:70:f8:0c:2d:97:7f:75:fe:4e:e3:ec:ea: 7c:c1:22:18:d6:cb:8a:ab:06:2c:44:d8:31:85:b2: 62:14:93:8b:21:28:c3:77:b1:e0:d1:c7:83:c4:e0: f6:4a:a4:6d:c4:c4:e3:ab:a0:b2:03:c5:20:27:4b: e4:21:c4:cd:78:a4:99:43:2e:27:2b:fa:db:db:b5: de:d8:64:4d:60:aa:d2:d1:59:1e:34:ae:cc:83:e6: 43:15:80:1f:32:ac:72:21:51:86:b6:52:3e:64:d3: 78:54:99:fc:2a:b3:4a:da:2e:4f:c6:f9:8d:7e:97: 49:02:4d:e1:4b:08:e7:06:90:17:ce:69:e2:5b:c7: a1:62:27:75:dd:f5:ad:30:8b:87:24:2f:01:65:26: 7b:e1:4a:cc:12:54:d5:28:26:df:55:54:30:fb:b9: 6c:7c:32:e7:08:e4:75:9a:07:21:16:44:48:46:74: 7a:96:35:51:9f:50:6e:95:e6:06:22:d2:8d:1d:b0: e6:39:92:1d:ae:d2:19:41:b7:79:0b:86:50:da:dd: 7e:84:de:70:d2:16:e8:bd:e6:ff:37:97:7f:f5:b7: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:CB:76:F9:42:50:3C:FF:40:28:1E:C2:1F:C4:A0:EF:BE:1D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:74:45:9d:98:b2:c4:7c:ce:f8:39:59:f3:2e:7d:cc:5e:67: 69:25:7a:f4:e6:18:03:a8:be:f4:85:25:3d:cc:d4:57:d9:d9: 81:59:c4:62:91:0d:fa:45:f4:a8:0b:7c:40:36:2f:af:73:11: 5d:e2:81:3d:a1:b2:68:86:46:8e:44:00:57:9b:29:43:53:ae: 4a:6b:4f:d4:76:f2:4a:9a:3d:16:6a:0a:cd:60:37:ab:24:96: 5d:70:20:79:2f:da:3b:f8:65:06:f8:5f:5e:47:d8:38:a1:8f: d5:4a:33:f1:22:f9:c3:e6:68:20:14:72:58:88:58:b3:56:65: e8:a9:bb:89:63:12:dc:6a:87:9c:7b:78:fd:68:3a:7b:d3:9e: bc:4d:29:c6:c6:17:14:df:e5:64:76:ea:dc:cd:7f:d5:26:9b: e9:e8:64:28:46:db:25:7d:65:01:54:65:2a:bc:6d:6e:82:87: db:7b:80:b6:82:e0:37:8b:c6:8f:56:e2:d6:c2:47:b8:f4:01: 62:62:63:89:cc:af:1b:ef:29:8a:f5:e5:c3:1d:b8:70:9c:8b: bc:ff:04:45:fe:fd:42:56:48:e2:76:3f:d9:90:ab:ea:a8:2b: 4a:fd:87:cc:0c:5e:a0:90:25:84:30:a1:f7:18:e4:16:4f:a2: 99:ab:aa:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQmmVl8SETJ8xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MzY3MTZmODUtMGRhYi00MDMyLTk1NTAtZWIyOWQzYjgzZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp/1CjUGdzIeysrAK9lK3bjfFnHmyosHZm+H dXVSFM1w+Awtl391/k7j7Op8wSIY1suKqwYsRNgxhbJiFJOLISjDd7Hg0ceDxOD2 SqRtxMTjq6CyA8UgJ0vkIcTNeKSZQy4nK/rb27Xe2GRNYKrS0VkeNK7Mg+ZDFYAf MqxyIVGGtlI+ZNN4VJn8KrNK2i5PxvmNfpdJAk3hSwjnBpAXzmniW8ehYid13fWt MIuHJC8BZSZ74UrMElTVKCbfVVQw+7lsfDLnCOR1mgchFkRIRnR6ljVRn1BuleYG ItKNHbDmOZIdrtIZQbd5C4ZQ2t1+hN5w0hboveb/N5d/9bcU8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJGy3b5QlA8/0AoHsIfxKDvvh2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUyMTAyZDYtMzBlMS0z MGM0LWJkZTEtNDA3Y2RkOTBhNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd0RZ2YssR8zvg5WfMufcxeZ2klevTmGAOovvSFJT3M1FfZ2YFZxGKR DfpF9KgLfEA2L69zEV3igT2hsmiGRo5EAFebKUNTrkprT9R28kqaPRZqCs1gN6sk ll1wIHkv2jv4ZQb4X15H2Dihj9VKM/Ei+cPmaCAUcliIWLNWZeipu4ljEtxqh5x7 eP1oOnvTnrxNKcbGFxTf5WR26tzNf9Umm+noZChG2yV9ZQFUZSq8bW6Ch9t7gLaC 4DeLxo9W4tbCR7j0AWJiY4nMrxvvKYr15cMduHCci7z/BEX+/UJWSOJ2P9mQq+qo K0r9h8wMXqCQJYQwofcY5BZPopmrqiA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:13:32 2025 by rpki-client