$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3309236-4653-33ec-b9f4-fa1467de1c17.roa File: e3309236-4653-33ec-b9f4-fa1467de1c17.roa (raw, json) Hash identifier: rcxZwNkVYRY71Q1rvLA5MlpkGGUu2kjo7IeB5qp8JNM= Subject key identifier: 03:C6:04:E8:86:26:48:31:CC:88:3A:DD:56:C6:C8:95:79:57:8D:81 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD21125EBD7F4115C80A1D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3309236-4653-33ec-b9f4-fa1467de1c17.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397240 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:12:5e:bd:7f:41:15:c8:0a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=9a57bf79-d970-4c3c-8de6-2809f3613c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:64:5e:42:89:f0:f2:b6:ff:ea:1d:ab:78: 6c:24:be:29:a8:d1:39:17:9b:a3:21:15:fe:5f:e6: 99:fc:6f:e0:30:dd:04:2a:cc:05:50:a1:43:21:38: 55:c0:45:74:32:8a:fc:95:b9:03:60:53:c0:db:f3: 99:af:fd:c1:45:6f:c1:33:33:12:a1:e6:7d:e3:5e: 58:f8:bb:67:5e:08:53:f5:2a:9c:4d:a1:ba:ec:18: f4:3d:59:e0:46:1b:28:86:b6:5c:be:d1:19:d2:a7: 47:52:8e:96:2a:67:d9:54:40:30:9e:8b:56:07:18: 14:b5:a6:03:e3:59:52:04:9e:4f:ad:83:72:33:2f: 97:42:52:9a:2e:18:76:03:10:79:1e:ea:dc:9a:21: 50:73:3f:cf:e5:83:9a:39:3e:87:c2:f1:d6:b1:c6: 51:93:49:a9:04:7e:44:42:10:f4:21:49:ab:9a:42: c9:1c:8c:9f:63:cb:ad:b0:9b:7b:df:71:ed:ca:34: d9:1f:c1:d4:20:f1:a1:d2:49:58:c4:8a:3b:4a:61: 43:52:6c:4c:08:93:38:e1:a9:cd:86:97:24:66:4c: fa:8f:c6:37:35:96:a3:9f:ea:65:0a:a9:3e:99:9e: 57:aa:65:85:59:75:cb:a2:f4:dd:f1:1a:5e:fe:bd: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:04:E8:86:26:48:31:CC:88:3A:DD:56:C6:C8:95:79:57:8D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3309236-4653-33ec-b9f4-fa1467de1c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:96:9d:2f:1c:28:c7:ec:f5:02:c9:d8:28:c1:08:9f:02:e7: 54:fd:fb:91:79:d6:d7:c9:c0:2d:a2:33:cc:bf:43:27:f2:88: 50:cd:81:58:17:eb:d1:e2:98:2d:61:9c:a4:76:6f:c6:aa:2c: 24:a5:2d:6c:ac:fd:fe:5a:06:21:55:b3:05:d2:b5:fd:6f:35: ce:27:84:46:a2:e2:d0:e1:d5:44:9c:e0:50:11:f0:05:44:24: b9:8f:74:94:b5:fd:93:e6:31:c0:8c:33:55:ec:c8:a1:1b:3d: 75:68:43:65:9d:7d:65:94:20:a0:9e:a3:fb:b2:55:96:09:53: e2:cc:98:fc:df:f6:31:b2:1c:09:0a:07:e6:bc:88:d9:47:e1: 6c:5e:41:97:b7:69:22:48:cb:a4:81:63:a2:a1:4a:47:df:c3: f3:8a:98:81:79:70:99:75:16:88:9e:a2:14:75:ab:00:d4:0c: 87:2b:43:50:1b:38:f9:85:d6:10:b9:09:9b:a1:c5:f4:64:dc: 36:0d:b6:24:7b:3c:0c:2f:a5:fc:ad:64:76:ac:a0:5a:00:e1: 35:e3:b6:29:79:88:ab:36:0b:a7:b4:a8:6c:71:f5:17:b1:9a: ab:69:a8:9f:26:b0:33:85:c9:10:24:9b:51:51:bb:6e:43:04: a6:c8:35:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRJevX9BFcgKHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk OWE1N2JmNzktZDk3MC00YzNjLThkZTYtMjgwOWYzNjEzYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/BkXkKJ8PK2/+odq3hsJL4pqNE5F5ujIRX+ X+aZ/G/gMN0EKswFUKFDIThVwEV0Mor8lbkDYFPA2/OZr/3BRW/BMzMSoeZ9415Y +LtnXghT9SqcTaG67Bj0PVngRhsohrZcvtEZ0qdHUo6WKmfZVEAwnotWBxgUtaYD 41lSBJ5PrYNyMy+XQlKaLhh2AxB5HurcmiFQcz/P5YOaOT6HwvHWscZRk0mpBH5E QhD0IUmrmkLJHIyfY8utsJt733HtyjTZH8HUIPGh0klYxIo7SmFDUmxMCJM44anN hpckZkz6j8Y3NZajn+plCqk+mZ5XqmWFWXXLovTd8Rpe/r1u5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPGBOiGJkgxzIg63VbGyJV5V42BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTMzMDkyMzYtNDY1My0z M2VjLWI5ZjQtZmExNDY3ZGUxYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGWnS8cKMfs9QLJ2CjBCJ8C51T9+5F51tfJwC2iM8y/QyfyiFDNgVgX 69HimC1hnKR2b8aqLCSlLWys/f5aBiFVswXStf1vNc4nhEai4tDh1USc4FAR8AVE JLmPdJS1/ZPmMcCMM1XsyKEbPXVoQ2WdfWWUIKCeo/uyVZYJU+LMmPzf9jGyHAkK B+a8iNlH4WxeQZe3aSJIy6SBY6KhSkffw/OKmIF5cJl1FoieohR1qwDUDIcrQ1Ab OPmF1hC5CZuhxfRk3DYNtiR7PAwvpfytZHasoFoA4TXjtil5iKs2C6e0qGxx9Rex mqtpqJ8msDOFyRAkm1FRu25DBKbINfE= -----END CERTIFICATE-----Generated at Sun Apr 6 08:34:07 2025 by rpki-client