$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa File: e7aabf01-851c-3ef9-b334-10a9a4085206.roa (raw, json) Hash identifier: iA4LbSt7vZ+hICsa8VP1+oy3AVvP2WylNG77tLFuyfI= Subject key identifier: 5B:1B:2C:C8:8F:9B:29:A0:97:CF:3E:D8:62:02:7A:5D:B8:FF:56:79 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848DF25966286CE34F34E22D740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa Signing time: Thu 13 Feb 2025 18:27:53 +0000 ROA not before: Thu 13 Feb 2025 18:27:53 +0000 ROA not after: Wed 14 May 2025 17:27:53 +0000 asID: 12008 IP address blocks: 156.154.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:25:96:62:86:ce:34:f3:4e:22:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 13 18:27:53 2025 GMT Not After : May 14 17:27:53 2025 GMT Subject: CN=e4389e6f-a823-4f62-be63-f6e66e58fe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:03:51:a1:de:0f:f1:c5:fc:64:93:40:c3: 3e:8b:2e:9e:3f:81:40:0b:53:6d:a9:a0:17:ba:8f: a0:46:a8:a4:11:b4:01:ba:e6:38:f4:d6:c8:ff:2b: 95:3d:99:4f:a1:70:00:8d:8a:5c:87:64:0f:97:59: e4:84:a4:b9:2c:af:99:e3:8d:6a:a3:05:50:79:69: e1:31:0d:84:45:6a:fb:5d:2b:5e:3e:ee:ea:8e:51: 4f:e6:bc:f2:ca:0f:24:55:01:b7:b0:8e:eb:13:69: f7:3c:a2:fd:b1:00:ed:50:e0:ff:ea:8f:8d:8e:1f: d7:61:4f:7b:8a:d1:2a:79:bc:9c:7a:d9:49:f8:b4: bd:1f:6c:00:b2:06:0d:6d:31:75:85:d1:11:3d:9e: 14:e1:18:36:68:2d:fc:8e:9e:f9:1f:24:45:0a:17: ec:29:22:f8:80:5d:56:89:34:72:68:67:1f:74:e9: 27:8f:71:16:3a:da:b0:2a:ba:33:56:eb:f6:75:02: bd:68:c7:52:4e:49:4f:39:55:b0:0d:d7:9e:4a:f1: e1:24:05:52:fa:d5:b6:1e:48:ac:85:ec:7f:61:cd: 9a:17:01:7d:07:28:82:9e:e9:33:1f:28:3f:cd:38: 84:a9:29:5a:19:8d:ad:c6:d5:bc:e2:c5:7a:a8:98: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1B:2C:C8:8F:9B:29:A0:97:CF:3E:D8:62:02:7A:5D:B8:FF:56:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:79:ed:88:c1:75:10:c7:45:b2:9a:94:0c:7b:dd:4b:48:45: e6:f8:ff:cd:d5:bc:cc:6f:5a:d4:f5:40:c9:01:25:23:50:97: 83:b9:f3:37:f4:c9:82:1e:99:ac:36:23:dc:95:ad:18:90:5a: 3f:16:80:ef:93:2e:72:08:56:bc:a8:15:5c:34:81:48:9e:ac: 9e:9c:3d:e0:fd:83:97:72:b9:a4:ed:36:ba:f4:66:94:45:e3: b2:63:fd:c0:c1:af:5e:d0:8a:99:b2:f2:ed:62:14:d5:26:3e: 10:bd:42:91:43:36:75:9b:d5:38:57:de:f9:d1:09:86:af:d1: cd:f1:7c:96:0b:e5:39:1d:6e:ff:c3:14:ea:ac:b7:bc:eb:ba: ff:97:e8:48:c6:ee:e0:0b:25:ba:15:44:7e:8f:26:e0:e7:36: 23:b4:79:53:7b:1a:8b:cb:fe:57:64:3a:f8:e6:ff:4d:b9:41: 60:df:41:8e:ce:be:02:4f:9d:1f:77:86:c3:81:0c:cb:ec:8b: d8:bf:b3:59:d5:56:70:28:a0:d1:70:cb:1e:da:a8:7c:8d:fb: 78:33:c7:08:9b:bb:49:5b:9d:70:22:2d:9a:d0:b0:c9:09:78: e7:ab:7c:3b:ba:6a:43:ba:3c:19:b1:ac:88:36:db:96:e1:1b: a1:55:c7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfJZZihs40804i10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIxMzE4Mjc1M1oXDTI1MDUxNDE3Mjc1M1owLzEtMCsGA1UEAxMk ZTQzODllNmYtYTgyMy00ZjYyLWJlNjMtZjZlNjZlNThmZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S4DUaHeD/HF/GSTQMM+iy6eP4FAC1NtqaAX uo+gRqikEbQBuuY49NbI/yuVPZlPoXAAjYpch2QPl1nkhKS5LK+Z441qowVQeWnh MQ2ERWr7XStePu7qjlFP5rzyyg8kVQG3sI7rE2n3PKL9sQDtUOD/6o+Njh/XYU97 itEqebycetlJ+LS9H2wAsgYNbTF1hdERPZ4U4Rg2aC38jp75HyRFChfsKSL4gF1W iTRyaGcfdOknj3EWOtqwKrozVuv2dQK9aMdSTklPOVWwDdeeSvHhJAVS+tW2Hkis hex/Yc2aFwF9ByiCnukzHyg/zTiEqSlaGY2txtW84sV6qJgqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsbLMiPmymgl88+2GICel24/1Z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTdhYWJmMDEtODUxYy0z ZWY5LWIzMzQtMTBhOWE0MDg1MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJonMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ57YjBdRDHRbKalAx73UtIReb4/83VvMxvWtT1QMkBJSNQl4O58zf0 yYIemaw2I9yVrRiQWj8WgO+TLnIIVryoFVw0gUierJ6cPeD9g5dyuaTtNrr0ZpRF 47Jj/cDBr17Qipmy8u1iFNUmPhC9QpFDNnWb1ThX3vnRCYav0c3xfJYL5Tkdbv/D FOqst7zruv+X6EjG7uALJboVRH6PJuDnNiO0eVN7GovL/ldkOvjm/025QWDfQY7O vgJPnR93hsOBDMvsi9i/s1nVVnAooNFwyx7aqHyN+3gzxwibu0lbnXAiLZrQsMkJ eOerfDu6akO6PBmxrIg225bhG6FVx94= -----END CERTIFICATE-----Generated at Sun Apr 6 17:01:33 2025 by rpki-client