$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e82f6513-6f41-36ca-b689-181a4d500f2e.roa File: e82f6513-6f41-36ca-b689-181a4d500f2e.roa (raw, json) Hash identifier: tj5o6CPgXqYBX8EK3ecqblRH0KMbMA6t8xis9QbYUP4= Subject key identifier: FB:49:A4:73:BD:5F:37:8E:D3:01:C1:A4:E8:CD:BB:CD:71:1E:E5:4F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20ECEBA89CE0AB3DC95E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e82f6513-6f41-36ca-b689-181a4d500f2e.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397239 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ec:eb:a8:9c:e0:ab:3d:c9:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=76a3e9f5-15bb-4743-8389-58041302e3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:54:44:63:1a:0c:56:9e:a2:da:4f:ea:a6: 75:5e:5d:9b:5b:ee:ff:f2:f5:77:36:09:eb:f0:b2: 21:47:79:a2:4e:2d:ce:f9:02:8c:98:fb:f0:7b:f2: ee:0e:df:e8:69:53:dc:03:80:67:dc:ef:91:5c:b7: e7:1a:5b:c6:9c:6e:46:dd:60:99:01:63:c2:19:ff: 02:96:de:a5:ec:e6:85:48:6b:08:02:1a:0b:4c:8f: 67:b5:67:16:7d:87:fa:f5:f8:4f:3a:fa:d3:6c:d6: 6a:e2:91:da:ee:83:b8:90:27:7c:99:df:3b:51:ec: b2:9c:0c:31:88:fe:fc:e1:d3:83:dd:0d:98:4f:06: ee:3c:35:89:14:a5:bb:7a:c7:d0:45:8f:df:19:37: d9:5e:b0:71:18:46:40:62:c7:d4:58:72:79:b3:09: a8:ff:f9:c4:22:a0:3b:8c:0a:ea:ef:2e:08:eb:fe: de:04:a7:71:35:7e:b7:a2:ef:85:84:e1:8a:b6:6f: 87:3b:80:6d:1a:43:48:7a:1c:d5:f7:d9:67:31:67: c3:2a:67:6c:39:79:b1:91:23:7e:65:a4:3b:51:1d: a6:6f:49:7f:41:b6:fa:68:bf:d2:e5:de:94:ce:12: 9d:1a:42:fb:17:e9:65:5d:f4:49:18:54:e1:7e:d1: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:49:A4:73:BD:5F:37:8E:D3:01:C1:A4:E8:CD:BB:CD:71:1E:E5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e82f6513-6f41-36ca-b689-181a4d500f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:8b:d0:3f:a0:37:38:60:92:7b:24:d8:40:54:a3:a6:bd: a1:a2:e5:33:29:a3:f4:29:22:59:7b:09:3f:cd:ad:cb:90:e2: b9:bd:1e:90:1e:5b:94:4a:fa:be:35:86:af:78:b1:42:bf:c6: 96:b9:2d:0b:05:75:6e:de:00:8d:0e:65:a8:d1:7f:b8:b4:0a: 8a:27:11:77:11:df:34:64:72:69:88:07:70:c5:f7:45:e9:95: 11:0e:40:a9:07:38:d8:c1:7b:c5:6b:ad:7c:96:cf:f7:5c:f6: 6f:7d:93:7f:49:3e:6f:40:13:e4:b7:67:f8:ff:ff:7e:cc:f6: 48:80:c5:e8:fd:ef:03:07:9e:8d:a6:8e:af:4f:6a:09:b5:b8: f0:83:89:e3:8a:e0:fe:e7:66:99:71:26:cb:e2:0f:92:95:af: 14:32:f1:16:70:7a:49:93:76:9b:bc:1a:1c:6b:d0:3f:9e:26: ef:58:0f:24:a0:6c:4e:ba:22:b3:bd:ae:b8:e7:15:bd:bd:67: 2b:53:1b:8f:71:cb:40:cf:bb:54:77:35:a8:66:7b:5d:51:4d: 96:ef:5f:77:c8:f0:0d:77:1a:df:2e:71:64:18:25:df:3b:71: 92:6e:98:79:cf:38:97:a4:23:f0:bb:30:ea:c9:2b:f4:01:8f: 17:a0:b5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOzrqJzgqz3JXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NzZhM2U5ZjUtMTViYi00NzQzLTgzODktNTgwNDEzMDJlM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9adURGMaDFaeotpP6qZ1Xl2bW+7/8vV3Ngnr 8LIhR3miTi3O+QKMmPvwe/LuDt/oaVPcA4Bn3O+RXLfnGlvGnG5G3WCZAWPCGf8C lt6l7OaFSGsIAhoLTI9ntWcWfYf69fhPOvrTbNZq4pHa7oO4kCd8md87UeyynAwx iP784dOD3Q2YTwbuPDWJFKW7esfQRY/fGTfZXrBxGEZAYsfUWHJ5swmo//nEIqA7 jArq7y4I6/7eBKdxNX63ou+FhOGKtm+HO4BtGkNIehzV99lnMWfDKmdsOXmxkSN+ ZaQ7UR2mb0l/Qbb6aL/S5d6UzhKdGkL7F+llXfRJGFThftEsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtJpHO9XzeO0wHBpOjNu81xHuVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTgyZjY1MTMtNmY0MS0z NmNhLWI2ODktMTgxYTRkNTAwZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAwi9A/oDc4YJJ7JNhAVKOmvaGi5TMpo/QpIll7CT/NrcuQ4rm9HpAe W5RK+r41hq94sUK/xpa5LQsFdW7eAI0OZajRf7i0CoonEXcR3zRkcmmIB3DF90Xp lREOQKkHONjBe8VrrXyWz/dc9m99k39JPm9AE+S3Z/j//37M9kiAxej97wMHno2m jq9Pagm1uPCDieOK4P7nZplxJsviD5KVrxQy8RZwekmTdpu8Ghxr0D+eJu9YDySg bE66IrO9rrjnFb29ZytTG49xy0DPu1R3Nahme11RTZbvX3fI8A13Gt8ucWQYJd87 cZJumHnPOJekI/C7MOrJK/QBjxegtb8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:16:17 2025 by rpki-client