$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec443086-354a-317b-929d-d0f2b6e4d40e.roa File: ec443086-354a-317b-929d-d0f2b6e4d40e.roa (raw, json) Hash identifier: sTCzWY51meV15f0qp9OWagma5DsEXvNJqpMCmM30wbo= Subject key identifier: D5:6C:FA:8D:56:CF:5D:D7:00:12:E5:C1:F5:2D:44:E6:67:25:3D:D8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EE48F85F11C7B56CE1E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec443086-354a-317b-929d-d0f2b6e4d40e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397232 IP address blocks: 156.154.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ee:48:f8:5f:11:c7:b5:6c:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=64ebf729-8d57-4392-9de0-caddec6efb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:54:13:62:f1:b8:7e:81:67:06:75:d3:14: eb:71:54:a7:a2:d7:bf:c5:cc:3d:b8:65:af:3f:56: d5:97:1e:6e:42:7c:87:40:d7:b5:a8:66:af:8b:db: 95:a3:8c:f2:8e:41:02:00:51:71:b4:35:b3:40:9a: 37:0a:58:3c:d9:ad:f0:65:9b:21:72:86:a3:85:f4: 94:c0:32:9a:59:75:07:ac:d4:0e:0d:57:9e:c3:50: 2e:b7:85:90:0f:42:da:25:44:1b:d6:97:88:ed:3a: f3:53:b7:d1:26:71:c6:08:98:ed:ef:ea:2e:82:15: ce:2c:43:24:7d:13:58:fc:ea:d8:4c:10:91:7a:3a: b5:dc:c0:0d:1f:44:ac:d1:e0:18:f4:97:46:b3:71: 3a:6b:e2:c7:3c:b5:5f:67:c3:8d:c4:8a:c1:5b:d4: 01:3b:ed:55:9c:23:d9:b0:fe:18:5c:44:4a:51:7f: fa:4d:c9:be:8c:19:da:f1:54:20:7c:fa:c6:de:07: f9:fa:d5:f3:b1:68:54:12:6a:d8:6b:3f:a8:e1:f3: 5a:bd:90:1c:58:4d:4f:05:2d:dc:4a:b3:04:b2:9e: 94:f9:d2:32:32:24:1c:99:2b:d6:16:68:37:6b:78: c1:a1:36:c2:c3:7a:90:01:f0:e4:dc:54:67:1c:b4: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:FA:8D:56:CF:5D:D7:00:12:E5:C1:F5:2D:44:E6:67:25:3D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec443086-354a-317b-929d-d0f2b6e4d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b3:56:86:b2:ac:69:62:4b:59:d4:74:82:b3:fd:21:dc:c9: 86:c9:d2:a7:c9:d1:23:5d:02:69:45:d3:5c:16:bd:f6:e8:b2: 54:51:68:b6:a9:00:09:9f:ed:11:de:7e:03:29:73:75:8c:37: cf:0e:c1:81:b5:27:8f:f1:e3:0b:78:01:35:d8:6e:80:bb:8c: 40:62:24:ac:15:05:b1:89:ae:76:25:89:01:e1:e6:2a:a7:9a: c1:ba:2b:7e:0c:f6:c9:79:97:a8:9e:b2:ac:75:06:41:d7:51: 17:b7:a7:51:f8:2c:87:e9:f8:17:1b:b8:58:b7:c9:04:28:48: 16:94:95:13:c4:9d:0c:7a:13:8c:a3:8c:05:e5:25:f5:aa:c0: f5:0f:f3:dd:e8:cd:d8:c1:36:3e:7f:aa:41:e3:70:81:b7:ae: f8:67:ae:92:90:63:d3:33:21:be:f6:bc:d1:e9:eb:cd:cd:11: 3b:0c:41:44:8e:31:23:0e:ec:67:71:51:ef:c4:1e:0e:93:aa: 0e:b9:9a:0f:17:38:90:24:37:53:7e:ea:2f:1b:2d:46:3f:ce: 4c:13:13:5f:34:16:fe:84:12:ea:ab:1f:9b:b9:4b:63:6c:06: 1a:51:ba:25:9a:e0:63:85:a3:72:cf:c3:ab:7c:a8:ef:d8:99: 52:0f:ed:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu5I+F8Rx7Vs4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjRlYmY3MjktOGQ1Ny00MzkyLTlkZTAtY2FkZGVjNmVmYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxUE2LxuH6BZwZ10xTrcVSnote/xcw9uGWv P1bVlx5uQnyHQNe1qGavi9uVo4zyjkECAFFxtDWzQJo3Clg82a3wZZshcoajhfSU wDKaWXUHrNQODVeew1Aut4WQD0LaJUQb1peI7TrzU7fRJnHGCJjt7+oughXOLEMk fRNY/OrYTBCRejq13MANH0Ss0eAY9JdGs3E6a+LHPLVfZ8ONxIrBW9QBO+1VnCPZ sP4YXERKUX/6Tcm+jBna8VQgfPrG3gf5+tXzsWhUEmrYaz+o4fNavZAcWE1PBS3c SrMEsp6U+dIyMiQcmSvWFmg3a3jBoTbCw3qQAfDk3FRnHLSMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVs+o1Wz13XABLlwfUtROZnJT3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWM0NDMwODYtMzU0YS0z MTdiLTkyOWQtZDBmMmI2ZTRkNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOzVoayrGliS1nUdIKz/SHcyYbJ0qfJ0SNdAmlF01wWvfboslRRaLap AAmf7RHefgMpc3WMN88OwYG1J4/x4wt4ATXYboC7jEBiJKwVBbGJrnYliQHh5iqn msG6K34M9sl5l6iesqx1BkHXURe3p1H4LIfp+BcbuFi3yQQoSBaUlRPEnQx6E4yj jAXlJfWqwPUP893ozdjBNj5/qkHjcIG3rvhnrpKQY9MzIb72vNHp683NETsMQUSO MSMO7GdxUe/EHg6Tqg65mg8XOJAkN1N+6i8bLUY/zkwTE180Fv6EEuqrH5u5S2Ns BhpRuiWa4GOFo3LPw6t8qO/YmVIP7RQ= -----END CERTIFICATE-----Generated at Sun Apr 6 18:21:27 2025 by rpki-client