$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa File: ef003311-7121-3824-bcbc-494d7e7fe6ad.roa (raw, json) Hash identifier: P432WLLurA5kva+P4ZwNfyvGGxHe9fHNk+SZIv+WW0M= Subject key identifier: 97:0E:34:8D:22:71:FB:B8:8F:AF:D6:90:6F:2D:4A:1B:BB:20:EB:38 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EA0EFAAB589E75C79200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397222 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ea:0e:fa:ab:58:9e:75:c7:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=49603dc2-8596-4200-90a0-78ce2f71b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:36:63:3c:17:45:59:96:a1:bd:c2:85:52: a2:90:92:c5:1b:79:7c:86:b0:36:ad:75:ce:1f:bb: 7d:df:15:dc:5b:a2:5a:fe:37:2a:f2:31:62:a4:0e: 15:2d:36:1c:f0:8a:46:69:20:73:92:4b:de:3c:df: 27:7a:19:c7:66:56:82:98:a7:b0:24:9c:54:9f:f9: 54:98:f6:55:7c:15:e3:e2:ce:ea:b2:97:d0:38:8c: ea:3a:56:46:b8:5a:72:48:87:df:e0:b4:d5:6c:22: 81:04:00:ff:30:22:95:5d:9d:5c:d5:80:81:44:6b: ab:f1:84:42:96:81:22:1a:0d:bf:98:34:fb:08:34: 2c:32:ca:03:2e:84:5e:ed:3c:5c:db:97:b7:6c:67: e3:ff:e1:64:cc:12:9e:4b:c6:88:89:d6:eb:a8:f0: 7d:95:c2:06:10:84:03:2c:1c:8b:c9:67:be:e0:7c: ce:0f:62:af:1d:91:53:fa:85:d6:a3:fa:e7:92:5e: 91:2d:50:e0:80:93:c5:ba:3b:e1:ac:af:ad:02:dc: 68:3c:af:a0:80:12:66:1a:53:05:97:d5:76:8b:30: 2c:da:ae:86:29:f2:42:94:1e:23:fc:d2:a4:1a:ac: 94:57:38:16:c3:31:c7:09:05:3e:4f:6b:f3:5e:dd: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:34:8D:22:71:FB:B8:8F:AF:D6:90:6F:2D:4A:1B:BB:20:EB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:08:08:d3:f1:c8:33:13:bc:f8:9d:f9:00:9c:55:0e:fa:e0: c0:b2:f1:a5:8a:06:85:93:41:fc:bb:04:9f:69:59:af:43:53: d6:8d:6b:4c:98:9f:62:f9:a6:a5:84:73:2a:77:72:1e:47:47: a8:0c:1e:34:8f:87:18:ae:2b:fa:e0:d5:c4:fc:58:ea:4f:43: 01:38:3e:b1:94:38:51:7f:2f:0a:bc:c3:9c:a9:ef:3a:86:84: 6a:7f:1f:6d:3b:b1:13:71:6d:ff:03:b7:62:19:43:22:bf:a9: 3f:b9:68:da:a2:73:9c:84:cf:5a:dc:89:93:c6:91:5a:12:95: 56:38:0b:74:dd:cf:4e:51:76:c5:4c:ba:c4:58:1f:e2:6f:89: 86:6d:22:1b:f4:9e:1f:18:9c:29:be:de:77:21:4f:9e:14:f0: 70:44:c0:fc:f5:98:2f:97:86:db:75:a0:4e:04:d2:55:07:50: bb:e2:36:56:b1:4c:c9:ed:b1:3f:1c:ba:62:a9:46:2b:0a:6f: f1:51:10:ad:64:6c:ae:65:33:cb:6f:f0:ba:d7:14:08:aa:db: 12:d0:66:31:ed:70:c1:8c:66:ae:aa:59:06:af:a1:a9:f0:d8: 29:1f:d5:ed:47:be:d6:94:2b:1d:d5:0f:27:83:84:31:95:2f: e4:d7:35:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuoO+qtYnnXHkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDk2MDNkYzItODU5Ni00MjAwLTkwYTAtNzhjZTJmNzFiM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tc2YzwXRVmWob3ChVKikJLFG3l8hrA2rXXO H7t93xXcW6Ja/jcq8jFipA4VLTYc8IpGaSBzkkvePN8nehnHZlaCmKewJJxUn/lU mPZVfBXj4s7qspfQOIzqOlZGuFpySIff4LTVbCKBBAD/MCKVXZ1c1YCBRGur8YRC loEiGg2/mDT7CDQsMsoDLoRe7Txc25e3bGfj/+FkzBKeS8aIidbrqPB9lcIGEIQD LByLyWe+4HzOD2KvHZFT+oXWo/rnkl6RLVDggJPFujvhrK+tAtxoPK+ggBJmGlMF l9V2izAs2q6GKfJClB4j/NKkGqyUVzgWwzHHCQU+T2vzXt00+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcONI0icfu4j6/WkG8tShu7IOs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWYwMDMzMTEtNzEyMS0z ODI0LWJjYmMtNDk0ZDdlN2ZlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAICNPxyDMTvPid+QCcVQ764MCy8aWKBoWTQfy7BJ9pWa9DU9aNa0yY n2L5pqWEcyp3ch5HR6gMHjSPhxiuK/rg1cT8WOpPQwE4PrGUOFF/Lwq8w5yp7zqG hGp/H207sRNxbf8Dt2IZQyK/qT+5aNqic5yEz1rciZPGkVoSlVY4C3Tdz05RdsVM usRYH+JviYZtIhv0nh8YnCm+3nchT54U8HBEwPz1mC+Xhtt1oE4E0lUHULviNlax TMntsT8cumKpRisKb/FREK1kbK5lM8tv8LrXFAiq2xLQZjHtcMGMZq6qWQavoanw 2Ckf1e1HvtaUKx3VDyeDhDGVL+TXNQw= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:10 2025 by rpki-client