$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef5df301-3c09-3579-8988-9a826fc55389.roa File: ef5df301-3c09-3579-8988-9a826fc55389.roa (raw, json) Hash identifier: ImSPuKTNUVBT0jU32R0dw4jcmcQtGRZPMNQH9ZC44Ng= Subject key identifier: 2A:69:CE:C9:22:3E:B1:A8:81:F5:76:9C:C7:A4:20:F0:BE:F8:1E:0B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963C49EDF96F9B899C1480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef5df301-3c09-3579-8988-9a826fc55389.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397226 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3c:49:ed:f9:6f:9b:89:9c:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ee8126e9-6799-49ca-8c8e-78089f340503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:92:82:14:7e:59:09:e0:cb:40:30:ab:77: c5:0f:10:27:18:5c:33:74:ee:98:0c:eb:7a:4a:27: 14:85:cb:ba:64:b4:8f:87:7e:8f:64:87:32:68:d5: 55:16:3d:b7:d9:b6:29:4e:19:35:d7:e5:a0:8d:db: 58:5a:f6:d1:4b:a3:92:3c:05:e0:2d:3f:5c:36:59: e0:c4:27:f7:31:55:10:6e:9d:36:14:a1:33:f1:92: 5e:7f:2c:1f:ab:8b:04:d6:6f:b4:f8:cd:7e:02:7e: 8d:22:c7:b8:10:0a:e3:e4:ee:17:55:01:82:72:65: ac:3d:aa:b7:92:5a:65:cc:40:a1:0d:07:81:09:b6: 9f:c9:f2:d9:4e:4d:43:d7:04:30:90:89:40:26:a3: 4c:3c:72:8f:f7:45:da:3a:d9:55:9c:5a:58:ff:da: 37:a9:4a:64:3b:fd:b6:2b:af:88:22:a3:32:04:10: 4d:f4:f7:51:30:18:2d:11:c1:f4:19:9a:4e:0e:4b: 49:b1:13:85:cb:0e:eb:dd:83:de:e4:50:58:b6:16: 06:e4:28:5c:1d:ae:1d:d5:f6:42:1a:8b:b9:fc:e7: 03:3c:01:3c:ab:44:1d:fa:51:28:b9:26:55:f0:62: b5:57:b0:ee:6f:33:90:23:e9:c0:09:9e:43:da:78: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:69:CE:C9:22:3E:B1:A8:81:F5:76:9C:C7:A4:20:F0:BE:F8:1E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef5df301-3c09-3579-8988-9a826fc55389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:94:6c:ba:2a:d4:79:59:dc:82:70:1c:fd:d8:25:2b:70:77: 63:29:91:59:bf:7a:c8:46:9c:11:7f:07:60:8f:07:a9:35:f6: 6d:c7:17:95:24:42:f4:4d:b3:57:ad:24:12:5c:ad:03:9d:c3: 42:f6:eb:97:2c:37:ab:8a:cf:34:81:74:dc:08:37:c4:bd:c8: 6a:db:ed:ec:75:53:c4:ac:50:99:a1:72:d5:0c:9b:b6:a1:4a: f3:80:cc:d2:51:46:32:6b:d9:38:c1:6a:15:ef:00:45:68:ee: d0:dd:85:69:e6:be:4d:b6:6c:83:86:c1:90:f8:64:44:29:69: b4:97:c6:fa:44:4f:93:e2:23:df:17:d5:91:a7:2f:c6:ca:0f: d0:56:f3:4d:3c:d7:46:ab:ca:3a:e4:c3:62:c3:1b:a5:0a:91: be:66:18:d0:87:16:6b:2f:71:d3:b0:a9:80:06:66:20:8b:99: fc:6e:82:da:95:fe:0a:42:7f:81:60:9f:ea:2a:cc:b6:5b:ed: a4:fa:fb:d0:4f:82:99:95:28:e8:1b:3c:e8:66:91:61:66:c0: 04:98:fa:cf:be:54:c7:7d:ba:75:5d:ed:ee:fb:30:3c:2d:5d: 6f:35:79:69:92:59:02:47:2c:a4:d2:8b:be:b5:99:cd:49:5b: 55:67:ce:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljxJ7flvm4mcFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWU4MTI2ZTktNjc5OS00OWNhLThjOGUtNzgwODlmMzQwNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7iSghR+WQngy0Awq3fFDxAnGFwzdO6YDOt6 SicUhcu6ZLSPh36PZIcyaNVVFj232bYpThk11+WgjdtYWvbRS6OSPAXgLT9cNlng xCf3MVUQbp02FKEz8ZJefywfq4sE1m+0+M1+An6NIse4EArj5O4XVQGCcmWsPaq3 klplzEChDQeBCbafyfLZTk1D1wQwkIlAJqNMPHKP90XaOtlVnFpY/9o3qUpkO/22 K6+IIqMyBBBN9PdRMBgtEcH0GZpODktJsROFyw7r3YPe5FBYthYG5ChcHa4d1fZC Gou5/OcDPAE8q0Qd+lEouSZV8GK1V7DubzOQI+nACZ5D2njCKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCppzskiPrGogfV2nMekIPC++B4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWY1ZGYzMDEtM2MwOS0z NTc5LTg5ODgtOWE4MjZmYzU1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOUbLoq1HlZ3IJwHP3YJStwd2MpkVm/eshGnBF/B2CPB6k19m3HF5Uk QvRNs1etJBJcrQOdw0L265csN6uKzzSBdNwIN8S9yGrb7ex1U8SsUJmhctUMm7ah SvOAzNJRRjJr2TjBahXvAEVo7tDdhWnmvk22bIOGwZD4ZEQpabSXxvpET5PiI98X 1ZGnL8bKD9BW800810aryjrkw2LDG6UKkb5mGNCHFmsvcdOwqYAGZiCLmfxugtqV /gpCf4Fgn+oqzLZb7aT6+9BPgpmVKOgbPOhmkWFmwASY+s++VMd9unVd7e77MDwt XW81eWmSWQJHLKTSi761mc1JW1Vnztw= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:43 2025 by rpki-client