$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa File: f0e6f290-2156-3a96-867b-1bba2c3f9768.roa (raw, json) Hash identifier: pX+mTfkAjF14vqtz99RrGlcclyYpxlJbhrNpC7qd4yY= Subject key identifier: C0:40:C6:7F:82:C9:AB:43:FF:75:5C:F5:DB:0B:C7:30:EF:B1:41:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EB39AC639E2044875D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397243 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:eb:39:ac:63:9e:20:44:87:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2568d3e9-310f-44dc-9f8e-5c472c45f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:aa:6a:c3:62:2d:e8:ff:a4:0a:8b:b9:c1: 6d:dc:5d:6c:f9:74:90:83:83:69:be:00:34:1c:c8: e3:7b:92:0f:1d:43:36:51:e5:1d:f0:59:8d:02:bb: e7:69:b1:04:37:99:eb:6f:55:30:6c:a1:c4:15:5c: f2:53:c5:83:26:d1:45:85:97:f6:71:60:ac:1a:e6: f4:9e:9e:a2:b5:00:a5:5b:3d:c0:30:14:bd:31:48: 73:38:9b:2a:f9:be:41:86:c4:9f:0e:f3:c9:d0:94: 8d:2b:05:80:b3:d9:1d:d6:40:e2:57:ca:b6:d5:af: d4:10:0e:f3:ae:14:40:54:e9:7a:61:63:47:c6:5d: 93:b7:93:a7:48:36:78:bf:ba:47:4b:91:5c:1f:d7: 26:04:02:64:6c:3e:42:e9:10:f4:37:e6:79:52:56: 4f:11:a1:86:de:14:48:8b:db:7b:98:e3:25:4e:f7: 7e:96:d8:3f:8f:00:18:4c:37:dc:dc:36:6a:7f:39: af:a8:2d:d1:9f:c4:0e:37:cc:ab:7b:aa:93:a7:f1: 00:aa:e4:f6:d8:62:16:90:26:c2:21:c4:3a:9c:80: 65:5b:5f:44:94:53:c1:84:53:67:0e:1d:dc:73:24: 31:31:10:7a:3b:e3:d0:34:f0:8a:ca:e9:32:ef:25: 83:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:C6:7F:82:C9:AB:43:FF:75:5C:F5:DB:0B:C7:30:EF:B1:41:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ab:23:a2:84:0b:06:d4:ed:03:58:cd:46:9a:ab:f5:7a:f4: e2:fc:f5:19:21:66:12:f3:75:b2:ed:88:d7:cc:f6:b6:97:69: 5c:fb:79:89:57:06:03:58:87:0f:4d:f3:e0:96:51:43:52:43: 5d:c1:f5:94:bd:47:08:19:91:ad:de:e4:d2:15:9d:ab:eb:a5: 1f:12:85:05:9e:4c:fb:b0:49:55:91:08:73:20:34:a9:28:b7: fb:bc:36:f4:68:38:0e:44:bb:10:b4:9b:c7:b5:54:12:96:fd: 90:8b:6c:55:11:e6:c3:ca:8d:2b:69:ea:57:8b:76:3d:7f:17: fa:ac:95:16:50:17:ff:ac:a9:f5:69:50:01:0d:c3:1b:31:8f: ff:8d:be:70:8c:73:53:f2:83:2f:cd:65:12:0f:e1:ed:79:76: cc:57:0d:ca:38:ec:75:14:4c:74:30:61:9b:b7:61:e8:17:f2: 61:26:3f:93:38:4e:66:d7:d4:72:86:f0:c0:f8:9f:b9:64:58: 97:4d:07:a7:3d:81:82:bd:84:12:22:af:f6:c7:9c:c6:83:83: b6:ea:83:12:62:40:0e:82:d9:3a:38:cd:b1:fb:22:b0:15:27: d5:d3:27:11:5f:0f:91:dc:5c:0b:f6:db:fe:57:86:ed:fc:22: b1:b1:5d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRus5rGOeIESHXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjU2OGQzZTktMzEwZi00NGRjLTlmOGUtNWM0NzJjNDVmMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWqasNiLej/pAqLucFt3F1s+XSQg4NpvgA0 HMjje5IPHUM2UeUd8FmNArvnabEEN5nrb1UwbKHEFVzyU8WDJtFFhZf2cWCsGub0 np6itQClWz3AMBS9MUhzOJsq+b5BhsSfDvPJ0JSNKwWAs9kd1kDiV8q21a/UEA7z rhRAVOl6YWNHxl2Tt5OnSDZ4v7pHS5FcH9cmBAJkbD5C6RD0N+Z5UlZPEaGG3hRI i9t7mOMlTvd+ltg/jwAYTDfc3DZqfzmvqC3Rn8QON8yre6qTp/EAquT22GIWkCbC IcQ6nIBlW19ElFPBhFNnDh3ccyQxMRB6O+PQNPCKyuky7yWDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBAxn+CyatD/3Vc9dsLxzDvsUH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjBlNmYyOTAtMjE1Ni0z YTk2LTg2N2ItMWJiYTJjM2Y5NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCrI6KECwbU7QNYzUaaq/V69OL89RkhZhLzdbLtiNfM9raXaVz7eYlX BgNYhw9N8+CWUUNSQ13B9ZS9RwgZka3e5NIVnavrpR8ShQWeTPuwSVWRCHMgNKko t/u8NvRoOA5EuxC0m8e1VBKW/ZCLbFUR5sPKjStp6leLdj1/F/qslRZQF/+sqfVp UAENwxsxj/+NvnCMc1Pygy/NZRIP4e15dsxXDco47HUUTHQwYZu3YegX8mEmP5M4 TmbX1HKG8MD4n7lkWJdNB6c9gYK9hBIir/bHnMaDg7bqgxJiQA6C2To4zbH7IrAV J9XTJxFfD5HcXAv22/5Xhu38IrGxXYQ= -----END CERTIFICATE-----Generated at Sun Apr 6 14:49:36 2025 by rpki-client