$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa File: f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa (raw, json) Hash identifier: BjgSS11WrwGUiYcGPUkadmTZu8uN5+6WQ9NUcqFZLNQ= Subject key identifier: E4:0F:97:98:B5:F2:3F:3A:8B:CB:F0:9E:57:E0:C6:EC:B1:7A:A0:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20E981CB09DFC106ED9C40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397219 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e9:81:cb:09:df:c1:06:ed:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=4ec8b8bf-0b81-41fd-82d5-b26b6c7ae60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:5c:d9:ab:f3:4e:c1:c3:85:ff:91:96:77: 35:aa:bb:be:7d:85:9a:36:b3:8c:d1:f2:55:29:e7: f6:2e:a2:7e:8d:28:84:af:d9:03:f9:a3:ce:44:83: 14:9a:49:dd:d4:8e:c6:5b:32:21:55:6d:9f:08:1e: 21:fa:fc:cb:43:e6:87:79:cc:43:a3:be:ca:8a:25: 29:25:c5:f0:e0:3b:d6:68:5e:9e:a7:8e:2e:0e:5f: 13:d3:53:4f:4d:04:0e:cf:04:0e:09:33:f4:0d:bf: 5c:b2:2c:3c:1f:15:d1:db:26:cb:6b:5e:a3:94:54: 4e:9e:52:64:f3:c6:25:e0:2a:30:0f:d7:46:68:eb: d8:68:76:b4:fc:2d:18:fd:e3:b8:d3:32:e5:02:28: 60:1f:e9:09:ce:24:6f:c3:01:14:54:2e:c9:58:af: ac:3b:19:49:0c:82:8e:e4:52:80:28:4b:87:c4:c1: 62:19:0f:b5:2b:d0:18:b4:8c:db:d7:69:3b:8f:bc: 1b:07:58:3d:ca:26:b0:df:2a:8a:05:b8:ae:e1:86: 46:20:c6:06:6a:2b:b7:51:84:40:f0:c1:bf:07:88: 9d:ed:83:93:56:f3:2b:97:2d:a7:62:55:4d:9d:56: 04:e2:8b:20:43:87:30:5e:63:df:39:de:f0:4a:7e: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:97:98:B5:F2:3F:3A:8B:CB:F0:9E:57:E0:C6:EC:B1:7A:A0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:47:4a:a9:e8:a5:27:2e:09:25:75:88:fd:44:99:54:60:3d: d8:62:e9:b1:68:3f:09:e9:bb:5f:75:ce:97:23:8b:98:ed:b5: 82:b6:87:31:49:c5:5e:94:26:d3:80:0b:af:b3:39:b2:07:cd: 12:8d:9c:e7:33:02:8a:9e:95:19:a1:f7:5a:6b:7a:ae:bf:e4: 4e:1c:5d:03:c1:e3:bf:15:78:18:91:6c:f8:6c:5d:ed:02:ac: 41:3d:aa:39:58:93:d1:89:37:b6:12:bd:40:38:05:00:ea:1f: 85:bd:db:32:c0:4a:5a:40:4a:95:e3:e8:e3:fe:55:d7:80:38: 3c:98:ce:6d:be:a9:75:7a:47:87:4b:6f:13:47:ad:f2:f5:d6: 39:73:dc:f0:72:51:21:eb:22:35:d0:f7:7f:18:72:ee:04:85: 37:fd:66:03:7e:c1:e0:67:23:a8:cb:85:11:e7:38:35:a9:f2: 62:b7:df:84:b4:4c:80:fb:dd:d8:10:6a:f8:36:4e:3b:16:8a: 70:f3:d6:1e:e2:56:27:a6:ed:9b:59:1c:b3:7d:93:69:75:7c: cb:c3:c4:df:02:09:3e:77:61:81:39:3b:98:fa:db:0e:db:37: 2e:74:09:86:97:7f:2c:5c:d5:db:80:7f:36:95:80:eb:10:f1: 8c:db:38:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOmBywnfwQbtnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NGVjOGI4YmYtMGI4MS00MWZkLTgyZDUtYjI2YjZjN2FlNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Jc2avzTsHDhf+Rlnc1qru+fYWaNrOM0fJV Kef2LqJ+jSiEr9kD+aPORIMUmknd1I7GWzIhVW2fCB4h+vzLQ+aHecxDo77KiiUp JcXw4DvWaF6ep44uDl8T01NPTQQOzwQOCTP0Db9csiw8HxXR2ybLa16jlFROnlJk 88Yl4CowD9dGaOvYaHa0/C0Y/eO40zLlAihgH+kJziRvwwEUVC7JWK+sOxlJDIKO 5FKAKEuHxMFiGQ+1K9AYtIzb12k7j7wbB1g9yiaw3yqKBbiu4YZGIMYGaiu3UYRA 8MG/B4id7YOTVvMrly2nYlVNnVYE4osgQ4cwXmPfOd7wSn7ZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQPl5i18j86i8vwnlfgxuyxeqAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjIxMTgzMTEtYWFlYi0z OTM0LWI4NjktMGY3ZmE3M2UzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlHSqnopScuCSV1iP1EmVRgPdhi6bFoPwnpu191zpcji5jttYK2hzFJ xV6UJtOAC6+zObIHzRKNnOczAoqelRmh91preq6/5E4cXQPB478VeBiRbPhsXe0C rEE9qjlYk9GJN7YSvUA4BQDqH4W92zLASlpASpXj6OP+VdeAODyYzm2+qXV6R4dL bxNHrfL11jlz3PByUSHrIjXQ938Ycu4EhTf9ZgN+weBnI6jLhRHnODWp8mK334S0 TID73dgQavg2TjsWinDz1h7iViem7ZtZHLN9k2l1fMvDxN8CCT53YYE5O5j62w7b Ny50CYaXfyxc1duAfzaVgOsQ8YzbOFA= -----END CERTIFICATE-----Generated at Sat Apr 5 22:33:57 2025 by rpki-client