$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5c62f67-517b-3bf9-89e7-2da427485fd8.roa File: f5c62f67-517b-3bf9-89e7-2da427485fd8.roa (raw, json) Hash identifier: oflSYf23FpQbu5PLAP5UVmYTeNZW4Oc7ZPoh0A1dO0c= Subject key identifier: 20:7E:3E:D6:59:AF:7C:D2:06:4D:1E:0D:C5:99:DF:1F:0B:04:99:79 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20ECCE683F066BCC904A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5c62f67-517b-3bf9-89e7-2da427485fd8.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397237 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ec:ce:68:3f:06:6b:cc:90:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=c0632ff6-4c88-431a-b8df-a176d9c27823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:03:b9:aa:5e:29:fa:5c:f9:ca:91:46:df: 33:45:82:4b:2c:53:bd:2a:81:7b:86:04:35:ba:31: d3:79:a9:fb:f2:7b:e3:40:da:bf:fe:8d:d6:8f:d6: d9:e6:c0:a2:af:dd:5a:3d:a4:03:23:d5:51:e4:24: 0a:a6:92:20:1f:3e:ea:0a:e8:78:72:22:81:7b:c7: ff:ac:bd:ac:98:fe:2d:86:28:83:7f:5c:99:eb:35: 1c:9d:99:96:7c:90:c6:99:34:56:92:2f:ba:55:a9: fe:07:08:41:fc:bd:6a:d7:cd:27:8a:4b:cd:e4:62: 06:3e:fd:dc:7e:6a:c5:83:37:ec:da:ad:2d:76:c3: e6:55:0d:26:3a:fc:19:dc:2b:50:a1:93:ff:62:fa: ae:e8:8f:4e:02:88:12:ea:f6:d6:a4:49:a4:7b:39: 9f:79:08:fb:d3:fa:c7:dc:d9:f0:a0:8c:55:2f:39: d7:6b:ef:63:0f:0b:25:38:cf:ab:1d:89:ba:39:a6: f4:ab:77:ef:bc:be:95:f8:c8:3a:1a:4f:99:90:4f: 31:5b:87:b1:ab:38:93:db:1d:5f:b3:08:1a:64:31: a4:23:2a:bb:ff:1b:af:b0:c7:da:40:ba:f4:15:ee: 5f:98:0b:0c:cb:23:ab:b5:d9:e5:2c:3c:51:56:ca: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:3E:D6:59:AF:7C:D2:06:4D:1E:0D:C5:99:DF:1F:0B:04:99:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f5c62f67-517b-3bf9-89e7-2da427485fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:97:9e:0e:ab:20:73:4b:ee:10:d7:17:c7:7c:57:2d:3c:bf: cc:fb:8a:06:0a:d8:d7:bd:96:80:fd:05:cc:83:a3:e1:4b:c2: 23:bb:dc:cd:2b:ca:f2:23:47:c9:9b:5a:d2:5e:c6:55:a9:53: 2c:d5:33:bc:25:6f:6b:2e:c1:c1:f8:7a:82:93:45:dd:ba:1c: a4:1f:24:e2:ee:80:82:10:d5:72:d0:b7:e0:d9:e2:ba:92:80: fc:06:4f:f7:29:69:30:6e:11:0e:bb:bd:fb:81:a4:fe:1f:02: 3b:45:46:62:1e:6f:f7:24:40:c1:fb:7b:01:d4:fb:98:66:ef: 96:76:21:7b:07:57:64:eb:76:f7:22:10:cd:fb:51:4a:5b:fd: d6:21:99:38:c3:2a:87:e4:eb:d1:cc:1f:ca:7b:6a:ae:a5:5b: 68:64:7f:83:56:d1:f7:80:bb:53:28:29:da:5e:59:5c:0d:41: a2:1d:a8:de:7b:88:e6:eb:69:09:be:20:d0:5d:d5:8b:d4:76: dd:d0:85:4e:27:2f:a5:dd:d5:e8:f6:7b:2b:87:94:8b:aa:ff: f4:c1:00:83:00:e4:80:63:a2:a2:7d:65:61:44:8f:37:88:c2: 61:14:ac:d8:cb:c7:f9:84:56:06:a8:f1:10:ff:86:fd:91:59: bd:a4:2c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOzOaD8Ga8yQSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YzA2MzJmZjYtNGM4OC00MzFhLWI4ZGYtYTE3NmQ5YzI3ODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mwDuapeKfpc+cqRRt8zRYJLLFO9KoF7hgQ1 ujHTean78nvjQNq//o3Wj9bZ5sCir91aPaQDI9VR5CQKppIgHz7qCuh4ciKBe8f/ rL2smP4thiiDf1yZ6zUcnZmWfJDGmTRWki+6Van+BwhB/L1q180nikvN5GIGPv3c fmrFgzfs2q0tdsPmVQ0mOvwZ3CtQoZP/Yvqu6I9OAogS6vbWpEmkezmfeQj70/rH 3NnwoIxVLznXa+9jDwslOM+rHYm6Oab0q3fvvL6V+Mg6Gk+ZkE8xW4exqziT2x1f swgaZDGkIyq7/xuvsMfaQLr0Fe5fmAsMyyOrtdnlLDxRVsqqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB+PtZZr3zSBk0eDcWZ3x8LBJl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjVjNjJmNjctNTE3Yi0z YmY5LTg5ZTctMmRhNDI3NDg1ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6Xng6rIHNL7hDXF8d8Vy08v8z7igYK2Ne9loD9BcyDo+FLwiO73M0r yvIjR8mbWtJexlWpUyzVM7wlb2suwcH4eoKTRd26HKQfJOLugIIQ1XLQt+DZ4rqS gPwGT/cpaTBuEQ67vfuBpP4fAjtFRmIeb/ckQMH7ewHU+5hm75Z2IXsHV2Trdvci EM37UUpb/dYhmTjDKofk69HMH8p7aq6lW2hkf4NW0feAu1MoKdpeWVwNQaIdqN57 iObraQm+INBd1YvUdt3QhU4nL6Xd1ej2eyuHlIuq//TBAIMA5IBjoqJ9ZWFEjzeI wmEUrNjLx/mEVgao8RD/hv2RWb2kLKI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:27 2025 by rpki-client