$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f69a529b-2be3-3a37-843b-9a96221717b1.roa File: f69a529b-2be3-3a37-843b-9a96221717b1.roa (raw, json) Hash identifier: ZZd7HmAbjx6TUwPBAjf3DXm6xbWj/ZBMiZ04u/vb3uk= Subject key identifier: 33:0B:71:F0:E7:39:E3:E9:4C:3C:6A:49:6D:03:74:8E:A1:4E:59:28 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99657F3EE385E75EAB1CD00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f69a529b-2be3-3a37-843b-9a96221717b1.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397227 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:57:f3:ee:38:5e:75:ea:b1:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=888c5d98-f530-4808-895a-bfa4dae3b056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:74:dd:58:80:15:4a:e3:3c:e5:53:0a:27: 82:69:ef:20:68:c0:7b:cf:cf:b9:a2:99:13:04:45: f9:d7:43:e8:1a:85:ff:4b:35:de:9b:90:d5:e3:0b: 28:42:16:79:07:08:05:56:94:09:c4:5b:00:52:e2: 23:92:d1:5a:9d:fb:37:f3:c7:cd:8d:5f:9b:e7:e0: 1e:d4:cc:cd:e3:39:6c:9a:aa:82:c8:e5:82:c6:bb: 5d:f2:8f:98:15:b4:c0:c3:f4:7d:1b:4a:75:79:f6: 57:85:e3:71:2e:21:40:5c:06:a5:90:21:df:7c:ab: ad:4d:8d:15:c9:3b:26:d8:1f:49:2b:e9:45:9f:0f: 68:c0:fd:a5:34:06:64:ca:2f:85:04:f6:86:f1:3e: 80:f2:4d:61:34:16:c2:ca:cf:4b:87:2d:01:f0:db: 82:45:88:5b:84:78:6f:6a:67:eb:fe:f9:e8:dc:36: 45:28:35:4a:2e:ab:d8:51:28:3c:74:eb:a5:9a:02: 5e:cd:5e:a1:dd:c1:b2:e3:c0:dd:22:1f:0e:44:08: 09:b6:43:b1:83:60:d1:23:b3:f7:00:39:70:46:b4: ba:c7:ee:33:4e:66:93:24:b9:fd:7f:ca:33:c1:d9: b0:0d:54:ec:a9:bf:24:d5:9a:c6:51:b2:e1:68:e7: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:71:F0:E7:39:E3:E9:4C:3C:6A:49:6D:03:74:8E:A1:4E:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f69a529b-2be3-3a37-843b-9a96221717b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a9:14:0f:9d:db:96:fa:72:f8:45:70:6d:d0:25:f7:db:56: c5:28:22:69:a1:e4:16:e2:b6:be:9a:5b:c0:b6:cd:97:d8:be: 19:39:45:7d:60:2c:87:24:78:f1:ef:51:9a:7b:c7:b5:a8:2d: 68:83:b5:e5:60:f3:1c:9c:54:6f:c6:48:0f:71:06:c4:29:12: 52:5a:48:a6:41:67:08:7a:8b:b9:7d:52:2c:27:ed:22:b1:c6: 07:11:a7:06:51:3f:f4:a8:01:f6:03:d9:5a:7c:af:02:c3:25: a7:fd:16:5b:fb:c5:e8:1f:77:7e:49:d0:43:40:9f:42:df:67: 05:3d:c1:cb:18:25:20:84:ee:ec:d0:e5:b2:38:d5:3b:f9:54: 9e:3c:38:40:64:b8:56:ec:ee:46:51:64:37:e7:39:bd:7d:b5: a4:23:3d:0b:f2:67:c0:6a:c7:08:07:78:31:e2:71:f4:fb:5a: e3:6d:02:5b:19:d3:6f:9a:37:fb:a3:e5:87:8c:11:e1:5c:c4: 00:ff:37:d1:e4:91:f7:e7:b3:cd:32:b8:29:a6:19:6a:3f:c4: 56:b9:40:d1:a4:86:73:69:d2:cc:fd:81:b9:2b:6e:2f:05:04: 73:d6:b2:10:89:65:ca:3c:94:cd:87:52:07:5d:08:24:9f:b1: 80:91:ca:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllfz7jhedeqxzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODg4YzVkOTgtZjUzMC00ODA4LTg5NWEtYmZhNGRhZTNiMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuh03ViAFUrjPOVTCieCae8gaMB7z8+5opkT BEX510PoGoX/SzXem5DV4wsoQhZ5BwgFVpQJxFsAUuIjktFanfs388fNjV+b5+Ae 1MzN4zlsmqqCyOWCxrtd8o+YFbTAw/R9G0p1efZXheNxLiFAXAalkCHffKutTY0V yTsm2B9JK+lFnw9owP2lNAZkyi+FBPaG8T6A8k1hNBbCys9Lhy0B8NuCRYhbhHhv amfr/vno3DZFKDVKLqvYUSg8dOulmgJezV6h3cGy48DdIh8ORAgJtkOxg2DRI7P3 ADlwRrS6x+4zTmaTJLn9f8ozwdmwDVTsqb8k1ZrGUbLhaOekkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMLcfDnOePpTDxqSW0DdI6hTlkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjY5YTUyOWItMmJlMy0z YTM3LTg0M2ItOWE5NjIyMTcxN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADapFA+d25b6cvhFcG3QJffbVsUoImmh5Bbitr6aW8C2zZfYvhk5RX1g LIckePHvUZp7x7WoLWiDteVg8xycVG/GSA9xBsQpElJaSKZBZwh6i7l9Uiwn7SKx xgcRpwZRP/SoAfYD2Vp8rwLDJaf9Flv7xegfd35J0ENAn0LfZwU9wcsYJSCE7uzQ 5bI41Tv5VJ48OEBkuFbs7kZRZDfnOb19taQjPQvyZ8BqxwgHeDHicfT7WuNtAlsZ 02+aN/uj5YeMEeFcxAD/N9Hkkffns80yuCmmGWo/xFa5QNGkhnNp0sz9gbkrbi8F BHPWshCJZco8lM2HUgddCCSfsYCRys0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:06:20 2025 by rpki-client