$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa File: fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa (raw, json) Hash identifier: anTMl3rzKICy12SP35ErYsyZg9K3qbi+SR4nbM3MwIM= Subject key identifier: E7:2B:5A:10:26:01:AB:DF:7D:12:58:9F:47:1F:50:9C:3B:5C:92:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963FE0C5D86E41541DBA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397223 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3f:e0:c5:d8:6e:41:54:1d:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=e272bd08-6a81-4657-af74-b31409d7f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:d3:9b:82:4f:14:e0:78:11:79:44:2e:b7: c3:e2:28:df:cc:3a:38:67:0e:2c:2d:eb:64:48:eb: 6d:fa:da:14:0f:08:06:84:1d:3d:d8:7b:6f:0e:13: 6f:2a:92:16:1a:b3:20:2a:3d:fb:02:2e:63:3d:95: 09:cc:35:94:5f:0b:56:bc:23:c7:6c:f0:20:94:1a: c5:85:4e:ef:53:a2:61:32:1d:eb:71:86:7f:28:72: 18:0e:86:2a:93:04:fa:7d:c7:5a:de:34:fe:5f:99: b0:d9:87:f2:a4:1b:03:1e:cd:e6:11:c5:02:74:d7: 2c:ec:e0:2f:b1:f5:dd:de:99:a6:cd:46:b8:f3:7d: e2:aa:31:c7:54:cf:bd:74:7a:cc:f2:b8:86:20:57: 5e:fe:6a:b2:8d:1e:ca:ce:51:27:8d:36:aa:bc:0d: 35:ec:8a:51:02:d3:60:2a:72:ce:dd:35:94:aa:f3: d1:33:33:f7:75:be:bd:a6:34:ee:7a:18:3f:17:a7: 38:22:b4:60:93:33:54:28:02:f0:53:46:c3:93:73: 3b:5a:2c:35:f9:e3:19:3b:02:09:79:6a:fa:7f:c0: e7:8b:65:45:6a:66:6e:f9:c8:ec:b9:61:97:66:21: 21:78:4d:a9:5d:97:7d:cc:2d:d5:07:72:a4:f5:6a: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2B:5A:10:26:01:AB:DF:7D:12:58:9F:47:1F:50:9C:3B:5C:92:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:db:88:9f:ec:56:cc:49:65:54:18:9d:f5:4b:be:b3:dd:c1: 68:7e:c5:7a:06:bd:ec:8a:36:90:4f:cf:74:ce:06:06:8e:7b: a6:64:bd:de:6a:b5:f7:0e:14:71:3c:e1:17:52:48:e1:79:95: 4b:a9:15:29:2f:33:e9:df:9d:89:10:63:27:7d:4a:0f:94:e3: 5f:06:38:66:4a:81:a9:61:bc:c0:1f:b0:ef:41:31:87:1d:26: 75:65:bf:0d:9d:9b:49:f9:c4:9b:16:0e:af:a1:0d:d2:18:b1: 96:f1:4e:93:fe:e3:47:9b:4a:21:bb:91:cb:d4:0c:29:ee:6d: 7c:e3:a6:ea:75:9e:af:53:40:6b:0d:79:88:c5:a5:e7:9e:72: cd:1a:7e:c0:67:0b:00:e5:03:55:e6:4b:ff:b6:93:df:62:c6: 20:87:28:eb:b0:2b:0a:77:fc:f4:7e:7d:37:48:ba:6b:88:4e: c3:87:ab:3a:fa:a6:cd:f1:99:7e:6b:31:b0:9e:91:75:57:ed: 15:69:41:9c:72:1c:6a:24:70:99:b1:bf:42:a1:a1:cf:ca:54: 99:e5:f5:56:7a:ec:73:f6:00:0c:25:5c:33:46:dd:de:dc:f0: de:4a:66:34:24:86:53:b5:66:27:d7:a2:cc:43:2f:fe:33:c6: c4:92:87:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj/gxdhuQVQduoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI3MmJkMDgtNmE4MS00NjU3LWFmNzQtYjMxNDA5ZDdmMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8TTm4JPFOB4EXlELrfD4ijfzDo4Zw4sLetk SOtt+toUDwgGhB092HtvDhNvKpIWGrMgKj37Ai5jPZUJzDWUXwtWvCPHbPAglBrF hU7vU6JhMh3rcYZ/KHIYDoYqkwT6fcda3jT+X5mw2YfypBsDHs3mEcUCdNcs7OAv sfXd3pmmzUa4833iqjHHVM+9dHrM8riGIFde/mqyjR7KzlEnjTaqvA017IpRAtNg KnLO3TWUqvPRMzP3db69pjTuehg/F6c4IrRgkzNUKALwU0bDk3M7Wiw1+eMZOwIJ eWr6f8Dni2VFamZu+cjsuWGXZiEheE2pXZd9zC3VB3Kk9Wq9CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcrWhAmAavffRJYn0cfUJw7XJIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmFiMGE4YWMtZTRiZi0z MmY4LWE3MjAtM2ZiYzQ1Njk3OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbbiJ/sVsxJZVQYnfVLvrPdwWh+xXoGveyKNpBPz3TOBgaOe6Zkvd5q tfcOFHE84RdSSOF5lUupFSkvM+nfnYkQYyd9Sg+U418GOGZKgalhvMAfsO9BMYcd JnVlvw2dm0n5xJsWDq+hDdIYsZbxTpP+40ebSiG7kcvUDCnubXzjpup1nq9TQGsN eYjFpeeecs0afsBnCwDlA1XmS/+2k99ixiCHKOuwKwp3/PR+fTdIumuITsOHqzr6 ps3xmX5rMbCekXVX7RVpQZxyHGokcJmxv0Khoc/KVJnl9VZ67HP2AAwlXDNG3d7c 8N5KZjQkhlO1ZifXosxDL/4zxsSSh2Y= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:46 2025 by rpki-client