$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa File: fcec44ab-958b-39e8-89de-d1a81273e2f3.roa (raw, json) Hash identifier: Q7VirgqKyy1xUoAEhy1CK55oMHkPK6Tn4qRo35khuAo= Subject key identifier: 62:3A:1B:42:4A:16:CA:4F:DC:2C:D4:D0:91:E7:37:AF:5B:CB:7B:4C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848D6C68DCF9E1A6AE7889DBE5C Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa Signing time: Mon 10 Feb 2025 18:29:56 +0000 ROA not before: Mon 10 Feb 2025 18:29:56 +0000 ROA not after: Sun 11 May 2025 17:29:56 +0000 asID: 12008 IP address blocks: 156.154.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:c6:8d:cf:9e:1a:6a:e7:88:9d:be:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 10 18:29:56 2025 GMT Not After : May 11 17:29:56 2025 GMT Subject: CN=ae5c8477-258c-479b-8d76-2f410d805671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:1a:d4:9a:8e:f9:52:05:5a:93:2e:c1:d6: 72:d2:4d:36:7b:99:87:00:bc:6f:ec:3c:30:fc:b5: 71:5b:e4:14:c2:83:2b:f7:73:43:eb:fc:40:1c:30: 03:7e:2f:5f:65:20:6c:57:19:c3:55:f1:b4:eb:c7: 72:31:31:f7:8c:e3:2e:07:93:3c:5d:68:c1:b0:2e: 96:f7:c4:9c:e6:6d:f1:a8:9a:70:b3:9e:8d:0e:a2: 6f:f9:ec:60:8a:f1:38:bb:e4:40:57:0a:c2:fb:c2: a2:ce:cf:6a:0a:ce:21:1e:a4:1c:ed:86:d8:1a:1f: 9e:e9:1f:c3:99:f0:50:5f:ac:96:5f:a5:ca:46:80: 40:ae:45:0d:61:60:6b:30:59:dc:ab:51:d7:09:9a: 85:6d:22:e7:cc:76:50:03:f8:a7:91:5d:1a:f6:d8: 96:47:3c:f8:62:69:91:60:98:a5:e4:95:8f:d8:ee: e5:8f:d1:06:f1:d7:0e:66:1b:2a:40:c7:25:46:69: 42:4e:23:c6:b7:b9:1b:38:50:ef:f6:a3:e9:ff:a8: 82:08:bb:88:e8:60:38:97:11:90:98:f0:9c:2e:fe: 52:07:87:6a:96:dc:c4:3f:62:56:5b:9b:64:88:c7: 3f:0d:e7:4f:c3:ce:df:e6:f3:f0:3f:47:46:59:20: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3A:1B:42:4A:16:CA:4F:DC:2C:D4:D0:91:E7:37:AF:5B:CB:7B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1e:fc:ed:ab:70:20:7c:fe:e3:96:48:17:ee:c7:10:58:d4: 52:2a:76:da:2f:1c:29:f8:c6:a9:0b:ed:86:ed:0a:39:d3:b8: 15:5e:5f:b1:20:31:72:57:49:df:0d:c4:41:c7:49:e0:b4:7a: e1:5b:a0:02:f0:6b:c6:66:98:a7:b5:f3:9a:53:85:ea:b4:d6: c3:8f:77:d0:62:d5:97:82:73:a3:d1:6a:30:4c:ea:87:2d:c0: 2f:94:05:81:24:d7:a3:5f:7a:e6:97:20:55:fa:e8:2e:e0:f9: 1d:6f:e1:fa:b5:66:5b:c4:e7:44:11:97:c8:98:c6:80:d5:c1: e0:fe:e3:53:d6:2a:22:cd:1f:08:07:8c:f1:b6:7a:06:30:f6: ed:89:9f:9d:6d:ec:2c:26:67:01:42:12:66:fa:85:ea:de:e9: e1:5d:06:f6:fd:14:33:0f:da:72:9b:51:1e:76:22:58:e2:67: 50:af:fb:18:09:98:f0:7a:75:0b:92:51:24:d1:f6:80:c2:8b: 59:6d:ea:7b:87:2b:f8:fa:13:a5:84:54:ef:26:39:81:69:d2: a6:e4:9f:20:27:fc:4f:d2:41:2c:ea:04:72:4f:48:2a:36:93: fe:be:f9:ff:5c:20:e5:00:28:f6:5e:cc:a0:99:1d:05:4e:b2: 73:d7:6b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWxo3Pnhpq54idvlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIxMDE4Mjk1NloXDTI1MDUxMTE3Mjk1NlowLzEtMCsGA1UEAxMk YWU1Yzg0NzctMjU4Yy00NzliLThkNzYtMmY0MTBkODA1NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdca1JqO+VIFWpMuwdZy0k02e5mHALxv7Dww /LVxW+QUwoMr93ND6/xAHDADfi9fZSBsVxnDVfG068dyMTH3jOMuB5M8XWjBsC6W 98Sc5m3xqJpws56NDqJv+exgivE4u+RAVwrC+8Kizs9qCs4hHqQc7YbYGh+e6R/D mfBQX6yWX6XKRoBArkUNYWBrMFncq1HXCZqFbSLnzHZQA/inkV0a9tiWRzz4YmmR YJil5JWP2O7lj9EG8dcOZhsqQMclRmlCTiPGt7kbOFDv9qPp/6iCCLuI6GA4lxGQ mPCcLv5SB4dqltzEP2JWW5tkiMc/DedPw87f5vPwP0dGWSAfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI6G0JKFspP3CzU0JHnN69by3tMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmNlYzQ0YWItOTU4Yi0z OWU4LTg5ZGUtZDFhODEyNzNlMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGse/O2rcCB8/uOWSBfuxxBY1FIqdtovHCn4xqkL7YbtCjnTuBVeX7Eg MXJXSd8NxEHHSeC0euFboALwa8ZmmKe185pTheq01sOPd9Bi1ZeCc6PRajBM6oct wC+UBYEk16NfeuaXIFX66C7g+R1v4fq1ZlvE50QRl8iYxoDVweD+41PWKiLNHwgH jPG2egYw9u2Jn51t7CwmZwFCEmb6here6eFdBvb9FDMP2nKbUR52IljiZ1Cv+xgJ mPB6dQuSUSTR9oDCi1lt6nuHK/j6E6WEVO8mOYFp0qbknyAn/E/SQSzqBHJPSCo2 k/6++f9cIOUAKPZezKCZHQVOsnPXa3Q= -----END CERTIFICATE-----Generated at Sun Apr 6 20:17:55 2025 by rpki-client