$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e58a9ca-1eda-349b-ac76-661a87d7349b.roa File: 0e58a9ca-1eda-349b-ac76-661a87d7349b.roa (raw, json) Hash identifier: LMAy5dTwCsJixl9kjRrMbEbrOShWwf5zRHyuZ+uXp/4= Subject key identifier: 10:53:F2:EC:11:8F:D8:21:0C:69:D9:24:07:B9:40:41:D0:C4:C2:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9963D1BB99821CBEE758280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e58a9ca-1eda-349b-ac76-661a87d7349b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397241 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:3d:1b:b9:98:21:cb:ee:75:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1e4adcaf-6ce7-4969-918b-e0a63e55c195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:6f:91:20:cb:c9:04:77:8e:69:5a:63:b1: 82:66:40:42:fd:57:3b:b9:7c:d6:3b:a0:59:28:4b: 41:69:e7:3a:35:11:cb:cd:7b:76:e2:58:6c:0e:99: bb:f9:d8:38:05:ca:16:1a:bc:56:bf:51:fb:52:10: 1b:c0:46:29:e0:d0:c2:87:b5:18:94:7c:38:5a:66: 64:bb:48:82:3b:f9:01:5c:d5:b3:8a:84:f2:53:f0: 67:31:de:84:d6:e9:02:ef:aa:1d:90:3d:6e:0a:04: 6d:df:02:cf:07:9e:79:32:8b:18:e1:0c:07:52:63: 6a:f0:ee:a7:ea:03:f6:47:b1:70:e2:23:3f:59:07: ce:b0:1b:21:e6:d0:d2:01:71:a0:0f:e5:59:f3:58: 04:59:02:f2:80:89:04:26:89:4d:ab:82:a2:4b:c9: 1e:28:12:c7:52:56:ba:e6:af:8b:06:30:0e:d4:3e: 5e:09:50:ac:3e:a1:2b:26:84:2b:00:dc:ff:79:7e: ad:a8:c0:a6:7f:3a:87:4b:d2:fd:34:15:eb:9d:f1: 07:6f:f6:ca:72:fb:fd:19:f0:ca:d0:21:be:2d:8d: 7c:be:f0:47:76:4a:9b:06:9f:2b:83:b0:27:b3:cf: e1:74:e3:c4:11:36:c8:98:2d:94:95:98:db:2e:04: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:53:F2:EC:11:8F:D8:21:0C:69:D9:24:07:B9:40:41:D0:C4:C2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e58a9ca-1eda-349b-ac76-661a87d7349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5b:93:bb:21:e1:f5:5a:1a:25:d5:2e:63:57:72:75:3a:38: e8:e6:3d:e2:43:3d:3c:e4:49:f3:01:e7:c4:ec:32:48:e4:1d: 95:7e:8b:40:bf:7c:90:dd:a2:19:55:aa:66:eb:d3:80:9e:de: 70:62:4c:a0:46:bf:49:e0:98:5d:30:6b:11:00:02:26:e7:66: 28:56:4f:61:9b:26:a9:6e:a0:11:1a:87:17:a1:ee:a6:52:0c: f8:eb:dc:fb:51:7a:9f:67:a3:50:9b:c0:07:6f:97:59:22:da: 3c:df:f0:9c:2b:89:56:7c:3c:e9:a9:bf:81:b5:80:3d:a4:3e: ec:43:77:24:e1:63:23:b1:ac:95:cd:d0:c6:66:64:b6:eb:11: d6:c9:32:81:7a:4c:6b:d9:66:53:26:71:f1:b9:c2:64:c4:ca: b6:be:6d:d5:81:83:aa:d8:8b:f4:0a:05:05:e4:9b:8f:90:a2: 1a:f2:5e:02:10:14:8b:46:20:3f:ad:8f:d8:25:c7:97:11:4e: bc:3c:a2:c9:68:40:5b:38:57:73:79:ce:d6:5e:7e:75:58:29: 2d:10:96:67:00:35:58:09:fd:ea:c7:62:02:0f:82:01:86:65: 62:a4:64:51:4a:7b:f9:94:13:95:91:d2:31:8c:4c:91:0b:e0: 8f:32:75:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj0buZghy+51goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWU0YWRjYWYtNmNlNy00OTY5LTkxOGItZTBhNjNlNTVjMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPRvkSDLyQR3jmlaY7GCZkBC/Vc7uXzWO6BZ KEtBaec6NRHLzXt24lhsDpm7+dg4BcoWGrxWv1H7UhAbwEYp4NDCh7UYlHw4WmZk u0iCO/kBXNWzioTyU/BnMd6E1ukC76odkD1uCgRt3wLPB555MosY4QwHUmNq8O6n 6gP2R7Fw4iM/WQfOsBsh5tDSAXGgD+VZ81gEWQLygIkEJolNq4KiS8keKBLHUla6 5q+LBjAO1D5eCVCsPqErJoQrANz/eX6tqMCmfzqHS9L9NBXrnfEHb/bKcvv9GfDK 0CG+LY18vvBHdkqbBp8rg7Ans8/hdOPEETbImC2UlZjbLgR0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBT8uwRj9ghDGnZJAe5QEHQxMLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGU1OGE5Y2EtMWVkYS0z NDliLWFjNzYtNjYxYTg3ZDczNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRbk7sh4fVaGiXVLmNXcnU6OOjmPeJDPTzkSfMB58TsMkjkHZV+i0C/ fJDdohlVqmbr04Ce3nBiTKBGv0ngmF0waxEAAibnZihWT2GbJqluoBEahxeh7qZS DPjr3PtRep9no1CbwAdvl1ki2jzf8JwriVZ8POmpv4G1gD2kPuxDdyThYyOxrJXN 0MZmZLbrEdbJMoF6TGvZZlMmcfG5wmTEyra+bdWBg6rYi/QKBQXkm4+QohryXgIQ FItGID+tj9glx5cRTrw8osloQFs4V3N5ztZefnVYKS0QlmcANVgJ/erHYgIPggGG ZWKkZFFKe/mUE5WR0jGMTJEL4I8ydYM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:30 2025 by rpki-client