$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa File: 2b555e68-4c51-3752-a450-b18f92e0d2fa.roa (raw, json) Hash identifier: Enk4qLIylj8bj1H2b9d9jG6onSH4jxYitREa1tFxerQ= Subject key identifier: 07:FC:83:19:B4:57:14:97:A3:29:83:8B:CD:52:EC:BB:15:F4:71:B8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20EAC938D6566C3BB0D280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397238 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:ea:c9:38:d6:56:6c:3b:b0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=15570581-f049-4925-81f6-b6e98622947a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:32:db:20:23:13:3a:c9:0f:26:bf:96:4f: b2:60:5a:bb:72:5e:1e:4b:85:04:3d:bc:8e:ee:7b: 52:e0:86:47:54:10:98:12:de:21:51:e4:81:81:2a: 9a:d6:b7:e8:62:70:48:6e:77:9c:f6:ed:33:36:ec: e1:06:ae:15:ea:61:a5:f8:12:70:4a:98:fb:da:9a: df:5f:9d:17:10:b6:7e:8a:73:87:8e:b7:ab:01:dd: 69:30:38:c3:49:a3:76:32:87:fa:e6:ee:59:df:5a: 3b:f7:25:e5:75:1f:46:31:b2:f9:fd:e4:8f:ad:6f: 0b:c7:e2:55:43:94:00:87:f9:1c:ee:2e:15:6f:94: a8:bf:4e:6b:49:95:9f:93:3c:7c:85:22:48:11:26: 9a:f4:32:99:98:6c:97:1f:da:22:9d:00:76:f8:2b: e5:d6:b7:d0:28:9a:27:44:4e:59:3d:69:66:73:b9: 0e:80:2a:25:0b:84:ac:77:a9:5a:29:f3:3c:ec:72: 39:dd:09:9c:33:bb:3c:61:e1:be:93:7e:55:e9:f3: 9e:8b:42:96:a7:78:17:0e:77:3a:8d:69:35:51:2f: da:11:7d:dd:ac:46:af:e3:b0:2a:81:72:0d:8e:ed: 05:fe:76:22:09:20:c3:cd:f5:58:db:5a:05:5d:1b: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:83:19:B4:57:14:97:A3:29:83:8B:CD:52:EC:BB:15:F4:71:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:0f:37:43:20:4a:fe:96:f5:ce:6e:a9:b3:79:e2:28:19: 03:6f:e9:a8:1c:39:d8:ec:a9:6d:60:c2:31:93:f8:3d:a1:bc: 08:1e:ed:3a:66:0b:7f:98:95:9f:eb:2d:4a:1c:2d:b8:40:96: ce:a6:45:2c:98:0b:6b:92:f9:19:48:55:2b:6c:07:a8:65:de: 8c:56:a1:bd:b5:34:3b:d4:ca:55:16:82:6a:b1:d5:5b:06:ad: 2e:56:ae:08:b3:d3:f2:07:39:d1:53:31:94:e9:35:84:29:44: 48:39:6f:3b:df:cf:d8:c0:fc:42:3b:d3:75:62:f9:de:b5:eb: 04:ec:72:c2:38:7b:f4:1e:4c:99:1a:a2:3b:68:77:bc:ec:0d: 1e:7e:11:60:87:6a:1f:35:57:ea:a7:2d:3f:ef:bd:f8:37:54: e5:c7:fc:fe:19:d5:f7:70:ca:57:64:9b:39:c8:aa:22:de:82: fa:c6:27:f5:02:5b:cb:e1:05:8d:51:75:a0:81:07:c8:e9:2b: b1:69:09:1b:7d:1a:2b:e3:82:23:fd:da:fc:86:62:7c:15:0a: 0f:cf:f6:2a:6d:9c:3b:ab:9b:89:2d:1d:3c:1b:c7:6d:bc:e3: 09:7c:a6:8e:36:af:90:6b:7b:a2:b9:46:4a:0e:42:cc:40:a5: 9a:ca:45:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOrJONZWbDuw0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MTU1NzA1ODEtZjA0OS00OTI1LTgxZjYtYjZlOTg2MjI5NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDQy2yAjEzrJDya/lk+yYFq7cl4eS4UEPbyO 7ntS4IZHVBCYEt4hUeSBgSqa1rfoYnBIbnec9u0zNuzhBq4V6mGl+BJwSpj72prf X50XELZ+inOHjrerAd1pMDjDSaN2Mof65u5Z31o79yXldR9GMbL5/eSPrW8Lx+JV Q5QAh/kc7i4Vb5Sov05rSZWfkzx8hSJIESaa9DKZmGyXH9oinQB2+Cvl1rfQKJon RE5ZPWlmc7kOgColC4Ssd6laKfM87HI53QmcM7s8YeG+k35V6fOei0KWp3gXDnc6 jWk1US/aEX3drEav47AqgXINju0F/nYiCSDDzfVY21oFXRstbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf8gxm0VxSXoymDi81S7LsV9HG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI1NTVlNjgtNGM1MS0z NzUyLWE0NTAtYjE4ZjkyZTBkMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqVDzdDIEr+lvXObqmzeeIoGQNv6agcOdjsqW1gwjGT+D2hvAge7Tpm C3+YlZ/rLUocLbhAls6mRSyYC2uS+RlIVStsB6hl3oxWob21NDvUylUWgmqx1VsG rS5Wrgiz0/IHOdFTMZTpNYQpREg5bzvfz9jA/EI703Vi+d616wTscsI4e/QeTJka ojtod7zsDR5+EWCHah81V+qnLT/vvfg3VOXH/P4Z1fdwyldkmznIqiLegvrGJ/UC W8vhBY1RdaCBB8jpK7FpCRt9GivjgiP92vyGYnwVCg/P9iptnDurm4ktHTwbx228 4wl8po42r5Bre6K5RkoOQsxApZrKRQk= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:49 2025 by rpki-client