$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c0a5783-f015-36ba-86bf-7dcc07b01e0c.roa File: 3c0a5783-f015-36ba-86bf-7dcc07b01e0c.roa (raw, json) Hash identifier: ZtkzFDiSd5uv9RlDYoY8Ra1VkS8GhZRraFT+AU5crL4= Subject key identifier: A9:C7:42:CE:CD:7A:BE:85:BB:01:F0:6D:B8:54:C6:7A:88:0A:12:31 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858487CEB693D81DCD0D00FD2D880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c0a5783-f015-36ba-86bf-7dcc07b01e0c.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 397224 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:69:3d:81:dc:d0:d0:0f:d2:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=b3c763fe-3135-4934-9b8a-5101c9791cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:cc:6c:d0:87:f5:66:6c:0a:0b:af:08:42: 0c:6e:31:30:bc:ab:08:28:8e:1f:0e:b1:28:88:63: f7:96:b6:c6:fd:d4:a8:4b:8c:02:0b:28:d0:3b:31: a2:d4:2d:8c:a2:75:c5:32:7c:d6:2e:9c:50:35:2e: a0:c9:ae:08:61:c3:2b:dd:67:03:39:e4:93:fb:c5: 03:3c:9f:8d:e0:ae:15:df:80:ad:da:45:6e:33:7b: c9:46:cf:34:b2:61:c6:1c:5c:f6:b9:96:d4:43:2b: a5:05:87:c3:2a:63:d9:5f:01:40:85:a4:b0:e6:22: 3e:28:34:2a:71:b1:de:c2:68:df:0d:e2:33:e5:47: 38:bd:41:49:f7:aa:22:f3:25:64:30:4b:27:18:7a: 22:f8:e8:b4:2d:97:7b:2c:58:09:11:0d:7e:6c:ed: f4:5f:04:cf:3e:ac:a0:f0:65:c1:c8:45:27:d1:b6: d1:c4:cb:61:7a:33:47:0b:ea:97:29:cc:e2:e9:af: 34:40:89:ee:97:39:66:94:3e:93:00:6a:52:b6:1c: 78:66:6d:98:4e:89:4b:9c:8e:cc:79:fc:05:da:a5: fc:03:53:9b:9d:4b:b7:38:ca:3a:05:f7:a2:1b:ef: c7:e9:80:29:05:05:8f:1f:b3:b7:d4:e5:cb:d6:69: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C7:42:CE:CD:7A:BE:85:BB:01:F0:6D:B8:54:C6:7A:88:0A:12:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c0a5783-f015-36ba-86bf-7dcc07b01e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e2:32:12:be:26:c1:0e:6d:29:11:cf:c5:6c:b0:1c:4c:e9: a4:b4:94:6b:77:35:e2:64:8a:a9:1b:d7:25:78:c9:d5:26:83: 76:0a:1e:df:c1:d3:4a:3c:0d:a5:76:55:7a:d3:40:04:be:f5: 30:2c:15:f0:6c:88:43:ab:e9:b6:6e:94:13:64:03:8b:a8:db: 62:1e:82:42:f7:47:6b:bd:3d:bb:b3:63:f3:21:5a:1f:0f:2d: ba:c9:b9:3a:c7:1a:02:fe:42:62:31:f3:5c:3b:d3:29:6b:df: cb:06:eb:b0:61:0e:e5:c6:bc:54:ef:d2:c0:a3:c5:fb:9c:d0: 01:4a:5e:fd:5b:2a:77:1e:30:49:08:b2:9b:24:b8:24:1a:6b: 0b:02:64:c3:b6:ba:d1:fa:87:82:20:8d:a9:ba:4f:2e:e4:8d: ba:9c:7e:9e:1d:4e:48:e1:a8:20:18:31:f7:e7:59:11:5b:30: cb:64:e6:1d:ca:8d:75:16:49:5b:24:79:b1:3a:84:5a:2b:16: 34:e8:9c:10:7a:ca:15:39:dd:9f:e4:45:9c:7c:ac:7f:79:a2: 27:d9:88:c2:cb:e9:cb:17:48:45:d1:04:b0:8a:65:b8:85:f0: 2b:4b:94:49:7d:c2:e4:25:6e:29:b8:8a:ab:8c:7d:8a:3c:a6: 6b:9f:06:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh862k9gdzQ0A/S2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk YjNjNzYzZmUtMzEzNS00OTM0LTliOGEtNTEwMWM5NzkxY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+nMbNCH9WZsCguvCEIMbjEwvKsIKI4fDrEo iGP3lrbG/dSoS4wCCyjQOzGi1C2MonXFMnzWLpxQNS6gya4IYcMr3WcDOeST+8UD PJ+N4K4V34Ct2kVuM3vJRs80smHGHFz2uZbUQyulBYfDKmPZXwFAhaSw5iI+KDQq cbHewmjfDeIz5Uc4vUFJ96oi8yVkMEsnGHoi+Oi0LZd7LFgJEQ1+bO30XwTPPqyg 8GXByEUn0bbRxMthejNHC+qXKczi6a80QInulzlmlD6TAGpSthx4Zm2YTolLnI7M efwF2qX8A1ObnUu3OMo6BfeiG+/H6YApBQWPH7O31OXL1mkxHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnHQs7Ner6FuwHwbbhUxnqIChIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2MwYTU3ODMtZjAxNS0z NmJhLTg2YmYtN2RjYzA3YjAxZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADviMhK+JsEObSkRz8VssBxM6aS0lGt3NeJkiqkb1yV4ydUmg3YKHt/B 00o8DaV2VXrTQAS+9TAsFfBsiEOr6bZulBNkA4uo22IegkL3R2u9PbuzY/MhWh8P LbrJuTrHGgL+QmIx81w70ylr38sG67BhDuXGvFTv0sCjxfuc0AFKXv1bKnceMEkI spskuCQaawsCZMO2utH6h4Igjam6Ty7kjbqcfp4dTkjhqCAYMffnWRFbMMtk5h3K jXUWSVskebE6hForFjTonBB6yhU53Z/kRZx8rH95oifZiMLL6csXSEXRBLCKZbiF 8CtLlEl9wuQlbim4iquMfYo8pmufBgM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:15 2025 by rpki-client