$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fa0913b-53a6-314f-b4b5-8c324b0e2686.roa File: 3fa0913b-53a6-314f-b4b5-8c324b0e2686.roa (raw, json) Hash identifier: cEO6nbCpEGutzwu3SyvH9if+ArCI0WKOFlwp3BpztNk= Subject key identifier: 5F:F5:E8:3C:D4:50:87:58:31:31:4B:9A:66:8B:F7:B1:E0:F4:DB:3F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2113D43F45AB6EE2807D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fa0913b-53a6-314f-b4b5-8c324b0e2686.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397233 IP address blocks: 156.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:13:d4:3f:45:ab:6e:e2:80:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=eea7a73c-bb14-4e1a-bdc1-71c6a9576b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:0a:f6:30:c5:73:a9:5f:a2:b0:f7:5b:17: d8:b9:11:0a:04:3e:85:5f:3d:4e:62:e7:30:f9:fd: 7e:67:17:c4:d4:ed:27:64:e5:3a:bf:d6:00:ba:c1: 93:08:a3:e1:fc:c0:e0:6c:c2:2c:d8:97:f0:c7:51: 08:74:c5:5e:8b:78:e7:1a:40:69:d8:d4:b7:aa:e1: 1b:62:d1:39:0f:1f:36:c7:17:9b:22:ed:ee:b5:3d: 28:ff:d0:d3:60:9e:80:83:5a:8e:61:b4:9a:88:38: 0d:4c:27:5a:2a:f0:f5:3f:a8:3e:9e:41:d4:62:c3: 5f:13:0f:80:db:1f:fb:90:30:65:d1:bd:90:1b:10: 65:86:2a:63:22:08:d3:70:19:e1:40:4f:fb:4d:9d: 7e:8f:4e:66:99:ec:44:c0:85:0d:f3:d6:cf:a4:79: a4:15:49:e1:29:55:6e:4f:81:25:2f:29:c0:d3:73: f9:47:b0:64:c8:40:de:f7:19:58:9b:2a:b0:47:f8: 8d:36:e5:ee:32:d3:02:6b:0d:23:de:75:7e:2d:3b: fd:80:f2:b1:86:25:59:53:08:c8:13:3b:3d:b1:bb: 3c:54:83:78:34:82:2b:9b:39:71:f1:4b:da:61:d1: 11:69:be:cb:d5:71:0b:93:97:93:eb:bb:17:9e:b5: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:E8:3C:D4:50:87:58:31:31:4B:9A:66:8B:F7:B1:E0:F4:DB:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fa0913b-53a6-314f-b4b5-8c324b0e2686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2a:54:40:bf:ae:40:0c:da:55:02:01:c5:7e:2a:4c:3f:87: af:0a:4e:45:1e:cf:03:5a:7b:af:13:19:c8:10:e4:74:fb:47: 3d:97:00:79:08:23:8e:06:e8:3e:16:b1:52:0f:61:08:79:9c: 6a:b7:4b:eb:63:b0:a8:e5:09:11:c4:f2:7b:46:f1:81:08:d4: f6:3c:b3:f2:da:5a:12:66:22:0d:19:c7:df:7a:3d:74:a1:88: e1:b4:04:d8:dc:c0:db:2a:c8:ab:25:14:ab:d9:20:0b:63:a2: 65:ed:1b:68:ec:67:06:b9:ed:ca:a9:d6:fc:c0:e0:90:41:2c: c7:56:e1:c1:dd:5d:10:a6:eb:34:ff:0c:11:79:1e:e0:5e:b0: f6:45:7f:78:54:f9:e8:e0:99:75:f7:33:89:8e:59:70:10:f9: 93:e0:8b:9f:18:86:cf:8c:45:fd:e9:73:f0:3e:8f:30:2e:59: f3:68:bd:22:00:93:86:72:43:d1:2b:11:58:66:13:9c:ba:85: a0:e5:41:c0:1f:c5:3e:1b:20:41:75:eb:97:2c:a2:65:16:18: 63:a6:ed:c8:e5:c4:25:16:31:82:43:a3:1d:9b:2e:47:27:e6: fd:46:66:51:95:95:dc:35:d0:ab:60:de:6d:a0:0f:a7:cf:a7: 31:cb:77:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRPUP0WrbuKAfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZWVhN2E3M2MtYmIxNC00ZTFhLWJkYzEtNzFjNmE5NTc2YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqgK9jDFc6lforD3WxfYuREKBD6FXz1OYucw +f1+ZxfE1O0nZOU6v9YAusGTCKPh/MDgbMIs2Jfwx1EIdMVei3jnGkBp2NS3quEb YtE5Dx82xxebIu3utT0o/9DTYJ6Ag1qOYbSaiDgNTCdaKvD1P6g+nkHUYsNfEw+A 2x/7kDBl0b2QGxBlhipjIgjTcBnhQE/7TZ1+j05mmexEwIUN89bPpHmkFUnhKVVu T4ElLynA03P5R7BkyEDe9xlYmyqwR/iNNuXuMtMCaw0j3nV+LTv9gPKxhiVZUwjI Ezs9sbs8VIN4NIIrmzlx8UvaYdERab7L1XELk5eT67sXnrX9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/16DzUUIdYMTFLmmaL97Hg9Ns/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2ZhMDkxM2ItNTNhNi0z MTRmLWI0YjUtOGMzMjRiMGUyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsqVEC/rkAM2lUCAcV+Kkw/h68KTkUezwNae68TGcgQ5HT7Rz2XAHkI I44G6D4WsVIPYQh5nGq3S+tjsKjlCRHE8ntG8YEI1PY8s/LaWhJmIg0Zx996PXSh iOG0BNjcwNsqyKslFKvZIAtjomXtG2jsZwa57cqp1vzA4JBBLMdW4cHdXRCm6zT/ DBF5HuBesPZFf3hU+ejgmXX3M4mOWXAQ+ZPgi58Yhs+MRf3pc/A+jzAuWfNovSIA k4ZyQ9ErEVhmE5y6haDlQcAfxT4bIEF165csomUWGGOm7cjlxCUWMYJDox2bLkcn 5v1GZlGVldw10Ktg3m2gD6fPpzHLd3s= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:26 2025 by rpki-client