$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa File: 3fef9add-1dab-3e1f-a710-2361cdc7a027.roa (raw, json) Hash identifier: bnBkxcOp1gfNJgZMQmeL8JNaHgHNMymXIKWx7SSYn9o= Subject key identifier: DA:01:DD:9D:45:42:D4:A4:19:0E:BD:29:E1:B9:02:FF:8F:EA:62:90 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E622F77F73968A57B940 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397218 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e6:22:f7:7f:73:96:8a:57:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=aaf9f86a-9c01-47bd-ab0d-5b1a8d03fc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:f5:80:3c:6c:a0:ce:a6:35:a9:0a:d4:89: ef:98:36:77:3a:b8:77:66:c5:10:5b:69:89:c5:36: 7e:1b:7d:96:34:58:e6:82:be:ea:2e:d3:b4:ba:d4: 20:8c:71:78:a5:5f:6b:76:8f:7f:35:56:4e:1c:58: 6f:15:2c:28:5b:a1:9c:38:85:78:4c:e2:fa:65:fb: e0:48:fc:b7:c3:c9:e6:be:33:f1:07:08:4e:e3:25: 53:df:bf:3c:c1:dc:60:df:29:37:af:1b:b1:0e:1b: 45:a2:e0:5e:b4:65:a9:a9:9c:1a:57:43:bc:57:37: 6a:77:d4:ff:b0:c0:6f:24:12:03:25:fa:45:4c:5f: b2:23:ae:7a:5e:a5:cf:9d:6d:7d:45:ee:7d:49:e3: 0e:e3:43:5b:d2:30:67:9c:bc:63:e1:63:07:90:31: 12:84:7e:cd:f9:a8:e1:51:df:4b:22:6c:7e:f9:c7: 10:93:b9:59:20:f6:4e:ab:0a:9e:1b:07:9c:98:85: ec:4c:6e:b8:7c:cc:e7:de:da:8e:0a:f9:46:8f:ee: 11:4e:97:15:69:47:9b:57:5b:6f:61:68:0c:73:96: d1:ea:35:80:42:92:90:71:0e:50:54:a3:37:29:f3: c0:77:f8:6c:de:56:44:e2:7a:4c:89:e2:2f:cc:be: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:DD:9D:45:42:D4:A4:19:0E:BD:29:E1:B9:02:FF:8F:EA:62:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bd:e9:e0:b0:12:7b:0f:6f:24:e3:0c:bb:fc:02:8f:bb:b4: a6:2e:6c:27:07:90:10:0b:f4:d3:8f:44:06:d3:48:08:c1:82: d4:39:5e:d1:3d:b1:96:8d:61:57:65:49:b7:0b:9c:45:43:7d: b9:e3:6f:39:0b:bc:14:3a:a6:10:0a:3f:7c:19:6c:fa:84:d4: ef:5f:77:31:4f:9a:6e:15:ca:d0:7d:b3:bf:e2:34:7d:05:57: 7b:19:ff:f9:f5:32:d3:6e:e9:c4:e9:de:2c:24:12:69:4d:75: 37:af:25:c0:48:97:61:e4:03:ae:04:f8:77:73:b7:3a:e6:78: ab:89:27:1a:9b:d6:ab:20:67:9c:e8:2e:2c:2d:94:1d:a2:dd: a6:08:f1:a4:81:11:e7:37:c8:a8:5b:e4:91:46:18:44:56:37: 9b:86:bb:71:3b:ad:67:cd:69:f6:7d:73:7f:12:d0:43:33:a9: 19:1e:12:e6:ab:68:86:7e:d8:c8:5e:65:f6:c3:85:b1:b6:63: 2e:39:6b:74:e9:67:6e:18:17:bf:0b:1f:22:a2:3f:89:a3:cf: 77:2e:96:ef:b0:70:ef:82:89:51:04:1c:0d:7e:77:fe:9c:e4: d8:3f:81:42:a7:1f:77:3f:98:01:6e:74:7a:bf:3e:95:c8:17: d7:98:93:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuYi939zlopXuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWFmOWY4NmEtOWMwMS00N2JkLWFiMGQtNWIxYThkMDNmYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1T1gDxsoM6mNakK1InvmDZ3Orh3ZsUQW2mJ xTZ+G32WNFjmgr7qLtO0utQgjHF4pV9rdo9/NVZOHFhvFSwoW6GcOIV4TOL6Zfvg SPy3w8nmvjPxBwhO4yVT3788wdxg3yk3rxuxDhtFouBetGWpqZwaV0O8Vzdqd9T/ sMBvJBIDJfpFTF+yI656XqXPnW19Re59SeMO40Nb0jBnnLxj4WMHkDEShH7N+ajh Ud9LImx++ccQk7lZIPZOqwqeGwecmIXsTG64fMzn3tqOCvlGj+4RTpcVaUebV1tv YWgMc5bR6jWAQpKQcQ5QVKM3KfPAd/hs3lZE4npMieIvzL62wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoB3Z1FQtSkGQ69KeG5Av+P6mKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2ZlZjlhZGQtMWRhYi0z ZTFmLWE3MTAtMjM2MWNkYzdhMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS96eCwEnsPbyTjDLv8Ao+7tKYubCcHkBAL9NOPRAbTSAjBgtQ5XtE9 sZaNYVdlSbcLnEVDfbnjbzkLvBQ6phAKP3wZbPqE1O9fdzFPmm4VytB9s7/iNH0F V3sZ//n1MtNu6cTp3iwkEmlNdTevJcBIl2HkA64E+HdztzrmeKuJJxqb1qsgZ5zo LiwtlB2i3aYI8aSBEec3yKhb5JFGGERWN5uGu3E7rWfNafZ9c38S0EMzqRkeEuar aIZ+2MheZfbDhbG2Yy45a3TpZ24YF78LHyKiP4mjz3culu+wcO+CiVEEHA1+d/6c 5Ng/gUKnH3c/mAFudHq/PpXIF9eYk40= -----END CERTIFICATE-----Generated at Fri Mar 14 07:44:58 2025 by rpki-client