$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f57be-9f5d-37bb-a943-c0ea9f121080.roa File: 625f57be-9f5d-37bb-a943-c0ea9f121080.roa (raw, json) Hash identifier: 98ymySSdiYxLyO5m6EuwMWzRgs5WrHf46lF10d6kxaE= Subject key identifier: B3:FF:E4:79:50:45:E3:EE:F4:4A:94:5B:56:D7:6A:0C:01:75:F0:9A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858486C2B28E6872879ABC276D900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f57be-9f5d-37bb-a943-c0ea9f121080.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 397220 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:28:e6:87:28:79:ab:c2:76:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=3885ae65-0891-497c-9958-b6377c523ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:e7:0d:b4:e1:1c:12:ef:8b:7f:95:5d:fc: 04:1b:07:09:5f:97:98:b0:11:e5:10:81:fc:8b:df: c6:b2:84:92:92:e9:6c:2a:da:e0:d6:df:64:c9:45: 8a:11:0d:e0:fc:da:da:30:5b:2d:09:8d:1f:4f:fb: 2c:76:ad:67:f8:22:27:0b:63:bd:62:5a:ed:29:8f: 1c:91:3f:68:a1:ff:71:5b:6b:97:f7:47:07:8c:4f: 86:4b:0a:3a:61:3d:b2:fb:48:44:22:ab:d6:28:43: 3b:e6:b2:58:3d:40:6f:c6:12:79:50:96:cd:88:28: 0e:fd:a1:3e:bb:30:d6:b1:96:8a:9f:79:1a:b9:27: 34:4f:f6:18:b5:86:3d:84:35:0f:56:e9:cb:af:de: 35:91:51:03:c8:a1:bd:31:77:42:a3:c0:1d:8f:8e: 5d:4d:99:0c:e5:a8:aa:c3:9e:07:ac:b6:17:d6:b6: f1:00:e5:94:e2:3e:5e:59:f7:66:1e:23:3c:14:a1: 11:46:98:e1:be:cf:6c:78:3b:30:f2:72:1a:bd:07: 25:10:82:b8:4a:c1:99:83:05:f3:b8:81:c1:9b:ba: 43:00:6c:3d:9c:4e:c1:ac:ca:4e:6c:a0:a1:c3:9c: 45:32:0a:41:3d:1b:e7:c2:7b:99:8e:fc:ca:9e:cb: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:E4:79:50:45:E3:EE:F4:4A:94:5B:56:D7:6A:0C:01:75:F0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/625f57be-9f5d-37bb-a943-c0ea9f121080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:da:4e:f6:9d:ec:4c:23:ca:6c:d6:1f:b7:3a:4c:6e:58:90: af:93:f4:9f:55:c9:dc:bb:00:ab:1b:a7:7e:c0:08:a2:e4:64: 03:c4:9e:c7:ca:6b:fe:5e:91:de:cb:c1:35:14:f5:1a:7f:a5: 6b:57:c9:88:7a:84:fc:c0:28:31:6b:81:fd:63:32:f2:8e:28: 70:9b:d6:3b:da:eb:e1:33:bf:63:43:0f:73:0f:24:b9:a0:0a: 2f:32:89:10:7b:f4:fc:58:e4:6f:5a:46:a3:44:cc:18:33:e8: f7:18:e6:85:b4:a1:5a:4e:e6:7f:13:2b:21:40:fa:19:5f:1e: 22:2b:00:da:42:cc:91:18:86:d0:84:19:03:1d:06:d6:8a:93: d2:1f:f6:f5:2e:b4:9f:29:17:b3:99:96:eb:23:64:e5:45:ff: 6b:40:bf:bf:43:ab:c2:b6:d9:36:ef:db:28:0f:74:ab:f5:dc: bc:47:b1:65:97:a6:5b:03:4e:d0:08:35:65:fb:ab:6f:d2:71: 1f:c8:66:ad:70:f3:8f:39:77:7c:54:a9:11:df:9e:72:f6:af: 6b:04:59:74:54:8e:cd:76:6d:04:6b:54:25:96:d5:42:06:42: 18:ea:fe:15:38:d2:ba:5b:d3:37:32:09:7e:2f:68:bb:d2:20: 97:90:33:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyjmhyh5q8J22QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk Mzg4NWFlNjUtMDg5MS00OTdjLTk5NTgtYjYzNzdjNTIzYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq7nDbThHBLvi3+VXfwEGwcJX5eYsBHlEIH8 i9/GsoSSkulsKtrg1t9kyUWKEQ3g/NraMFstCY0fT/ssdq1n+CInC2O9YlrtKY8c kT9oof9xW2uX90cHjE+GSwo6YT2y+0hEIqvWKEM75rJYPUBvxhJ5UJbNiCgO/aE+ uzDWsZaKn3kauSc0T/YYtYY9hDUPVunLr941kVEDyKG9MXdCo8Adj45dTZkM5aiq w54HrLYX1rbxAOWU4j5eWfdmHiM8FKERRpjhvs9seDsw8nIavQclEIK4SsGZgwXz uIHBm7pDAGw9nE7BrMpObKChw5xFMgpBPRvnwnuZjvzKnssa0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP/5HlQRePu9EqUW1bXagwBdfCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjI1ZjU3YmUtOWY1ZC0z N2JiLWE5NDMtYzBlYTlmMTIxMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHaTvad7EwjymzWH7c6TG5YkK+T9J9Vydy7AKsbp37ACKLkZAPEnsfK a/5ekd7LwTUU9Rp/pWtXyYh6hPzAKDFrgf1jMvKOKHCb1jva6+Ezv2NDD3MPJLmg Ci8yiRB79PxY5G9aRqNEzBgz6PcY5oW0oVpO5n8TKyFA+hlfHiIrANpCzJEYhtCE GQMdBtaKk9If9vUutJ8pF7OZlusjZOVF/2tAv79Dq8K22Tbv2ygPdKv13LxHsWWX plsDTtAINWX7q2/ScR/IZq1w8485d3xUqRHfnnL2r2sEWXRUjs12bQRrVCWW1UIG Qhjq/hU40rpb0zcyCX4vaLvSIJeQMzg= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:54 2025 by rpki-client