$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635ec763-d3a8-3e08-aa87-66a719c2e343.roa File: 635ec763-d3a8-3e08-aa87-66a719c2e343.roa (raw, json) Hash identifier: +3Y+Ypjm0vRW5mspZ7oft7vIos6+sXENmsUpKzzuh6g= Subject key identifier: F1:CB:37:BF:E8:25:47:D7:6C:DC:76:55:D4:85:DC:E0:B7:07:1F:0F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965E4E3AFC74020FF2FB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635ec763-d3a8-3e08-aa87-66a719c2e343.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397227 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5e:4e:3a:fc:74:02:0f:f2:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=e3b07ae6-a27a-4827-b138-ece7fdbcfa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:2f:26:53:b4:20:cc:fd:85:0d:d7:02:1c: 21:d9:33:f4:5f:c9:d2:ee:85:7b:fb:de:56:ad:1d: 27:bb:f7:13:49:bd:e4:bb:bd:38:fd:a7:db:8a:55: bd:25:a4:fb:86:40:79:4c:8a:28:1f:b9:28:df:bc: 91:34:cd:36:54:b9:43:e1:a3:30:be:d7:d0:95:cc: ad:0a:e9:62:18:34:1a:b7:f9:c1:97:78:9a:54:5c: c8:5e:72:ab:00:97:11:62:07:20:53:30:17:9f:45: b1:f3:56:29:5a:9f:79:18:6e:6e:1d:13:24:7a:30: f9:00:02:9f:b0:e3:10:51:b6:d7:64:3d:cf:91:0c: 95:fe:3d:d3:b5:de:45:18:03:f8:77:1f:f1:59:da: 90:e7:ad:5c:63:bf:c4:9d:ae:9c:fb:8f:a3:11:1b: 3c:59:a6:84:25:55:ee:69:48:c1:1c:6f:cb:24:5f: 65:d4:bf:a9:cd:de:b0:b2:49:b8:21:c8:1f:67:85: d4:b6:42:b0:f3:8d:bc:29:8a:87:a0:f1:38:24:c0: c2:a3:92:3d:8d:d5:b5:9f:f1:6f:dd:bc:bc:0c:eb: 64:8a:c5:81:fd:54:a0:e0:ae:83:b2:23:ab:bd:46: e1:34:6d:83:1c:07:da:4a:f9:a5:29:2e:a3:b5:21: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:37:BF:E8:25:47:D7:6C:DC:76:55:D4:85:DC:E0:B7:07:1F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635ec763-d3a8-3e08-aa87-66a719c2e343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6b:f9:08:e0:7f:4b:f8:c4:9e:7a:d7:4c:88:1a:65:b8:99: cb:74:03:3d:06:00:a9:cb:31:5d:9c:52:83:2d:36:b1:22:7b: 75:f8:03:4c:86:0a:4b:4e:43:f4:c2:9b:9b:dc:c1:c2:63:a9: 00:4a:86:02:be:da:c4:06:87:8f:e8:47:1a:78:93:fa:80:67: ba:91:79:04:04:31:3b:02:42:02:64:41:e7:77:93:7b:f5:99: 82:a8:8a:58:8a:29:53:53:4e:7f:57:9f:98:4c:23:50:36:4f: b2:10:e2:b4:33:ac:31:26:90:3e:e1:13:52:9a:e0:95:02:15: 88:88:47:c4:7f:50:ee:90:8b:da:58:14:78:58:b8:b7:35:a8: bd:41:9c:1c:42:7e:0b:07:9f:60:fa:82:ea:9a:5c:b9:61:86: 03:4d:e5:14:5b:c7:f3:5f:61:bd:7a:43:dd:d7:e6:9c:a1:bd: 4b:66:bf:5b:60:e0:20:49:d6:6a:5e:c9:d8:36:ca:c4:d3:a3: a7:2b:ea:51:52:e7:40:c1:c2:d6:dd:c3:79:a9:35:94:5b:78: e6:e6:dd:22:df:c0:70:09:ce:55:7c:37:c8:d7:0d:b9:fa:41: de:5c:74:eb:f6:36:af:37:86:b1:d1:54:85:50:99:d7:08:49: 3c:8c:3d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll5OOvx0Ag/y+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTNiMDdhZTYtYTI3YS00ODI3LWIxMzgtZWNlN2ZkYmNmYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqMvJlO0IMz9hQ3XAhwh2TP0X8nS7oV7+95W rR0nu/cTSb3ku704/afbilW9JaT7hkB5TIooH7ko37yRNM02VLlD4aMwvtfQlcyt CuliGDQat/nBl3iaVFzIXnKrAJcRYgcgUzAXn0Wx81YpWp95GG5uHRMkejD5AAKf sOMQUbbXZD3PkQyV/j3Ttd5FGAP4dx/xWdqQ561cY7/Ena6c+4+jERs8WaaEJVXu aUjBHG/LJF9l1L+pzd6wskm4IcgfZ4XUtkKw8428KYqHoPE4JMDCo5I9jdW1n/Fv 3by8DOtkisWB/VSg4K6DsiOrvUbhNG2DHAfaSvmlKS6jtSFv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHLN7/oJUfXbNx2VdSF3OC3Bx8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjM1ZWM3NjMtZDNhOC0z ZTA4LWFhODctNjZhNzE5YzJlMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9r+Qjgf0v4xJ5610yIGmW4mct0Az0GAKnLMV2cUoMtNrEie3X4A0yG CktOQ/TCm5vcwcJjqQBKhgK+2sQGh4/oRxp4k/qAZ7qReQQEMTsCQgJkQed3k3v1 mYKoiliKKVNTTn9Xn5hMI1A2T7IQ4rQzrDEmkD7hE1Ka4JUCFYiIR8R/UO6Qi9pY FHhYuLc1qL1BnBxCfgsHn2D6guqaXLlhhgNN5RRbx/NfYb16Q93X5pyhvUtmv1tg 4CBJ1mpeydg2ysTTo6cr6lFS50DBwtbdw3mpNZRbeObm3SLfwHAJzlV8N8jXDbn6 Qd5cdOv2Nq83hrHRVIVQmdcISTyMPZg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:16 2025 by rpki-client