$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8839c659-beec-3c84-8f38-ae4b6138bfdc.roa File: 8839c659-beec-3c84-8f38-ae4b6138bfdc.roa (raw, json) Hash identifier: 4DwGh9j3Mvtf1ENRzxrLBQc3RfUwVV48hFetN8g7EXA= Subject key identifier: 4D:A5:A9:99:05:50:C7:20:95:4D:F0:68:40:24:A8:04:9E:85:4A:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99655B778D73E33D0B84C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8839c659-beec-3c84-8f38-ae4b6138bfdc.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 19905 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:55:b7:78:d7:3e:33:d0:b8:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4250d242-6b2e-49d5-8894-f0a78dc598d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:57:ef:8e:66:6e:82:09:00:58:4a:d0:1d:8f: 83:7d:33:51:52:59:60:3e:c2:27:ee:c4:75:7e:cc: d8:83:74:cb:82:a5:a9:51:24:8e:88:18:af:03:3c: da:4d:94:5a:47:f9:47:1a:e7:79:cb:6a:c2:5b:ce: cc:1c:fa:1c:5f:63:7c:f9:2a:29:ca:c6:7e:a5:b2: 9e:b2:83:a9:d5:3f:01:88:03:ec:b6:5d:01:50:03: e0:b5:92:9e:c8:48:14:b0:6e:dd:4c:97:ad:54:c4: e5:75:75:63:cc:5b:87:fb:2a:01:e9:55:a6:5a:cf: d8:d5:73:a7:55:5a:56:7b:66:b1:26:b0:58:8a:20: 2b:8e:97:31:2c:61:1a:23:e2:71:1b:77:59:8f:1b: f4:13:d0:6d:cb:93:64:ef:f8:82:84:90:fa:05:c7: 0d:28:ba:3b:c3:71:f9:62:84:1e:9e:44:46:48:dd: 45:26:16:2b:dd:5a:ad:10:75:af:b3:f6:22:63:6e: 85:55:05:5e:80:b3:23:53:5b:b1:62:4e:77:bf:49: 98:16:57:ae:f4:30:7d:f2:b2:69:4a:7e:c0:e0:09: 7f:fd:64:a3:c3:14:41:6f:02:a5:d6:5c:9c:31:89: 34:37:ad:bc:cf:08:11:9c:41:4d:f7:31:dd:5a:5d: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:A9:99:05:50:C7:20:95:4D:F0:68:40:24:A8:04:9E:85:4A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8839c659-beec-3c84-8f38-ae4b6138bfdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:60:4e:00:ae:89:26:ee:0e:c1:e8:d9:35:5c:b3:8a:4f:8c: 56:e1:63:89:4b:c7:e0:c3:ac:ee:a4:67:07:d7:fd:bd:bf:b7: 2f:27:3d:60:1a:be:cf:4a:b0:80:67:31:91:a0:66:51:d9:3e: e9:92:86:4c:eb:c3:4f:04:17:5e:d4:e5:27:dc:f9:fb:79:69: 7c:db:a8:97:e5:d1:f4:be:9f:a8:ff:02:b8:c7:35:e6:78:cd: 66:63:15:9b:7a:3f:9e:b2:8b:f9:b2:ab:2c:72:b9:da:f2:0e: 74:73:62:1c:39:1c:d2:b4:6c:b4:e4:26:5f:9b:71:95:18:85: bc:bd:fe:ad:53:65:e0:81:aa:c2:80:6b:51:4e:51:05:a5:a4: 3a:1b:38:86:d7:be:c0:4f:b3:83:4f:f0:96:7e:d4:88:52:0e: fb:f5:c1:7b:63:cf:6e:83:17:b8:fd:34:11:f6:16:69:b5:e1: 38:14:58:8c:a8:6f:85:9d:55:9d:4f:9e:2d:bf:91:e6:0c:7e: 70:2b:f0:98:65:b8:6a:49:3a:f7:16:9f:c4:ea:bc:9b:35:96: 09:94:46:21:e2:e5:9c:92:55:36:4a:89:72:79:29:13:a3:2d: 6b:bb:48:55:ad:b7:41:ac:98:c3:f1:2c:3b:94:a3:1a:e4:7a: 7c:51:12:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllW3eNc+M9C4TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDI1MGQyNDItNmIyZS00OWQ1LTg4OTQtZjBhNzhkYzU5OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilfvjmZuggkAWErQHY+DfTNRUllgPsIn7sR1 fszYg3TLgqWpUSSOiBivAzzaTZRaR/lHGud5y2rCW87MHPocX2N8+SopysZ+pbKe soOp1T8BiAPstl0BUAPgtZKeyEgUsG7dTJetVMTldXVjzFuH+yoB6VWmWs/Y1XOn VVpWe2axJrBYiiArjpcxLGEaI+JxG3dZjxv0E9Bty5Nk7/iChJD6BccNKLo7w3H5 YoQenkRGSN1FJhYr3VqtEHWvs/YiY26FVQVegLMjU1uxYk53v0mYFleu9DB98rJp Sn7A4Al//WSjwxRBbwKl1lycMYk0N628zwgRnEFN9zHdWl2lgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2lqZkFUMcglU3waEAkqASehUq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODgzOWM2NTktYmVlYy0z Yzg0LThmMzgtYWU0YjYxMzhiZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtgTgCuiSbuDsHo2TVcs4pPjFbhY4lLx+DDrO6kZwfX/b2/ty8nPWAa vs9KsIBnMZGgZlHZPumShkzrw08EF17U5Sfc+ft5aXzbqJfl0fS+n6j/ArjHNeZ4 zWZjFZt6P56yi/myqyxyudryDnRzYhw5HNK0bLTkJl+bcZUYhby9/q1TZeCBqsKA a1FOUQWlpDobOIbXvsBPs4NP8JZ+1IhSDvv1wXtjz26DF7j9NBH2Fmm14TgUWIyo b4WdVZ1Pni2/keYMfnAr8JhluGpJOvcWn8TqvJs1lgmURiHi5ZySVTZKiXJ5KROj LWu7SFWtt0GsmMPxLDuUoxrkenxRErM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:22 2025 by rpki-client