$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91441189-c95b-3fda-be78-da3d9a0ea619.roa File: 91441189-c95b-3fda-be78-da3d9a0ea619.roa (raw, json) Hash identifier: mx8Bobj3vMLuTSMEyQFYiBP0AsTQXf+B8ttUTNkbk7k= Subject key identifier: C9:C4:17:E9:72:88:2C:2C:59:D5:ED:7F:4A:AA:FF:4E:0B:A6:A4:11 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996567DDA170E8F44D26B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91441189-c95b-3fda-be78-da3d9a0ea619.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397229 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:56:7d:da:17:0e:8f:44:d2:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=246c8893-dcb5-4894-9d00-a6eb93c5ab01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:77:41:a3:6b:67:fa:77:fc:01:45:bf:b6: 5f:4b:4b:16:05:d8:24:47:62:81:40:63:0b:d7:3a: 4e:83:78:e8:5d:89:a1:86:2d:f9:16:1e:12:36:d4: 85:05:d7:9b:2e:a2:43:fb:16:78:ee:52:01:76:25: 44:f5:80:07:4a:12:61:3a:1c:98:31:c4:80:cc:ca: cd:87:07:b8:82:ab:98:27:2e:ae:57:02:77:d6:1f: 73:1e:40:2d:90:18:29:4d:c7:0c:c4:5f:28:ba:c1: 43:5e:71:e8:80:f2:01:f5:43:55:82:fa:52:b0:09: 22:14:8b:9e:6a:76:8e:88:ed:8e:62:e2:32:29:eb: d3:89:8a:62:d0:9a:50:7a:04:9a:d0:46:41:3b:6a: f4:a3:58:ca:38:4e:0a:91:04:8c:22:e0:b5:dd:e4: 69:86:8a:1b:ec:f4:67:0b:08:79:b4:23:0e:0e:4c: 5a:63:7e:1e:1a:81:02:b1:13:a6:d9:13:ec:cb:3b: 98:92:aa:0c:a4:c2:e3:26:75:c6:6d:21:c3:f1:4d: ff:13:af:31:bb:2a:e0:b1:df:02:57:fa:87:fc:fb: b0:16:6f:9d:7c:ac:4e:7f:3b:18:de:ad:1a:e5:57: 52:cd:b2:29:24:cc:61:cd:c0:f9:69:76:30:bf:4f: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:17:E9:72:88:2C:2C:59:D5:ED:7F:4A:AA:FF:4E:0B:A6:A4:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91441189-c95b-3fda-be78-da3d9a0ea619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:72:61:e7:a6:08:03:d4:19:be:18:01:e3:57:05:cd:a7:12: 0a:f5:b7:8f:ca:fb:a0:27:ff:15:0c:43:02:e4:84:5d:4c:d7: 1e:6e:9f:15:76:9f:72:16:17:47:de:ca:1a:c4:8e:c3:60:3f: f5:7a:04:6a:f1:26:7a:db:22:0c:fb:84:62:61:12:fb:80:ab: 6a:9d:46:1d:91:0e:77:2d:2d:25:6b:0c:82:8e:13:2a:da:5a: 7f:03:d1:f6:10:1e:ab:b2:a3:15:47:fb:c5:64:7b:16:20:05: d3:60:92:7a:1a:08:f2:57:05:13:92:15:6d:3a:56:be:c5:a0: 79:bd:ef:25:11:89:03:53:34:1d:d9:8e:8a:14:2b:bd:09:2e: 9b:b3:a8:06:69:d9:4d:84:66:24:db:f9:11:9e:6e:32:67:94: 57:27:e0:98:15:0e:e5:00:91:ca:1b:84:ec:00:d4:63:95:24: a0:cf:26:52:5c:c5:23:d7:59:cf:4f:46:6e:8b:48:fb:0b:4e: cf:3b:0b:20:02:41:09:48:fd:6d:b9:e3:d9:42:c7:a0:9d:5b: 58:30:2d:58:ad:2a:12:0d:72:44:c4:2b:98:47:69:73:ca:46: 2b:50:4e:82:ff:2f:49:5c:f7:76:d2:65:87:26:e9:e6:19:1e: 34:3e:ed:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllZ92hcOj0TSawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQ2Yzg4OTMtZGNiNS00ODk0LTlkMDAtYTZlYjkzYzVhYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmV3QaNrZ/p3/AFFv7ZfS0sWBdgkR2KBQGML 1zpOg3joXYmhhi35Fh4SNtSFBdebLqJD+xZ47lIBdiVE9YAHShJhOhyYMcSAzMrN hwe4gquYJy6uVwJ31h9zHkAtkBgpTccMxF8ousFDXnHogPIB9UNVgvpSsAkiFIue anaOiO2OYuIyKevTiYpi0JpQegSa0EZBO2r0o1jKOE4KkQSMIuC13eRphoob7PRn Cwh5tCMODkxaY34eGoECsROm2RPsyzuYkqoMpMLjJnXGbSHD8U3/E68xuyrgsd8C V/qH/PuwFm+dfKxOfzsY3q0a5VdSzbIpJMxhzcD5aXYwv09JgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnEF+lyiCwsWdXtf0qq/04LpqQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTE0NDExODktYzk1Yi0z ZmRhLWJlNzgtZGEzZDlhMGVhNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJyYeemCAPUGb4YAeNXBc2nEgr1t4/K+6An/xUMQwLkhF1M1x5unxV2 n3IWF0feyhrEjsNgP/V6BGrxJnrbIgz7hGJhEvuAq2qdRh2RDnctLSVrDIKOEyra Wn8D0fYQHquyoxVH+8VkexYgBdNgknoaCPJXBROSFW06Vr7FoHm97yURiQNTNB3Z jooUK70JLpuzqAZp2U2EZiTb+RGebjJnlFcn4JgVDuUAkcobhOwA1GOVJKDPJlJc xSPXWc9PRm6LSPsLTs87CyACQQlI/W2549lCx6CdW1gwLVitKhINckTEK5hHaXPK RitQToL/L0lc93bSZYcm6eYZHjQ+7eg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:51 2025 by rpki-client