$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9964fd65-44da-3965-89ac-ee1fcaa26c2e.roa File: 9964fd65-44da-3965-89ac-ee1fcaa26c2e.roa (raw, json) Hash identifier: 8urKn1b0hQcuad7+9AbbqdHbBQbvqdFDy8uZ+9ZCjAo= Subject key identifier: 02:9A:B4:B8:2A:50:99:9D:81:C7:6C:CD:CA:AB:E0:C3:3C:53:C1:76 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20E9D0F03DD5ACF54FBFC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9964fd65-44da-3965-89ac-ee1fcaa26c2e.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397224 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e9:d0:f0:3d:d5:ac:f5:4f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=aae7fe16-85f1-4ca7-adff-62c788d85d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:ad:b2:89:1d:cc:e4:51:9a:ca:77:80:e3: a7:1c:d3:b2:cc:2b:40:7a:7b:80:30:51:a6:e2:ce: 1a:f9:68:26:f0:9a:41:04:11:46:96:45:ba:17:c4: 2b:80:23:b7:be:c2:a2:57:6c:5c:8b:1c:2e:1f:b4: 6b:e3:1b:4c:46:85:e8:58:b6:d6:e0:aa:e6:68:ef: 24:dd:03:ba:e3:85:08:d4:ba:86:b0:d4:3f:e6:f5: 9a:a3:80:3f:16:d3:0e:27:32:cc:b1:a8:22:5d:1a: 3f:94:bc:26:77:b1:d8:19:2c:8d:38:10:d0:9d:e7: 45:a2:64:63:e8:04:ba:a2:77:f1:4d:2f:4a:43:2d: 26:65:94:b5:ad:5f:92:6e:b6:f3:d0:5a:88:d1:01: b8:b5:83:03:99:28:c5:57:eb:f0:a5:d1:fc:cf:ca: f1:08:f7:79:b8:e1:31:de:e2:39:4a:85:5c:76:a0: 3e:a0:c8:99:dc:3b:5f:bd:58:11:00:bd:df:5f:40: 78:d4:3d:8d:8e:70:be:d3:04:ca:ab:c4:42:d7:53: 34:64:4d:2e:c1:ff:93:bb:bf:6a:5a:b4:e9:a1:b8: b5:74:c5:4f:08:3f:95:07:da:a0:c8:44:68:e3:34: 9c:d2:66:b8:e2:2e:c2:08:b9:7f:6f:4d:c8:66:f3: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:B4:B8:2A:50:99:9D:81:C7:6C:CD:CA:AB:E0:C3:3C:53:C1:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9964fd65-44da-3965-89ac-ee1fcaa26c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:73:22:8a:01:5a:ce:16:5d:cb:0a:6c:65:2f:af:98:6d:a6: 9c:44:dd:ef:3d:2e:ae:f0:a3:35:a7:b5:fa:3c:67:fe:1a:5f: 60:12:1f:2b:61:b9:e4:c6:03:31:58:4f:bd:f9:ae:f1:c1:4f: 1e:08:16:d6:3e:d4:89:1a:22:08:1e:7e:f8:30:bd:5e:5c:2d: bb:27:44:ac:4a:62:07:e7:67:2a:42:bc:4f:8f:29:84:a5:ef: c8:8b:65:5e:2b:94:62:6b:e4:ea:93:8d:a4:4b:a1:a7:f7:52: 05:0b:e5:46:cd:e1:a3:c6:05:74:45:0a:bb:0a:7b:d2:1d:0c: f1:85:10:58:4f:56:73:7e:57:19:7e:d4:58:59:76:6d:a7:26: e8:db:ac:58:37:97:a1:67:9e:ce:f4:21:64:71:04:77:05:7c: aa:70:5d:c3:e2:3d:7c:0b:e0:4d:b2:7d:ec:cd:8c:93:f2:53: ab:0b:cf:aa:fa:dc:1b:b5:70:f6:2c:3a:34:17:a3:25:ec:be: c1:6f:da:a8:49:20:cb:5c:36:fa:d0:53:04:ef:40:e5:21:2c: 00:d3:00:59:c2:cd:15:05:ea:f1:11:b8:e8:88:96:01:d3:ea: 77:91:2e:9e:7b:e1:ba:57:4e:43:b6:e6:f7:08:c1:8b:0b:30: d5:6e:3b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOnQ8D3VrPVPv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YWFlN2ZlMTYtODVmMS00Y2E3LWFkZmYtNjJjNzg4ZDg1ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXStsokdzORRmsp3gOOnHNOyzCtAenuAMFGm 4s4a+Wgm8JpBBBFGlkW6F8QrgCO3vsKiV2xcixwuH7Rr4xtMRoXoWLbW4KrmaO8k 3QO644UI1LqGsNQ/5vWao4A/FtMOJzLMsagiXRo/lLwmd7HYGSyNOBDQnedFomRj 6AS6onfxTS9KQy0mZZS1rV+Sbrbz0FqI0QG4tYMDmSjFV+vwpdH8z8rxCPd5uOEx 3uI5SoVcdqA+oMiZ3DtfvVgRAL3fX0B41D2NjnC+0wTKq8RC11M0ZE0uwf+Tu79q WrTpobi1dMVPCD+VB9qgyERo4zSc0ma44i7CCLl/b03IZvOGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKatLgqUJmdgcdszcqr4MM8U8F2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTk2NGZkNjUtNDRkYS0z OTY1LTg5YWMtZWUxZmNhYTI2YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARzIooBWs4WXcsKbGUvr5htppxE3e89Lq7wozWntfo8Z/4aX2ASHyth ueTGAzFYT735rvHBTx4IFtY+1IkaIggefvgwvV5cLbsnRKxKYgfnZypCvE+PKYSl 78iLZV4rlGJr5OqTjaRLoaf3UgUL5UbN4aPGBXRFCrsKe9IdDPGFEFhPVnN+Vxl+ 1FhZdm2nJujbrFg3l6Fnns70IWRxBHcFfKpwXcPiPXwL4E2yfezNjJPyU6sLz6r6 3Bu1cPYsOjQXoyXsvsFv2qhJIMtcNvrQUwTvQOUhLADTAFnCzRUF6vERuOiIlgHT 6neRLp574bpXTkO25vcIwYsLMNVuO80= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:05 2025 by rpki-client