$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa File: a3580d3c-d441-312e-8057-71657a6478c1.roa (raw, json) Hash identifier: 6kBHeo+DzKTEbCF10OGE1tpvnq2dHkiivNk7u4qMgCo= Subject key identifier: 97:9D:BF:50:EC:33:DF:84:D8:F2:A0:16:76:B3:D1:FE:80:97:50:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD2104A66B4199D36EDC7528 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397230 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:21:04:a6:6b:41:99:d3:6e:dc:75:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=5d7c6435-cc3c-49a7-b00a-39330af83cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:4f:a6:03:13:3e:dc:e2:1a:d0:d7:9c:96: b4:17:1c:60:35:68:14:be:98:90:4b:eb:64:8e:18: f7:a4:f2:3e:77:0a:39:1b:6e:f6:a1:be:62:24:d2: b9:c9:d3:aa:55:86:17:c5:3d:65:47:54:fd:c2:66: 2c:72:97:ad:27:ae:bf:cf:4c:4a:3b:8c:34:44:00: 36:1d:eb:b2:8d:3a:6c:a6:c6:d5:7a:d8:31:3d:d0: 4a:83:42:01:56:64:76:01:35:5b:2b:90:ad:b1:b7: 07:92:81:ec:ae:20:9b:87:e9:0a:c7:2b:e2:82:50: 7c:47:1a:8f:83:1a:e5:86:c9:4b:c7:dc:66:31:d4: 32:bb:97:33:17:f4:42:aa:eb:17:e1:73:29:47:2f: c0:a5:0b:7e:57:ee:6c:3d:cc:52:17:ef:e4:d8:e8: 41:e3:29:de:26:16:a2:ad:5d:aa:64:e4:9e:4a:9a: 4e:bc:3a:a2:3f:a8:a3:93:dc:86:76:92:8a:9a:d5: aa:0f:e2:68:91:be:5a:15:95:f4:a9:f9:0f:ba:18: 2b:48:6e:e9:59:35:4e:ee:07:ba:d4:11:d8:b3:57: 29:ca:2e:70:96:3a:d4:24:8d:0a:b1:8e:1c:96:36: 51:ed:8e:23:6f:d0:7d:9f:35:36:b5:8a:b1:05:2b: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9D:BF:50:EC:33:DF:84:D8:F2:A0:16:76:B3:D1:FE:80:97:50:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ee:f3:a4:d8:59:bd:dd:0e:26:88:af:a7:6a:c5:43:d1:fe: 86:9e:55:20:3e:4a:6e:55:cf:3e:98:8b:26:1d:36:7f:bf:71: 77:01:35:bd:f8:9c:8e:82:93:67:7c:1c:4c:a7:31:63:ad:57: 3f:bb:c4:45:ec:eb:23:cb:5e:e8:19:d9:f8:8e:d9:8a:b9:b3: cc:0c:b9:91:1a:e7:ea:17:a4:79:fd:4b:b5:a8:bf:a4:36:9d: 2f:24:56:ee:38:4b:dd:b0:47:62:20:25:19:2e:0e:a3:c5:0c: 6c:d4:f7:ca:65:bb:5c:bf:22:92:6e:bc:0e:c1:19:97:98:6c: 8b:dc:fe:0d:35:65:bc:b8:3f:f9:fb:4a:60:9e:99:d8:64:dc: 3a:9b:d3:81:c5:f0:26:d5:8d:19:47:1d:1f:96:d9:a6:c7:68: ba:59:83:bf:37:46:de:65:aa:9e:68:70:7e:2e:35:77:cc:55: 03:a6:e3:cd:b7:34:33:db:de:b7:2b:22:54:f0:fd:52:1f:65: fe:0c:d1:07:0b:4f:d7:d4:34:a5:bb:44:da:50:d3:2d:8e:77: 72:a8:ea:23:aa:99:cf:66:6c:81:35:b4:01:0e:6d:38:29:0d: 2c:df:7c:74:19:6a:49:e4:ba:b5:c5:cd:97:a4:f0:83:27:29: d4:42:cc:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQSma0GZ027cdSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NWQ3YzY0MzUtY2MzYy00OWE3LWIwMGEtMzkzMzBhZjgzY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq29PpgMTPtziGtDXnJa0FxxgNWgUvpiQS+tk jhj3pPI+dwo5G272ob5iJNK5ydOqVYYXxT1lR1T9wmYscpetJ66/z0xKO4w0RAA2 HeuyjTpspsbVetgxPdBKg0IBVmR2ATVbK5CtsbcHkoHsriCbh+kKxyviglB8RxqP gxrlhslLx9xmMdQyu5czF/RCqusX4XMpRy/ApQt+V+5sPcxSF+/k2OhB4yneJhai rV2qZOSeSppOvDqiP6ijk9yGdpKKmtWqD+Jokb5aFZX0qfkPuhgrSG7pWTVO7ge6 1BHYs1cpyi5wljrUJI0KsY4cljZR7Y4jb9B9nzU2tYqxBSu34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJedv1DsM9+E2PKgFnaz0f6Al1BbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM1ODBkM2MtZDQ0MS0z MTJlLTgwNTctNzE2NTdhNjQ3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTu86TYWb3dDiaIr6dqxUPR/oaeVSA+Sm5Vzz6YiyYdNn+/cXcBNb34 nI6Ck2d8HEynMWOtVz+7xEXs6yPLXugZ2fiO2Yq5s8wMuZEa5+oXpHn9S7Wov6Q2 nS8kVu44S92wR2IgJRkuDqPFDGzU98plu1y/IpJuvA7BGZeYbIvc/g01Zby4P/n7 SmCemdhk3Dqb04HF8CbVjRlHHR+W2abHaLpZg783Rt5lqp5ocH4uNXfMVQOm4823 NDPb3rcrIlTw/VIfZf4M0QcLT9fUNKW7RNpQ0y2Od3Ko6iOqmc9mbIE1tAEObTgp DSzffHQZaknkurXFzZek8IMnKdRCzMA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:46 2025 by rpki-client