$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa File: a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa (raw, json) Hash identifier: nQ+d73+hfbTn9KgGxZ5XjgeONMIBH34GcWdTpAVOKl4= Subject key identifier: 67:9A:74:99:24:1D:56:FB:EE:90:97:E0:D4:24:1A:60:8F:F9:6E:BC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99639ECEA317B21757F6880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397218 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:39:ec:ea:31:7b:21:75:7f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ee6f32f2-9927-4353-8248-0dec08b3341c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:d0:8f:00:05:d6:0b:a1:d6:55:c7:d7:bd: 6f:ab:54:aa:66:e7:15:be:d6:2d:dd:93:0b:5b:65: c9:ba:7a:29:5c:10:a4:0e:41:b2:93:2e:8a:65:b8: a4:2a:e0:71:1b:ad:fc:a1:73:02:a1:c9:f0:9d:90: 98:34:75:2c:55:5e:8d:cb:26:d6:2c:f9:26:51:34: a3:b4:2d:fa:53:df:83:8e:8e:dc:0f:5a:17:b7:0a: 01:47:28:c9:d9:00:cf:d1:0c:ab:e6:6c:e2:10:dc: bf:44:3d:05:f9:90:01:2f:3b:d9:7f:98:3d:1a:42: 72:24:4a:05:d7:86:49:53:c9:c4:8f:59:19:e0:63: da:9b:5c:8c:c7:90:17:b1:53:38:84:42:cb:df:4b: 58:7e:e1:17:6d:20:af:01:ec:df:4d:b4:be:00:eb: 87:f1:e0:a8:ce:66:f5:53:88:5e:a0:03:17:17:e1: 9d:ef:c0:95:b6:ad:25:29:90:70:e3:fc:40:e9:0f: bb:97:ba:6f:14:c7:88:b4:38:17:ef:3b:25:f0:a4: d7:0b:c2:96:fa:62:d8:96:20:c0:f9:c1:ad:e3:18: e1:12:76:6c:e6:6e:67:6e:65:21:57:dc:51:66:3c: 38:62:ad:7c:59:e6:df:27:97:df:d2:63:9d:bf:43: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9A:74:99:24:1D:56:FB:EE:90:97:E0:D4:24:1A:60:8F:F9:6E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8f:06:f7:69:76:b2:b7:4c:78:36:aa:38:e0:33:4e:3c:73: c8:81:ba:9c:4b:6e:20:25:63:2e:60:95:6c:c0:06:e5:dd:89: 84:bf:da:37:45:c2:79:14:30:4d:e3:49:d3:1b:1b:07:69:a6: fe:73:d0:3d:06:b6:74:c6:fe:5f:b2:e0:21:3f:a2:d6:f5:26: 05:a0:99:02:5f:9e:a1:6b:43:8e:13:5a:85:bd:1e:af:f2:76: 02:c2:66:a2:88:81:cf:b0:f0:f7:ee:a8:73:f1:3a:0a:be:77: 6f:4a:82:d7:7a:7b:92:3d:70:e4:ef:a2:5e:f3:b8:66:59:de: d6:b6:66:e3:7f:a5:5a:d4:83:7a:4a:f8:66:06:cc:b0:f9:d5: b2:29:a1:a2:a0:7b:f1:c5:62:38:e1:5d:98:bd:28:1d:c0:b8: 7d:92:4b:cf:eb:6e:eb:e8:be:fa:f2:e7:c1:c4:cf:c5:62:21: 63:f5:88:7f:55:6d:c7:5a:09:df:9d:e1:54:4e:41:6e:5e:a3: 3b:8b:1d:ef:ea:07:77:6a:64:05:7e:56:47:54:19:2d:02:2f: 17:f7:8f:74:41:eb:2a:58:8d:02:5b:df:17:91:44:ed:14:65: aa:91:86:ee:4f:20:f6:87:cf:e7:9a:04:79:f0:08:3e:b9:fb: ce:90:84:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljns6jF7IXV/aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWU2ZjMyZjItOTkyNy00MzUzLTgyNDgtMGRlYzA4YjMzNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR/QjwAF1guh1lXH171vq1SqZucVvtYt3ZML W2XJunopXBCkDkGyky6KZbikKuBxG638oXMCocnwnZCYNHUsVV6NyybWLPkmUTSj tC36U9+Djo7cD1oXtwoBRyjJ2QDP0Qyr5mziENy/RD0F+ZABLzvZf5g9GkJyJEoF 14ZJU8nEj1kZ4GPam1yMx5AXsVM4hELL30tYfuEXbSCvAezfTbS+AOuH8eCozmb1 U4heoAMXF+Gd78CVtq0lKZBw4/xA6Q+7l7pvFMeItDgX7zsl8KTXC8KW+mLYliDA +cGt4xjhEnZs5m5nbmUhV9xRZjw4Yq18WebfJ5ff0mOdv0OfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeadJkkHVb77pCX4NQkGmCP+W68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTllYzc0YmQtMjE4Yi0z MDk3LWIwMGMtY2VjMWIyZTdkNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGPBvdpdrK3THg2qjjgM048c8iBupxLbiAlYy5glWzABuXdiYS/2jdF wnkUME3jSdMbGwdppv5z0D0GtnTG/l+y4CE/otb1JgWgmQJfnqFrQ44TWoW9Hq/y dgLCZqKIgc+w8PfuqHPxOgq+d29Kgtd6e5I9cOTvol7zuGZZ3ta2ZuN/pVrUg3pK +GYGzLD51bIpoaKge/HFYjjhXZi9KB3AuH2SS8/rbuvovvry58HEz8ViIWP1iH9V bcdaCd+d4VROQW5eozuLHe/qB3dqZAV+VkdUGS0CLxf3j3RB6ypYjQJb3xeRRO0U ZaqRhu5PIPaHz+eaBHnwCD65+86QhN4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:42 2025 by rpki-client