$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b98a52f9-80c6-3404-99be-f9d616c8ae99.roa File: b98a52f9-80c6-3404-99be-f9d616c8ae99.roa (raw, json) Hash identifier: ue3+CtURXaixBBY0B4Lr7y+vRMgl9Jrd5S+l9zXXo5Y= Subject key identifier: EF:B4:FB:C5:E1:62:99:4B:C9:01:92:11:FF:57:9C:77:2E:71:0A:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848907609DCEDA17680480136B0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b98a52f9-80c6-3404-99be-f9d616c8ae99.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397231 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:09:dc:ed:a1:76:80:48:01:36:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=6d22c901-0aa5-4c2e-87f7-b7016bea4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:28:45:57:07:73:20:2d:7d:4c:99:9e:76: 81:13:57:54:34:c1:09:0a:6d:4f:b0:5c:5d:80:99: 58:b6:6b:4a:ae:13:66:4f:eb:7a:b0:95:15:eb:df: 39:64:3b:01:c9:38:2b:71:c6:80:90:de:81:45:1a: 62:1c:80:8a:b1:56:4f:69:5a:af:02:34:88:19:10: 07:99:56:24:cd:35:15:62:75:6f:ba:b3:4f:01:ec: f2:48:5a:ec:46:13:0a:78:67:5c:4d:b0:bb:81:91: c2:33:91:10:90:f8:6e:ca:3b:fa:ab:87:bd:29:67: 7b:6b:a1:cd:6f:b1:82:70:fd:84:f4:26:ee:9b:5f: 77:00:0b:47:c0:93:e6:fb:8a:ed:cd:91:06:77:70: 7d:dd:d1:c8:f4:19:77:7a:1a:eb:9f:fa:7b:c2:76: 5c:38:3c:29:f7:e0:01:97:a3:ce:5f:2a:66:b8:61: 3d:bb:ce:aa:fe:a8:ef:c6:4d:f1:f4:2a:13:41:ec: 76:81:ad:34:f0:ee:10:0c:3f:90:38:1f:5f:4b:c0: c4:6e:15:e4:e6:e2:29:8e:c3:85:f2:7e:a7:24:5a: 71:51:14:2b:21:25:c3:06:17:4f:df:17:43:4c:7c: 8a:e2:08:cb:6c:d2:88:45:66:9e:84:f5:1b:d4:78: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:FB:C5:E1:62:99:4B:C9:01:92:11:FF:57:9C:77:2E:71:0A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b98a52f9-80c6-3404-99be-f9d616c8ae99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f9:75:5e:35:35:22:b1:d8:6f:70:bb:e1:df:50:b2:4c:6c: 20:1e:54:f9:e9:82:3e:80:bd:6b:9c:16:82:de:96:0e:46:fc: fb:7a:42:cc:80:a1:9c:51:0b:5e:f2:43:8b:f0:1d:e1:c1:ff: 71:7f:1b:09:4b:b4:27:93:2b:21:da:16:28:20:af:55:84:8a: 9e:52:35:16:66:be:65:06:6a:82:2e:d6:43:90:73:41:e6:19: 76:d3:e1:76:a5:7b:95:3c:53:98:d2:a7:59:8a:7e:c1:70:1c: b6:00:7e:c7:7c:60:52:08:cc:81:33:c1:cc:e1:2a:fb:07:b5: e0:6c:a4:be:4c:70:84:4b:83:09:10:c0:e7:46:de:33:3d:1a: c0:f0:06:80:d9:bf:0b:b6:f2:55:d8:37:c3:bc:0e:ab:e1:d2: fc:75:a2:37:6a:6c:2d:d2:23:df:fa:be:00:53:71:05:2b:e0: 90:65:7e:a9:2e:ad:96:6a:24:e9:08:33:c1:c6:c5:e5:f4:95: 33:a9:d6:6b:f8:21:f2:73:10:d0:90:70:9a:07:d1:70:98:6d: 93:b8:75:28:c7:a0:c8:07:07:b3:d1:9c:15:d1:72:d0:1e:5d: 05:37:58:4e:f0:40:27:d4:7d:52:3f:83:9e:9e:2d:90:60:7b: 32:8a:67:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgnc7aF2gEgBNrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NmQyMmM5MDEtMGFhNS00YzJlLTg3ZjctYjcwMTZiZWE0YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDsoRVcHcyAtfUyZnnaBE1dUNMEJCm1PsFxd gJlYtmtKrhNmT+t6sJUV6985ZDsByTgrccaAkN6BRRpiHICKsVZPaVqvAjSIGRAH mVYkzTUVYnVvurNPAezySFrsRhMKeGdcTbC7gZHCM5EQkPhuyjv6q4e9KWd7a6HN b7GCcP2E9Cbum193AAtHwJPm+4rtzZEGd3B93dHI9Bl3ehrrn/p7wnZcODwp9+AB l6POXypmuGE9u86q/qjvxk3x9CoTQex2ga008O4QDD+QOB9fS8DEbhXk5uIpjsOF 8n6nJFpxURQrISXDBhdP3xdDTHyK4gjLbNKIRWaehPUb1HijGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+0+8XhYplLyQGSEf9XnHcucQpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjk4YTUyZjktODBjNi0z NDA0LTk5YmUtZjlkNjE2YzhhZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr5dV41NSKx2G9wu+HfULJMbCAeVPnpgj6AvWucFoLelg5G/Pt6QsyA oZxRC17yQ4vwHeHB/3F/GwlLtCeTKyHaFiggr1WEip5SNRZmvmUGaoIu1kOQc0Hm GXbT4Xale5U8U5jSp1mKfsFwHLYAfsd8YFIIzIEzwczhKvsHteBspL5McIRLgwkQ wOdG3jM9GsDwBoDZvwu28lXYN8O8Dqvh0vx1ojdqbC3SI9/6vgBTcQUr4JBlfqku rZZqJOkIM8HGxeX0lTOp1mv4IfJzENCQcJoH0XCYbZO4dSjHoMgHB7PRnBXRctAe XQU3WE7wQCfUfVI/g56eLZBgezKKZ0o= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:17 2025 by rpki-client