$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa File: df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa (raw, json) Hash identifier: timWt349zFnDIgZeLnXoAVmiEpFiwA2Nnfblr8iObJQ= Subject key identifier: 5E:FD:C6:A9:5E:E7:59:5B:A2:7D:6C:F8:65:91:EB:00:10:5B:A5:AA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996564F42E2140B2B41E600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397225 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:56:4f:42:e2:14:0b:2b:41:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=676f1d40-932a-4ac8-8b84-ead2ff39f9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:29:e3:bd:7d:e0:df:f4:e0:a1:b9:66:28: 1f:3e:ee:65:27:9b:4d:74:73:32:f7:64:35:5a:9d: 5b:5e:e9:d1:1f:2e:d7:36:40:78:96:56:df:b5:52: 2b:3b:85:18:2f:b0:dc:23:7c:79:5a:b3:f7:84:5f: ed:7b:e1:44:e7:c1:c8:ba:2f:99:90:ce:d2:20:2a: a4:19:c6:14:c1:d9:ae:3f:96:42:4c:29:95:e3:14: 45:29:2b:b1:65:8f:75:bc:53:89:79:3c:a5:d8:90: e0:a0:63:d0:8e:90:7f:22:ac:9c:6d:60:65:53:26: 97:d5:bc:02:1f:af:1d:3a:a1:30:aa:8b:71:e8:20: d4:06:6a:4e:f3:8f:16:e7:a6:5e:4e:28:21:b7:ae: 1b:81:18:f7:a0:2c:77:44:7e:21:dd:33:cc:93:a8: 28:4b:0f:f8:58:3f:20:6c:70:17:3f:d1:d3:d3:ca: 95:b0:f7:fe:6d:b8:76:94:89:27:6a:a9:f9:79:83: 8d:08:af:5b:a4:01:4e:8a:98:97:13:ed:ca:8f:d7: 6e:8e:11:e0:12:f2:4b:08:c4:8c:30:70:11:9d:f8: 86:8e:ee:8d:ba:20:b9:59:0e:4e:9d:59:a2:96:70: 1b:4b:69:1b:5d:09:42:d7:e7:9d:df:17:2c:a5:16: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:C6:A9:5E:E7:59:5B:A2:7D:6C:F8:65:91:EB:00:10:5B:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:89:87:e1:a1:8a:1e:88:72:2e:e0:6b:90:d4:45:5d:2d:ed: 96:1d:da:61:6a:d8:9c:ac:04:97:8c:72:97:7b:36:45:b9:fd: 0b:b5:a7:47:1b:75:ad:90:ad:8c:19:95:78:d0:33:62:01:10: 2b:0b:a7:82:99:62:fd:4b:63:6c:51:cd:95:3b:08:f9:02:80: 14:9c:f9:11:25:56:f7:72:cf:7e:6d:ad:ae:15:79:25:86:91: 61:a6:fc:bf:32:3b:c4:5c:45:54:9c:b8:7e:54:31:ca:4a:61: 00:b4:f8:dc:d7:36:a4:a7:95:83:8c:49:41:4c:de:f1:03:ba: d4:3a:7d:51:5d:9f:c5:fd:44:e1:7e:a7:12:10:36:92:d4:e8: 3c:82:88:c6:54:50:76:47:d5:24:e3:e9:53:8b:f3:e5:4e:87: 24:f3:84:8c:5b:7a:43:e9:73:8e:61:ef:31:d6:ad:a6:32:ff: f9:57:48:a9:38:2c:31:db:44:d2:10:ad:23:8d:51:62:bb:98: 0a:01:ba:3f:ea:f7:46:04:73:9e:46:87:2b:94:be:b2:81:5e: a9:b1:b4:14:32:ef:be:8d:ea:59:79:4b:73:6d:97:ab:00:10: 13:0b:b6:0f:e4:97:27:b7:02:f1:79:8d:7f:f0:9e:29:00:c5: 90:c3:32:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllZPQuIUCytB5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Njc2ZjFkNDAtOTMyYS00YWM4LThiODQtZWFkMmZmMzlmOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkucp47194N/04KG5ZigfPu5lJ5tNdHMy92Q1 Wp1bXunRHy7XNkB4llbftVIrO4UYL7DcI3x5WrP3hF/te+FE58HIui+ZkM7SICqk GcYUwdmuP5ZCTCmV4xRFKSuxZY91vFOJeTyl2JDgoGPQjpB/IqycbWBlUyaX1bwC H68dOqEwqotx6CDUBmpO848W56ZeTight64bgRj3oCx3RH4h3TPMk6goSw/4WD8g bHAXP9HT08qVsPf+bbh2lIknaqn5eYONCK9bpAFOipiXE+3Kj9dujhHgEvJLCMSM MHARnfiGju6NuiC5WQ5OnVmilnAbS2kbXQlC1+ed3xcspRYy4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF79xqle51lbon1s+GWR6wAQW6WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY0ZWE1ZGQtNTNjYy0z MTUwLTgwZmUtYTc0NWUxZjU4MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCJh+Ghih6Ici7ga5DURV0t7ZYd2mFq2JysBJeMcpd7NkW5/Qu1p0cb da2QrYwZlXjQM2IBECsLp4KZYv1LY2xRzZU7CPkCgBSc+RElVvdyz35tra4VeSWG kWGm/L8yO8RcRVScuH5UMcpKYQC0+NzXNqSnlYOMSUFM3vEDutQ6fVFdn8X9ROF+ pxIQNpLU6DyCiMZUUHZH1STj6VOL8+VOhyTzhIxbekPpc45h7zHWraYy//lXSKk4 LDHbRNIQrSONUWK7mAoBuj/q90YEc55GhyuUvrKBXqmxtBQy776N6ll5S3Ntl6sA EBMLtg/klye3AvF5jX/wnikAxZDDMos= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:05 2025 by rpki-client