$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa File: e251b681-fca9-30e4-8790-5ca9cd66992e.roa (raw, json) Hash identifier: 1DHdxFH8foSAwfP6NWNDPViRzJDlgqanoTdUQc6s/L4= Subject key identifier: 62:9E:DB:61:DE:0F:2D:79:76:84:64:40:EE:89:03:5B:11:DE:83:39 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964D1806CCCEA0B55EF080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397231 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4d:18:06:cc:ce:a0:b5:5e:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=26f6fc27-d163-4321-a587-96fdbc0c36d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:6e:03:5f:0b:cb:39:a6:1d:ac:91:a6:2a: 4a:d1:3f:0b:98:db:d5:43:da:96:2b:a4:9d:19:df: 37:7d:e0:0d:5a:3e:8b:a9:12:fa:40:bc:db:b3:f5: 2d:fd:ed:51:ac:b0:46:ec:62:3c:ad:ac:b6:60:82: 37:f1:3b:5b:b7:3b:68:59:0f:a3:59:01:af:40:f9: 9c:0e:f8:85:94:d3:7c:50:a5:69:f0:a6:f3:1a:99: 74:99:47:d9:5d:55:07:8a:87:01:cd:2c:d0:f6:99: d5:fd:8e:61:89:11:e1:ca:54:ea:45:c7:0d:99:5a: 69:65:0d:5d:b9:68:2d:13:88:1b:82:ec:c4:9d:7d: e1:dd:ed:3e:14:02:eb:72:9e:68:01:a0:e4:b5:3f: 2a:b4:36:dd:17:ce:f5:b7:0e:c5:c8:59:c6:c9:63: ab:72:ab:fa:60:e6:ee:7e:83:58:d1:ac:dc:d6:a0: e3:24:bf:95:5c:a5:4a:08:e2:f7:a0:1f:0c:82:90: 8b:23:49:8e:4f:17:a6:af:a9:df:ca:aa:2b:3e:ef: 9f:68:85:63:27:3e:71:b5:da:a9:da:ec:29:f2:53: be:86:c5:ae:5d:43:3a:8f:77:94:0c:df:24:6e:6c: 2a:ef:2c:a7:37:0a:a5:58:77:6b:e9:ec:48:3f:b9: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9E:DB:61:DE:0F:2D:79:76:84:64:40:EE:89:03:5B:11:DE:83:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:56:90:a1:b1:a0:09:fc:71:0d:92:81:12:1d:a3:b1:b8:49: 43:2d:06:81:e3:c2:7b:15:a1:85:24:99:48:2c:a4:d4:57:9a: f9:20:c9:e3:4a:44:d3:7e:99:18:89:98:70:01:e7:b8:da:e9: ce:14:a5:20:6f:e1:49:c3:ed:54:ff:f2:c6:56:04:cd:65:22: 85:32:e4:3d:fe:49:73:7a:dd:09:42:25:a6:c2:b8:dd:4e:60: 6f:6e:a8:1b:71:26:89:7e:c5:ac:93:18:52:a8:5a:b6:b4:a2: b3:75:5f:03:61:c1:f9:81:ab:39:ee:57:9a:ce:4f:ac:4d:90: 2c:42:0e:60:0c:6b:d5:7e:9b:c1:3a:66:26:23:46:a5:11:55: 48:6e:a8:63:7b:9f:97:13:bf:ab:9c:6f:07:b2:c4:1a:10:5f: ee:ad:38:24:bc:7f:c4:68:92:a2:ef:8f:92:9c:69:7c:ef:3b: e7:b7:6e:54:6b:1c:77:60:94:9d:30:a3:67:28:d1:f3:f0:39: 3b:c8:a1:96:0c:32:6e:80:54:62:22:b1:ad:05:01:06:50:52: 8c:12:4c:57:e9:61:13:8f:c8:0e:b0:1f:59:fc:bb:4b:2a:a1: 62:7d:1a:3e:25:7d:16:e9:d0:c2:4b:e2:8d:0f:1f:32:4d:af: 74:63:87:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk0YBszOoLVe8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjZmNmZjMjctZDE2My00MzIxLWE1ODctOTZmZGJjMGMzNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVRuA18LyzmmHayRpipK0T8LmNvVQ9qWK6Sd Gd83feANWj6LqRL6QLzbs/Ut/e1RrLBG7GI8ray2YII38TtbtztoWQ+jWQGvQPmc DviFlNN8UKVp8KbzGpl0mUfZXVUHiocBzSzQ9pnV/Y5hiRHhylTqRccNmVppZQ1d uWgtE4gbguzEnX3h3e0+FALrcp5oAaDktT8qtDbdF871tw7FyFnGyWOrcqv6YObu foNY0azc1qDjJL+VXKVKCOL3oB8MgpCLI0mOTxemr6nfyqorPu+faIVjJz5xtdqp 2uwp8lO+hsWuXUM6j3eUDN8kbmwq7yynNwqlWHdr6exIP7kA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKe22HeDy15doRkQO6JA1sR3oM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTI1MWI2ODEtZmNhOS0z MGU0LTg3OTAtNWNhOWNkNjY5OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApWkKGxoAn8cQ2SgRIdo7G4SUMtBoHjwnsVoYUkmUgspNRXmvkgyeNK RNN+mRiJmHAB57ja6c4UpSBv4UnD7VT/8sZWBM1lIoUy5D3+SXN63QlCJabCuN1O YG9uqBtxJol+xayTGFKoWra0orN1XwNhwfmBqznuV5rOT6xNkCxCDmAMa9V+m8E6 ZiYjRqURVUhuqGN7n5cTv6ucbweyxBoQX+6tOCS8f8RokqLvj5KcaXzvO+e3blRr HHdglJ0wo2co0fPwOTvIoZYMMm6AVGIisa0FAQZQUowSTFfpYROPyA6wH1n8u0sq oWJ9Gj4lfRbp0MJL4o0PHzJNr3Rjh2E= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:57 2025 by rpki-client