$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa File: f580c689-2f0d-3e46-b319-b718490a5e1e.roa (raw, json) Hash identifier: x7b4UTtHYpBvIEUpopanjYbCuKX+1ZT2uCgOI/9RFFU= Subject key identifier: 1E:2B:88:DE:63:2D:38:A4:CC:9E:D5:8F:16:C8:06:AF:9E:DA:39:44 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99639B7473F0D63DB277980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397215 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:39:b7:47:3f:0d:63:db:27:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=cde61043-a501-4b5e-b461-54f614a005f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:08:0c:c0:d9:a2:56:8d:36:5f:90:3f:28: d0:8c:85:53:46:5f:e0:f2:41:4a:e4:94:0f:8a:af: 67:8b:ec:ab:58:c7:37:3f:51:aa:19:30:40:42:4e: 0c:0a:06:cb:e6:ba:91:2e:f8:18:f1:d5:c3:ff:3d: 0c:25:49:9d:44:65:4f:93:18:8f:dc:81:22:10:d6: a0:92:79:36:f4:be:7a:f7:d3:48:ae:62:d2:be:ee: 0b:5d:69:e9:77:39:d4:70:4b:08:72:5b:be:e6:cd: 3b:b3:33:b3:fc:1e:a1:9f:17:3f:fe:03:c1:a1:65: b2:1e:78:9d:c9:5a:e9:18:ea:ef:b5:18:ae:da:77: a3:bf:39:a9:bf:ed:19:e7:bb:a3:88:3a:ac:6f:eb: cb:5e:96:8a:d6:0a:60:e8:4b:b3:0c:d2:06:73:c2: 44:0c:09:37:38:47:d1:99:fd:44:c2:de:1b:1d:64: c3:ff:9c:88:3f:93:44:f2:a2:d3:41:ea:33:45:5a: 56:43:4d:85:18:a0:12:5c:1a:80:28:f3:cf:1d:7b: 23:0d:96:c7:8a:80:be:e1:74:c9:69:a5:9f:2c:0e: cd:5e:8c:a4:82:b5:3d:d7:59:6e:39:84:8b:be:50: b9:fa:06:e2:bc:d2:df:ea:71:e9:91:00:93:82:9c: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2B:88:DE:63:2D:38:A4:CC:9E:D5:8F:16:C8:06:AF:9E:DA:39:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f580c689-2f0d-3e46-b319-b718490a5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b9:11:aa:09:90:d5:f4:84:30:da:44:f3:f6:b5:11:f9:51: 53:a3:76:04:69:e2:35:8d:1d:7a:bb:52:ce:21:de:c6:90:09: b5:b1:80:30:2b:3e:35:51:ac:33:22:07:65:e8:fd:a0:46:54: 0d:f1:e8:2e:96:e3:21:20:b9:55:6c:a9:a9:cf:f7:ec:d9:6d: eb:39:0e:fb:c8:2b:78:e2:1c:03:61:40:29:ae:b0:54:66:03: 47:d5:a1:8d:89:cf:cd:34:9e:3c:92:77:7d:ea:5f:33:1e:26: 63:7f:82:51:69:08:ab:84:32:e2:f1:53:34:b6:27:7b:47:12: 72:61:b2:56:3b:5c:71:05:5c:69:f0:9d:7c:64:39:ab:aa:3c: 3b:0f:61:b9:35:e7:37:23:34:d8:01:14:1a:f1:93:d3:c2:57: e6:0c:c6:2d:a2:1e:29:e3:f5:37:28:ed:8d:66:47:40:96:6c: a2:5d:18:66:48:41:67:08:16:90:a7:fa:99:e2:c7:a8:00:dd: 0c:05:ff:a8:ec:5f:90:87:2d:bd:30:39:9d:e6:bb:56:43:fb: 92:8b:c6:af:a2:16:db:df:50:dd:9f:b8:45:48:90:f3:e8:50: 7c:cc:1b:b4:5a:04:4f:79:03:33:09:ab:f5:29:b4:5c:33:72: ff:f9:23:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljm3Rz8NY9sneYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2RlNjEwNDMtYTUwMS00YjVlLWI0NjEtNTRmNjE0YTAwNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AQIDMDZolaNNl+QPyjQjIVTRl/g8kFK5JQP iq9ni+yrWMc3P1GqGTBAQk4MCgbL5rqRLvgY8dXD/z0MJUmdRGVPkxiP3IEiENag knk29L5699NIrmLSvu4LXWnpdznUcEsIclu+5s07szOz/B6hnxc//gPBoWWyHnid yVrpGOrvtRiu2nejvzmpv+0Z57ujiDqsb+vLXpaK1gpg6EuzDNIGc8JEDAk3OEfR mf1Ewt4bHWTD/5yIP5NE8qLTQeozRVpWQ02FGKASXBqAKPPPHXsjDZbHioC+4XTJ aaWfLA7NXoykgrU911luOYSLvlC5+gbivNLf6nHpkQCTgpzDxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4riN5jLTikzJ7VjxbIBq+e2jlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjU4MGM2ODktMmYwZC0z ZTQ2LWIzMTktYjcxODQ5MGE1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB65EaoJkNX0hDDaRPP2tRH5UVOjdgRp4jWNHXq7Us4h3saQCbWxgDAr PjVRrDMiB2Xo/aBGVA3x6C6W4yEguVVsqanP9+zZbes5DvvIK3jiHANhQCmusFRm A0fVoY2Jz800njySd33qXzMeJmN/glFpCKuEMuLxUzS2J3tHEnJhslY7XHEFXGnw nXxkOauqPDsPYbk15zcjNNgBFBrxk9PCV+YMxi2iHinj9Tco7Y1mR0CWbKJdGGZI QWcIFpCn+pnix6gA3QwF/6jsX5CHLb0wOZ3mu1ZD+5KLxq+iFtvfUN2fuEVIkPPo UHzMG7RaBE95AzMJq/UptFwzcv/5I6g= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:22 2025 by rpki-client