$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa File: fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa (raw, json) Hash identifier: I/rR3Gzq0a1yg+bfLOaxVO54fEWJYXHQKJ9nspRkeAI= Subject key identifier: 8B:5B:F2:34:82:52:27:93:D0:2B:B6:F7:34:C9:F0:27:11:2B:B1:C4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E648ECF4D61C8D703300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397221 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e6:48:ec:f4:d6:1c:8d:70:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1c8223ac-463a-49c2-b1de-3cee9f930450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:9b:dc:f7:a8:4b:39:57:ec:53:6a:f4:ce: 5c:21:92:08:9a:e2:d4:f7:b8:30:8e:bc:32:9d:cd: 81:79:1f:5f:80:63:6c:94:5a:19:34:16:ee:54:29: ca:e3:7b:a4:04:d7:a4:a1:be:41:75:11:b7:c5:de: 68:d7:35:de:cd:9e:ed:fa:e3:90:d3:e2:f1:20:69: 91:8c:76:f4:c3:04:bc:02:e3:00:3d:dc:33:c6:3d: b8:99:34:e0:88:ac:ea:19:f4:fc:2d:70:44:3a:0c: df:2d:8b:c5:a5:5d:b7:ec:f9:0b:38:78:7b:f7:6c: 1e:60:15:1c:7e:14:a1:f9:d9:ed:b6:32:62:06:5a: f9:af:fd:7e:c1:15:0b:ee:35:c5:6b:b5:34:3a:d5: 37:b5:e2:28:b2:fd:ad:4d:67:1e:66:9e:8d:10:d7: 08:90:f2:a4:6e:73:b0:ba:b0:01:47:3b:cc:86:c7: 10:36:e4:aa:f1:e4:5a:03:f7:78:1f:67:22:e5:3e: 70:e2:9a:f5:7c:81:69:b3:1e:37:76:90:c1:dc:8d: 43:79:05:cc:b1:96:a4:3a:1f:30:54:b7:a9:1b:6a: 58:cd:c6:0f:5e:e3:fe:8d:9b:6b:d1:ca:a1:93:7c: 67:af:ec:0d:7d:22:fb:83:0e:bf:ad:37:96:b9:97: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:F2:34:82:52:27:93:D0:2B:B6:F7:34:C9:F0:27:11:2B:B1:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:52:c3:83:00:ae:e4:5b:72:9e:c6:39:8f:d1:82:15:72:06: 12:e6:e5:eb:99:05:a2:32:62:80:db:1c:21:0f:a9:72:48:61: f5:7c:e8:3b:eb:bf:e4:84:c9:a3:c9:d1:95:18:a7:a6:f9:ff: 2f:ce:bb:b3:64:de:19:50:71:82:c2:d9:13:a6:db:e2:10:b0: cb:e7:cf:98:24:44:93:41:ce:4b:dc:f9:49:25:45:e0:8c:35: 2f:b9:96:96:00:ef:03:91:3c:92:19:21:2e:e0:08:35:f6:9c: 82:aa:ac:ed:e5:09:76:15:88:6d:b4:29:07:a5:39:6e:9b:92: 67:65:9a:7b:1e:f5:3c:eb:da:38:94:27:18:96:db:2c:5f:70: 55:f9:fb:1d:44:e5:c6:c3:41:81:9c:00:df:6b:3e:0e:8a:c0: 33:a0:2b:4b:92:d8:bc:d4:72:99:58:7f:45:66:d7:03:46:08: 2b:68:f7:a4:1b:ec:11:66:42:a0:89:a5:9c:3b:05:83:8c:a6: 60:da:ec:9f:4d:9e:46:73:3f:d1:01:3b:d3:80:b0:db:92:5e: 58:49:1c:41:13:13:38:9d:6a:5d:b1:66:39:ad:c0:e7:dd:b0: 38:46:92:f9:e4:e1:f7:dd:8d:64:dc:24:c7:fe:d5:20:4c:28: 29:26:bc:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuZI7PTWHI1wMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWM4MjIzYWMtNDYzYS00OWMyLWIxZGUtM2NlZTlmOTMwNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJqb3PeoSzlX7FNq9M5cIZIImuLU97gwjrwy nc2BeR9fgGNslFoZNBbuVCnK43ukBNekob5BdRG3xd5o1zXezZ7t+uOQ0+LxIGmR jHb0wwS8AuMAPdwzxj24mTTgiKzqGfT8LXBEOgzfLYvFpV237PkLOHh792weYBUc fhSh+dnttjJiBlr5r/1+wRUL7jXFa7U0OtU3teIosv2tTWceZp6NENcIkPKkbnOw urABRzvMhscQNuSq8eRaA/d4H2ci5T5w4pr1fIFpsx43dpDB3I1DeQXMsZakOh8w VLepG2pYzcYPXuP+jZtr0cqhk3xnr+wNfSL7gw6/rTeWuZfUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItb8jSCUieT0Cu29zTJ8CcRK7HEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmE2NWEyMjMtNWNlZi0z NTNkLWFjM2MtNWEwNWExYzRmM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFSw4MAruRbcp7GOY/RghVyBhLm5euZBaIyYoDbHCEPqXJIYfV86Dvr v+SEyaPJ0ZUYp6b5/y/Ou7Nk3hlQcYLC2ROm2+IQsMvnz5gkRJNBzkvc+UklReCM NS+5lpYA7wORPJIZIS7gCDX2nIKqrO3lCXYViG20KQelOW6bkmdlmnse9Tzr2jiU JxiW2yxfcFX5+x1E5cbDQYGcAN9rPg6KwDOgK0uS2LzUcplYf0Vm1wNGCCto96Qb 7BFmQqCJpZw7BYOMpmDa7J9NnkZzP9EBO9OAsNuSXlhJHEETEzidal2xZjmtwOfd sDhGkvnk4ffdjWTcJMf+1SBMKCkmvPA= -----END CERTIFICATE-----Generated at Fri Mar 14 07:55:16 2025 by rpki-client