$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/231efa78-0d7a-3eb1-ace2-30d20da5081c.roa File: 231efa78-0d7a-3eb1-ace2-30d20da5081c.roa (raw, json) Hash identifier: YXPIuS/8CwCHoSgiAhkboRojQq80jsDNshGSD3DVPWg= Subject key identifier: 79:82:0A:C4:B9:3D:AF:04:0B:56:36:D5:BA:28:E7:3C:49:3A:80:7F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246E92210758B025BFAAA00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/231efa78-0d7a-3eb1-ace2-30d20da5081c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397238 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:e9:22:10:75:8b:02:5b:fa:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d05b2612-f9d2-42ce-a28e-b86eb713dc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:db:b1:77:9c:c2:1d:ce:44:ee:31:a4:8c: e8:f1:f9:5b:89:07:b8:dd:80:84:3d:03:51:0b:d0: 59:d2:78:8b:7a:f9:cc:8e:23:47:a7:d9:15:9b:a4: 0d:98:19:bf:65:b4:84:ed:b4:c0:e2:bf:68:40:56: 4c:b0:67:7b:f3:af:cc:db:31:23:d2:5a:ac:1a:73: d6:a6:b9:fc:4b:77:f9:ee:f3:14:22:df:aa:10:43: 44:bb:f0:10:75:30:78:8f:ff:f3:f8:2e:36:b2:da: 3e:8a:37:0b:c5:bf:30:d2:6e:ce:91:29:2e:7b:68: 9f:11:f0:de:67:b3:d1:5a:0b:cf:04:d6:8e:5d:1a: 42:b2:07:a1:c3:18:3d:ea:ae:20:e7:20:11:02:1a: 79:d1:05:db:23:65:69:37:b5:c6:c9:5b:6b:4a:4a: ed:f5:c6:2f:48:e2:dd:ff:c3:e3:53:4e:7f:6f:06: 5f:52:75:20:21:7f:39:07:93:69:32:e4:c4:50:27: 33:a6:e9:ac:48:16:93:a1:a1:fa:d8:19:01:1f:90: ae:98:97:9e:d4:13:06:f4:89:73:8e:c6:9f:5a:58: ba:69:de:1d:9a:7c:3e:97:82:ca:39:db:e1:bc:10: c7:1c:d4:db:2a:09:0c:8c:ac:37:b2:80:04:65:20: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:82:0A:C4:B9:3D:AF:04:0B:56:36:D5:BA:28:E7:3C:49:3A:80:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/231efa78-0d7a-3eb1-ace2-30d20da5081c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8c:33:b2:71:d5:d4:ff:b1:1d:09:ec:e8:bb:e4:51:e3:67: 06:2b:23:76:39:e0:78:ad:d6:49:2d:ea:b0:43:d1:54:0b:51: 18:4e:18:90:61:d8:d8:dd:1a:19:4d:fd:5d:ff:4a:50:a6:b5: 0a:69:77:d7:8d:20:9b:7b:cb:b4:ee:73:8f:80:ee:ab:bc:3c: 3b:3a:df:9d:53:99:8a:a5:8f:65:80:53:59:39:f8:0a:66:1c: 31:b0:42:dc:e0:74:f5:b1:0f:77:57:29:a4:11:c9:c8:3f:87: 06:3d:b1:de:1b:23:f6:17:cd:93:5d:32:c2:08:15:14:34:10: 4e:e3:92:e7:91:dc:01:d3:67:04:eb:02:a4:73:85:0c:1a:f9: d4:1f:73:0c:6b:df:64:cf:94:61:1b:02:8a:d2:39:4f:17:03: 7f:0f:a5:24:31:f6:13:d6:be:ca:99:f2:4b:87:4e:05:46:85: 62:5f:93:5e:9b:1b:3a:77:92:78:99:ad:d3:25:54:09:2b:d0: ab:9a:ff:5a:7b:a6:87:be:01:d9:41:55:6a:73:bf:03:ee:3a: 5b:8c:db:38:5d:78:5d:ef:4e:fa:53:f4:ae:94:b9:f4:1d:25: d5:33:d9:d7:e4:72:53:6b:57:4b:a6:1f:16:f6:fa:64:18:7a: ce:6a:f4:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRukiEHWLAlv6qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDA1YjI2MTItZjlkMi00MmNlLWEyOGUtYjg2ZWI3MTNkYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmjbsXecwh3ORO4xpIzo8flbiQe43YCEPQNR C9BZ0niLevnMjiNHp9kVm6QNmBm/ZbSE7bTA4r9oQFZMsGd786/M2zEj0lqsGnPW prn8S3f57vMUIt+qEENEu/AQdTB4j//z+C42sto+ijcLxb8w0m7OkSkue2ifEfDe Z7PRWgvPBNaOXRpCsgehwxg96q4g5yARAhp50QXbI2VpN7XGyVtrSkrt9cYvSOLd /8PjU05/bwZfUnUgIX85B5NpMuTEUCczpumsSBaToaH62BkBH5CumJee1BMG9Ilz jsafWli6ad4dmnw+l4LKOdvhvBDHHNTbKgkMjKw3soAEZSBv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmCCsS5Pa8EC1Y21boo5zxJOoB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjMxZWZhNzgtMGQ3YS0z ZWIxLWFjZTItMzBkMjBkYTUwODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKMM7Jx1dT/sR0J7Oi75FHjZwYrI3Y54Hit1kkt6rBD0VQLURhOGJBh 2NjdGhlN/V3/SlCmtQppd9eNIJt7y7Tuc4+A7qu8PDs6351TmYqlj2WAU1k5+Apm HDGwQtzgdPWxD3dXKaQRycg/hwY9sd4bI/YXzZNdMsIIFRQ0EE7jkueR3AHTZwTr AqRzhQwa+dQfcwxr32TPlGEbAorSOU8XA38PpSQx9hPWvsqZ8kuHTgVGhWJfk16b Gzp3kniZrdMlVAkr0Kua/1p7poe+AdlBVWpzvwPuOluM2zhdeF3vTvpT9K6UufQd JdUz2dfkclNrV0umHxb2+mQYes5q9PA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:45 2025 by rpki-client