$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa File: 296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa (raw, json) Hash identifier: MKJru3NiUMx30/e2Ry3FRZ8EEcq2OMsoXqVrJEn8rHc= Subject key identifier: BE:89:C1:52:48:9D:57:9A:88:7E:86:38:F1:B0:F4:00:B2:CA:11:6D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246ED37CC111E3268549800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397213 IP address blocks: 156.154.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ed:37:cc:11:1e:32:68:54:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2d2e46ed-8990-436b-aaa9-3b656f2d48fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:ec:7c:45:2f:fb:86:99:38:f9:f6:c6:3d: f7:9b:e7:f5:af:7f:dd:1f:a8:d3:3e:62:79:dc:31: 10:29:2f:f9:9c:e6:fc:59:93:1d:91:be:5c:3a:b4: 06:23:10:0c:74:92:8b:73:f1:1d:7c:88:aa:a8:62: fb:f8:02:d3:a7:23:33:19:1e:e5:a9:de:43:f4:fb: dd:56:df:ba:1e:53:27:ac:4a:76:fe:99:9c:a9:3b: 0c:8e:70:22:63:ba:a0:9b:15:4c:07:00:9a:20:e9: 73:79:47:07:33:01:4a:0f:fc:cc:6d:45:88:27:92: 12:dd:fb:db:da:6a:21:58:05:63:0c:15:d7:e6:ab: 96:d5:28:0b:e5:d6:1a:a5:d8:09:7a:51:90:55:99: b2:04:cd:de:71:be:d8:d6:eb:bb:cb:4f:d1:20:b1: 76:be:5b:3e:a1:03:15:d9:bc:ac:93:48:4d:1f:d2: dc:e2:af:25:f1:5e:8f:19:27:d5:62:8c:09:cc:8b: f4:a4:f1:6f:77:a6:3f:23:f1:d2:30:51:40:d9:44: 23:65:51:d4:5c:14:33:21:d1:76:b2:03:3c:96:5a: 87:ea:73:a7:cc:ac:9a:28:2c:d0:0b:4b:ed:32:d3: 96:5a:8e:cc:55:ea:c1:59:dc:0c:50:73:fe:de:02: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:89:C1:52:48:9D:57:9A:88:7E:86:38:F1:B0:F4:00:B2:CA:11:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:45:56:0f:5d:fb:97:36:0a:75:25:fe:60:55:68:ba:3b:47: 2a:a3:dd:9a:d4:8e:fe:af:3c:ad:a7:22:1d:19:32:dc:8a:41: 17:12:3d:c4:22:7e:07:d4:50:08:ea:8d:3f:0f:88:07:0f:cd: 3e:58:5b:91:03:95:75:75:52:9b:61:fc:87:7b:1b:03:6f:8e: c0:b0:3b:bd:41:71:56:bf:25:54:63:8f:b8:89:71:3a:26:a7: 5f:83:f0:47:cf:c9:68:6c:5b:4d:a3:f3:d0:37:1d:a3:97:a6: a4:2e:cd:72:cb:0e:26:56:c4:60:6a:37:6a:52:86:ea:cc:d0: 4d:0d:93:f1:c6:18:ee:df:c2:42:76:4a:62:44:5a:c9:92:ff: ea:67:90:2a:39:3d:1e:8d:53:76:bb:85:05:fd:68:80:78:5a: 19:cd:b5:80:b3:4a:95:0c:8e:f7:ec:7b:be:74:b0:ed:75:df: 04:50:9d:ed:53:38:40:2f:79:4f:30:c4:65:ac:78:3d:9e:d6: 94:d2:f9:b5:df:74:47:b7:28:67:0c:c4:b8:a5:0c:84:83:55: f4:1f:65:9b:e0:ed:74:fd:2d:57:34:02:b5:e2:ff:dd:6e:5b: 06:e6:36:d6:3c:61:60:a9:62:3d:e1:d7:e7:58:1f:1d:97:82: 89:9d:95:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu03zBEeMmhUmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmQyZTQ2ZWQtODk5MC00MzZiLWFhYTktM2I2NTZmMmQ0OGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/LsfEUv+4aZOPn2xj33m+f1r3/dH6jTPmJ5 3DEQKS/5nOb8WZMdkb5cOrQGIxAMdJKLc/EdfIiqqGL7+ALTpyMzGR7lqd5D9Pvd Vt+6HlMnrEp2/pmcqTsMjnAiY7qgmxVMBwCaIOlzeUcHMwFKD/zMbUWIJ5IS3fvb 2mohWAVjDBXX5quW1SgL5dYapdgJelGQVZmyBM3ecb7Y1uu7y0/RILF2vls+oQMV 2bysk0hNH9Lc4q8l8V6PGSfVYowJzIv0pPFvd6Y/I/HSMFFA2UQjZVHUXBQzIdF2 sgM8llqH6nOnzKyaKCzQC0vtMtOWWo7MVerBWdwMUHP+3gIsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6JwVJInVeaiH6GOPGw9ACyyhFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjk2MDY3YTEtOGI0OS0z MGVmLTllMWEtZjYwYWIwOGFiNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdFVg9d+5c2CnUl/mBVaLo7Ryqj3ZrUjv6vPK2nIh0ZMtyKQRcSPcQi fgfUUAjqjT8PiAcPzT5YW5EDlXV1Upth/Id7GwNvjsCwO71BcVa/JVRjj7iJcTom p1+D8EfPyWhsW02j89A3HaOXpqQuzXLLDiZWxGBqN2pShurM0E0Nk/HGGO7fwkJ2 SmJEWsmS/+pnkCo5PR6NU3a7hQX9aIB4WhnNtYCzSpUMjvfse750sO113wRQne1T OEAveU8wxGWseD2e1pTS+bXfdEe3KGcMxLilDISDVfQfZZvg7XT9LVc0ArXi/91u WwbmNtY8YWCpYj3h1+dYHx2XgomdlZc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:46 2025 by rpki-client