$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa File: 33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa (raw, json) Hash identifier: lPfqFLx1BwfpP/TacOgR08tDEfkrzDBr11hUZUOMWWQ= Subject key identifier: 67:BE:F6:02:AF:09:CF:A8:73:C5:AE:64:5F:F2:CA:BB:A2:46:27:FC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EBC1289764A7B9E9E920 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397219 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:eb:c1:28:97:64:a7:b9:e9:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e99bedc3-184a-453a-921d-21135d433c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:f3:d3:ee:fe:97:4b:c8:6a:b8:ec:1c:58: 75:78:d4:05:46:a3:bb:9d:b1:14:5b:ec:02:f3:b5: 2c:fa:97:89:91:8c:54:13:21:a2:2b:5e:b6:90:f9: b6:8d:ca:76:77:c4:27:1b:0c:46:19:98:ac:41:dd: da:fd:fa:e6:53:fb:bf:cb:40:93:2b:c4:46:70:e8: 06:87:00:ef:aa:35:49:46:ca:e0:cb:a7:63:22:87: ad:bf:2a:c9:34:ed:6d:66:29:3f:31:03:1d:1a:8c: f5:ff:57:54:20:0d:8e:3c:d6:1e:eb:6d:45:56:4a: db:38:1a:4d:28:27:26:31:f5:0d:ca:bf:5d:d9:59: 56:65:64:3f:58:8d:2d:79:64:2d:a3:6f:6b:c5:3c: 67:86:5c:6c:bf:dc:b6:88:f7:4d:14:ab:a2:17:89: e8:07:fc:7c:1f:4f:59:c9:57:15:38:fa:1b:42:21: dd:ea:8a:0b:91:ad:16:9a:91:2c:01:bb:46:70:5a: 2e:15:01:1a:b7:3c:c8:56:22:82:07:d1:fa:75:6e: 2a:76:d6:f1:18:83:f0:9b:da:3d:d1:cf:9a:bf:7e: 07:43:14:3e:45:7a:9c:ff:2f:c7:7f:db:c9:6a:07: ac:0b:af:8b:37:53:98:cb:36:bd:34:f6:bb:c5:9f: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:F6:02:AF:09:CF:A8:73:C5:AE:64:5F:F2:CA:BB:A2:46:27:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0c:17:64:0e:c7:21:6d:11:c0:ad:e7:cf:8d:06:87:e2:02: 94:a7:7c:62:21:a0:fb:9a:8e:03:b2:80:7f:ef:70:da:85:df: 55:02:0f:87:54:f6:2d:9b:bc:ad:f9:b5:9a:43:37:bd:8b:1f: eb:5b:e4:72:20:1b:51:c8:84:cc:3a:6b:c1:1d:9e:8f:3b:1a: 7e:f2:ad:e8:f5:c8:bc:3a:9c:1f:51:2d:4f:95:9f:d6:b3:71: 54:d8:6e:35:fc:92:c8:cb:44:0c:d1:a4:53:60:ec:05:4a:2b: ca:4e:38:7d:74:db:22:fe:85:39:cf:ff:d8:39:e3:eb:17:6b: 9a:8a:75:e4:95:d0:11:bc:0e:bf:fa:4b:a6:0b:06:95:f1:3f: 1e:e6:c9:0a:4a:02:c9:62:ae:3b:51:16:c1:fd:d4:4c:8a:22: 0a:99:c9:5c:a8:e2:cd:91:e7:2b:9f:3c:b7:af:26:88:7d:a6: e9:f4:27:4d:27:37:8a:d6:59:63:46:69:e1:e1:7e:65:4a:30: 29:f1:52:10:03:ae:69:2d:80:5a:6b:68:bd:1c:eb:68:8b:9e: 95:64:76:83:1d:ae:18:08:b4:35:d3:0b:6b:95:7d:a4:e5:08: 5e:ab:79:ad:df:fa:4d:3f:3a:a8:29:32:e1:63:a3:53:8a:0e: 6a:f9:9a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuvBKJdkp7np6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTk5YmVkYzMtMTg0YS00NTNhLTkyMWQtMjExMzVkNDMzYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCDz0+7+l0vIarjsHFh1eNQFRqO7nbEUW+wC 87Us+peJkYxUEyGiK162kPm2jcp2d8QnGwxGGZisQd3a/frmU/u/y0CTK8RGcOgG hwDvqjVJRsrgy6djIoetvyrJNO1tZik/MQMdGoz1/1dUIA2OPNYe621FVkrbOBpN KCcmMfUNyr9d2VlWZWQ/WI0teWQto29rxTxnhlxsv9y2iPdNFKuiF4noB/x8H09Z yVcVOPobQiHd6ooLka0WmpEsAbtGcFouFQEatzzIViKCB9H6dW4qdtbxGIPwm9o9 0c+av34HQxQ+RXqc/y/Hf9vJagesC6+LN1OYyza9NPa7xZ+fCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe+9gKvCc+oc8WuZF/yyruiRif8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzMwNTRhN2ItMmYxZi0z MmU4LWFhNGItZTgyNzFlMWYzODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsMF2QOxyFtEcCt58+NBofiApSnfGIhoPuajgOygH/vcNqF31UCD4dU 9i2bvK35tZpDN72LH+tb5HIgG1HIhMw6a8Edno87Gn7yrej1yLw6nB9RLU+Vn9az cVTYbjX8ksjLRAzRpFNg7AVKK8pOOH102yL+hTnP/9g54+sXa5qKdeSV0BG8Dr/6 S6YLBpXxPx7myQpKAslirjtRFsH91EyKIgqZyVyo4s2R5yufPLevJoh9pun0J00n N4rWWWNGaeHhfmVKMCnxUhADrmktgFpraL0c62iLnpVkdoMdrhgItDXTC2uVfaTl CF6rea3f+k0/OqgpMuFjo1OKDmr5mmE= -----END CERTIFICATE-----Generated at Sun Apr 27 01:34:14 2025 by rpki-client