$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85bcf874-7e44-3fc1-a975-f64a2007e41f.roa File: 85bcf874-7e44-3fc1-a975-f64a2007e41f.roa (raw, json) Hash identifier: gp7pesnPWY5AQTP7a+84LECcD+q7weAq6LMqqk6i6Yw= Subject key identifier: 23:D0:64:09:64:8D:AB:6E:E4:7F:07:ED:53:76:FC:52:80:A8:20:19 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246DAC2D24113F7244CEE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85bcf874-7e44-3fc1-a975-f64a2007e41f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397240 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:da:c2:d2:41:13:f7:24:4c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=600c259e-f923-453b-9812-aaec0dfa7b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:d3:8c:28:6b:41:89:0f:c4:97:13:9f:87: 38:3d:37:1c:69:82:32:6f:02:e0:3a:fd:cc:6b:ca: bc:46:86:ab:5f:0c:db:ca:72:56:06:c4:c2:64:8b: 3c:b4:1f:a3:c0:b7:a9:54:b5:ca:79:3e:4d:45:cf: b4:0b:68:29:15:be:20:fe:a8:de:ec:b1:d2:0a:e4: 0e:40:b8:94:25:5f:db:40:ec:77:14:95:ef:2d:a8: a0:e3:a6:92:61:34:12:29:dd:db:e9:13:6a:a9:1c: 99:21:87:d1:4c:e2:17:fb:57:25:ea:54:2e:a3:ac: 26:59:6e:b3:20:e9:08:11:c0:18:1e:75:6d:f1:60: 83:eb:2a:35:ab:cb:60:c9:43:8a:43:e6:9e:fe:ae: 2e:ac:1c:29:17:be:66:24:b4:a4:4f:3b:74:24:cc: 81:ea:b3:31:e4:a7:b2:4d:0e:be:aa:34:bc:42:e3: 74:61:34:87:26:e0:a9:96:46:69:72:67:f0:90:b7: 7d:b9:64:85:2e:b2:8e:87:01:a8:0d:14:cc:d5:e5: c1:0b:4a:e4:95:1f:aa:40:82:c2:31:28:d8:06:6d: 6e:18:ad:09:f4:fa:2c:43:97:42:cd:a2:09:9c:8a: 5b:f9:c1:a0:f9:92:66:73:db:a9:c5:20:7f:bc:18: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:64:09:64:8D:AB:6E:E4:7F:07:ED:53:76:FC:52:80:A8:20:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85bcf874-7e44-3fc1-a975-f64a2007e41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:23:ed:be:ed:a9:a2:d3:e7:26:75:fe:21:74:82:fd:18:d3: 12:b4:bd:22:87:8e:88:3f:e8:1f:9c:7f:cc:d3:f2:00:6f:63: 0d:48:e4:61:03:5a:7e:a9:44:2d:77:85:e3:d4:97:07:0c:54: 98:0d:e0:82:33:ea:36:61:22:2b:c8:ce:91:f6:5b:42:f2:68: cc:05:a5:52:a6:05:11:fa:06:0d:19:c5:27:c8:b0:13:8d:9b: 98:0a:42:2f:9e:15:2d:5e:c7:dc:c4:3b:7a:8f:b9:1b:63:f0: 23:81:c9:8b:f8:01:a0:34:65:e8:1a:94:d5:2c:64:f0:4c:55: d4:69:27:c0:93:f6:d3:fb:e2:67:c7:df:50:54:1d:ca:aa:82: cd:0d:4b:24:19:eb:67:77:0a:5f:31:2b:7a:78:96:f4:7f:15: a9:ac:d8:94:a7:fa:99:62:c8:d6:05:80:49:46:23:39:7f:9d: c2:cb:78:74:e9:73:fa:6a:fe:ee:0e:1c:c6:4d:2c:be:bf:3a: cc:89:76:b8:e9:e8:20:40:32:97:5f:61:6e:e6:ea:17:6f:d8: 54:bb:09:6e:78:cf:1d:7d:38:c1:57:0b:6d:a4:14:34:0c:95: bf:d5:9d:34:7a:af:e3:61:ae:27:61:2b:01:55:64:5e:b6:be: e1:41:de:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtrC0kET9yRM7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjAwYzI1OWUtZjkyMy00NTNiLTk4MTItYWFlYzBkZmE3YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uLTjChrQYkPxJcTn4c4PTccaYIybwLgOv3M a8q8RoarXwzbynJWBsTCZIs8tB+jwLepVLXKeT5NRc+0C2gpFb4g/qje7LHSCuQO QLiUJV/bQOx3FJXvLaig46aSYTQSKd3b6RNqqRyZIYfRTOIX+1cl6lQuo6wmWW6z IOkIEcAYHnVt8WCD6yo1q8tgyUOKQ+ae/q4urBwpF75mJLSkTzt0JMyB6rMx5Key TQ6+qjS8QuN0YTSHJuCplkZpcmfwkLd9uWSFLrKOhwGoDRTM1eXBC0rklR+qQILC MSjYBm1uGK0J9PosQ5dCzaIJnIpb+cGg+ZJmc9upxSB/vBjUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPQZAlkjatu5H8H7VN2/FKAqCAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODViY2Y4NzQtN2U0NC0z ZmMxLWE5NzUtZjY0YTIwMDdlNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIj7b7tqaLT5yZ1/iF0gv0Y0xK0vSKHjog/6B+cf8zT8gBvYw1I5GED Wn6pRC13hePUlwcMVJgN4IIz6jZhIivIzpH2W0LyaMwFpVKmBRH6Bg0ZxSfIsBON m5gKQi+eFS1ex9zEO3qPuRtj8COByYv4AaA0ZegalNUsZPBMVdRpJ8CT9tP74mfH 31BUHcqqgs0NSyQZ62d3Cl8xK3p4lvR/Fams2JSn+pliyNYFgElGIzl/ncLLeHTp c/pq/u4OHMZNLL6/OsyJdrjp6CBAMpdfYW7m6hdv2FS7CW54zx19OMFXC22kFDQM lb/VnTR6r+NhridhKwFVZF62vuFB3mY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:46 2025 by rpki-client