$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa File: b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa (raw, json) Hash identifier: RzWOfTYvBdt9Mq7Qj7HJBGC6RrbkxlkF67K2gxyuK/4= Subject key identifier: E5:A2:AA:13:95:88:68:02:50:4E:67:02:73:AA:CC:73:B9:0B:16:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EB9428CB6EDFF032F1B0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397216 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:eb:94:28:cb:6e:df:f0:32:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d03375dd-923a-4319-82f3-86cec961eacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:b6:76:93:58:4e:d5:62:b9:1b:76:63:af: 8f:36:b1:ad:27:0f:75:64:22:e8:25:85:95:71:8f: fe:99:42:23:62:bf:d4:2f:87:57:ab:bc:0c:4e:fb: d6:03:d0:5b:30:02:d7:f2:3c:d0:4a:51:b5:eb:23: a8:1c:fa:98:c2:3e:a5:ba:3e:af:d0:11:87:ad:a8: 5e:53:ec:f7:38:05:c5:4d:fe:de:5b:7c:b5:73:10: b2:75:8a:d5:c1:ce:a2:4d:b0:f5:93:d5:82:2d:b3: 81:04:f7:4a:25:d0:f2:84:2e:18:e2:d6:c0:8d:55: f3:bd:26:0d:08:1c:dc:b2:67:03:09:81:d8:c0:c8: 99:73:8e:72:82:80:7c:0c:f3:2c:c2:0c:38:53:ba: fb:75:ce:0f:7e:50:7d:f5:3b:73:5e:b0:45:77:18: f3:c4:38:b4:9a:9f:43:b8:09:15:72:f0:be:ef:c7: ff:e0:07:07:fc:6a:61:78:27:25:bb:72:d6:f0:58: 0f:ee:90:68:a1:b6:25:d4:96:ea:da:40:28:fb:99: ed:c9:e2:c7:24:5e:5b:68:51:24:1c:57:2b:e8:b0: 61:4f:0c:dd:65:ad:82:75:03:75:23:ad:4f:92:e1: 3d:48:23:e1:d7:18:ad:24:53:aa:a4:2f:8c:da:3e: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:AA:13:95:88:68:02:50:4E:67:02:73:AA:CC:73:B9:0B:16:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b3:03:5a:0e:b7:43:a2:c1:ea:43:96:87:81:57:3a:e9:be: 6c:ec:8c:fd:75:25:41:46:09:96:5b:11:f3:90:99:a5:bd:56: 52:81:22:42:5e:99:32:6b:19:28:b9:b1:2e:f8:15:fc:0b:09: 80:28:1c:f4:ab:2f:80:50:8a:bc:24:d3:48:5b:46:bd:be:68: 60:bc:d3:9f:f1:4b:80:a8:5b:0a:5b:aa:b0:20:4c:d5:b7:8f: e1:c7:26:ee:74:01:bd:a3:35:23:02:92:e3:c4:c8:8e:47:e1: 3e:2c:3b:3a:04:10:21:48:cf:eb:b9:21:3b:3e:83:18:17:65: 67:a8:85:07:82:a2:34:8a:cf:5d:db:d4:5f:a1:ce:1c:73:ce: 92:e6:5d:33:bc:82:11:e3:5c:5c:9a:de:e8:22:60:bb:b0:f2: 18:c6:d8:89:3c:36:e0:71:b2:44:c9:46:57:9c:c3:d9:c9:df: 59:95:5f:ef:e8:c0:de:0d:ce:7e:c8:3c:a3:c2:d3:c3:de:3d: e2:87:f4:0a:b3:96:c7:0b:fb:70:a5:35:84:7d:a7:61:0c:4c: 1d:12:d0:41:ec:17:e0:87:dd:bc:fe:c9:75:41:3e:02:d1:ed: 95:91:49:1e:18:37:ab:62:ff:55:28:28:4f:81:31:63:f7:58: 4d:17:fe:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuuUKMtu3/Ay8bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDAzMzc1ZGQtOTIzYS00MzE5LTgyZjMtODZjZWM5NjFlYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/C2dpNYTtViuRt2Y6+PNrGtJw91ZCLoJYWV cY/+mUIjYr/UL4dXq7wMTvvWA9BbMALX8jzQSlG16yOoHPqYwj6luj6v0BGHrahe U+z3OAXFTf7eW3y1cxCydYrVwc6iTbD1k9WCLbOBBPdKJdDyhC4Y4tbAjVXzvSYN CBzcsmcDCYHYwMiZc45ygoB8DPMswgw4U7r7dc4PflB99TtzXrBFdxjzxDi0mp9D uAkVcvC+78f/4AcH/GpheCclu3LW8FgP7pBoobYl1Jbq2kAo+5ntyeLHJF5baFEk HFcr6LBhTwzdZa2CdQN1I61PkuE9SCPh1xitJFOqpC+M2j52PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWiqhOViGgCUE5nAnOqzHO5CxZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjc0Njk2NjgtOWVlNC0z ZDgyLWExYjYtNmU3ODAzYWRjMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABizA1oOt0OiwepDloeBVzrpvmzsjP11JUFGCZZbEfOQmaW9VlKBIkJe mTJrGSi5sS74FfwLCYAoHPSrL4BQirwk00hbRr2+aGC805/xS4CoWwpbqrAgTNW3 j+HHJu50Ab2jNSMCkuPEyI5H4T4sOzoEECFIz+u5ITs+gxgXZWeohQeCojSKz13b 1F+hzhxzzpLmXTO8ghHjXFya3ugiYLuw8hjG2Ik8NuBxskTJRlecw9nJ31mVX+/o wN4Nzn7IPKPC08PePeKH9AqzlscL+3ClNYR9p2EMTB0S0EHsF+CH3bz+yXVBPgLR 7ZWRSR4YN6ti/1UoKE+BMWP3WE0X/uU= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:25 2025 by rpki-client