$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa File: c54232c1-2794-3896-a1dd-d80b71265aa1.roa (raw, json) Hash identifier: e/NKcW8aqi5yhd4XrU5MdA7seglDVKqtLCb92yZwwzE= Subject key identifier: 42:CB:EB:16:58:BB:F5:B9:96:32:13:13:29:2D:6D:88:E8:EF:72:91 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246EF63F9617D5CFC363D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397218 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ef:63:f9:61:7d:5c:fc:36:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a5884aac-c35f-4561-9376-143bcdc4072f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:18:87:17:3b:91:47:6a:9d:3d:54:2f:46: d4:1e:79:15:3a:a4:d0:f3:68:a7:63:c1:52:16:d7: be:38:1a:60:66:8a:fa:3a:05:91:88:31:88:74:2a: 80:d7:50:52:19:d0:29:ad:b0:78:95:cc:bd:1e:2e: 0f:f2:20:c0:a2:ad:af:95:f4:fb:2a:8b:77:19:3e: 09:0f:78:95:f8:43:af:88:fc:89:2b:4a:82:bb:0e: e6:df:34:01:f2:64:1b:55:42:51:98:97:0c:4c:34: a1:76:24:7d:e3:7d:09:56:ba:70:1a:b0:35:6f:fe: 94:8a:8f:19:36:b0:0f:90:85:4c:a8:64:0e:84:3e: c0:38:b1:96:d1:52:af:96:04:5f:d1:80:14:45:03: 23:53:1c:f5:9f:74:9f:5d:db:67:7e:da:e7:6c:b2: 8a:24:ab:7a:da:12:3e:29:b7:4a:a7:75:6f:8b:a7: cd:4d:81:e3:d9:6c:ea:16:5c:5f:2a:85:c2:28:c6: 2d:46:ee:0b:63:1b:63:2d:c0:2e:21:16:13:26:91: 16:6e:fe:dc:58:77:c1:16:22:d0:8c:7a:b9:dd:a4: 3e:cb:73:77:5b:a8:37:e6:5a:41:10:43:00:cd:ee: a4:ea:65:25:bd:5c:b9:0a:cf:c0:14:d0:4a:89:fe: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:EB:16:58:BB:F5:B9:96:32:13:13:29:2D:6D:88:E8:EF:72:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c54232c1-2794-3896-a1dd-d80b71265aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:68:8b:79:e1:52:41:70:a6:ca:48:b2:14:e6:11:57:19:0a: 44:63:7c:8e:7f:ac:38:7a:8d:98:8d:a8:b3:40:f4:e9:03:91: cc:ad:36:2d:84:53:ec:77:36:38:8d:45:68:ec:56:00:48:c4: 6a:e7:7b:6a:eb:f8:6e:39:ac:a5:09:af:26:6a:ce:8b:f3:15: a1:97:b5:ef:ad:2e:1b:18:1a:19:71:58:ab:47:a8:a1:b5:e2: 53:29:a7:2b:55:63:2b:98:a5:2b:52:08:5d:ed:75:fa:2f:f3: e8:72:ee:e7:23:9a:48:3c:e4:6f:2f:23:02:81:f7:c3:4f:48: 6d:a0:4a:16:14:ff:69:ef:57:7e:7c:c0:e1:53:75:63:0c:53: 30:e7:01:43:bf:62:86:b0:74:ce:f4:bb:93:1d:ea:48:be:0b: 7b:44:ee:7c:96:06:f9:50:6f:84:bd:d1:2e:5b:65:e7:ac:6e: 78:9e:38:d0:1e:8d:ce:16:e6:59:21:d4:97:63:0d:08:fe:78: 0b:ff:79:ad:51:68:f0:09:f8:5f:42:75:92:99:c2:bc:1a:ac: c4:82:7c:5f:da:c7:21:30:01:e3:12:74:a4:f8:30:84:29:38: b4:e3:7b:15:dc:28:90:cd:dd:c9:d7:4a:95:a3:99:7d:32:03: f3:df:ca:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRu9j+WF9XPw2PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTU4ODRhYWMtYzM1Zi00NTYxLTkzNzYtMTQzYmNkYzQwNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulYYhxc7kUdqnT1UL0bUHnkVOqTQ82inY8FS Fte+OBpgZor6OgWRiDGIdCqA11BSGdAprbB4lcy9Hi4P8iDAoq2vlfT7Kot3GT4J D3iV+EOviPyJK0qCuw7m3zQB8mQbVUJRmJcMTDShdiR9430JVrpwGrA1b/6Uio8Z NrAPkIVMqGQOhD7AOLGW0VKvlgRf0YAURQMjUxz1n3SfXdtnftrnbLKKJKt62hI+ KbdKp3Vvi6fNTYHj2WzqFlxfKoXCKMYtRu4LYxtjLcAuIRYTJpEWbv7cWHfBFiLQ jHq53aQ+y3N3W6g35lpBEEMAze6k6mUlvVy5Cs/AFNBKif5iGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELL6xZYu/W5ljITEyktbYjo73KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzU0MjMyYzEtMjc5NC0z ODk2LWExZGQtZDgwYjcxMjY1YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNoi3nhUkFwpspIshTmEVcZCkRjfI5/rDh6jZiNqLNA9OkDkcytNi2E U+x3NjiNRWjsVgBIxGrne2rr+G45rKUJryZqzovzFaGXte+tLhsYGhlxWKtHqKG1 4lMppytVYyuYpStSCF3tdfov8+hy7ucjmkg85G8vIwKB98NPSG2gShYU/2nvV358 wOFTdWMMUzDnAUO/YoawdM70u5Md6ki+C3tE7nyWBvlQb4S90S5bZeesbnieONAe jc4W5lkh1JdjDQj+eAv/ea1RaPAJ+F9CdZKZwrwarMSCfF/axyEwAeMSdKT4MIQp OLTjexXcKJDN3cnXSpWjmX0yA/PfykM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:20:35 2025 by rpki-client