$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa File: 04ff7131-4541-334b-ba77-46d5a531cbd6.roa (raw, json) Hash identifier: rX3jSLziY9yo6iSRJmI2YIjv3XnejxJ42Bazxq7898U= Subject key identifier: B0:FB:8A:1F:E2:88:92:33:29:E6:65:0B:81:F8:DD:12:63:6C:3D:07 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847DDCA3904F2D583E431A04D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa Signing time: Wed 13 Nov 2024 14:00:39 +0000 ROA not before: Wed 13 Nov 2024 14:00:39 +0000 ROA not after: Tue 11 Feb 2025 14:00:39 +0000 asID: 397234 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:ca:39:04:f2:d5:83:e4:31:a0:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 13 14:00:39 2024 GMT Not After : Feb 11 14:00:39 2025 GMT Subject: CN=30cc8037-c611-4cfc-a7ad-f7ba138c5e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:fe:52:6b:b9:07:00:3d:b2:42:9c:c6:df: f7:5a:ad:9e:fa:b5:59:0d:d1:36:0c:e7:2d:24:dc: b2:7b:c6:d0:5c:40:9d:e4:24:9a:1c:59:38:77:71: 31:6a:b8:c9:1c:5e:6f:ef:f6:6c:6f:f1:23:a1:0e: ce:78:07:dc:89:ea:23:87:97:38:b3:a4:ca:da:30: e8:d9:1f:47:08:3d:89:47:22:a4:bd:1b:b0:d0:1f: 85:69:7a:7e:9b:c2:bb:71:9d:49:d9:36:89:7a:48: 72:e5:d5:9c:13:e6:b5:40:f8:48:79:c0:55:df:e5: d1:b2:b4:cb:da:96:1b:f2:ec:1a:57:c3:52:95:a2: 36:d7:32:c9:04:ff:ce:4d:21:7c:36:6b:1b:ef:0c: d9:d3:ab:75:82:65:b8:f9:5d:94:1f:42:35:82:68: f7:66:97:2c:d1:67:cb:09:62:1e:58:c5:48:d1:be: eb:10:f3:15:eb:9a:98:93:1c:56:58:d0:7a:cd:fe: fc:6b:38:3f:7c:02:43:e6:67:0e:c9:d6:e7:be:74: cb:f9:78:01:63:38:78:c8:f4:af:a5:37:58:5b:48: 30:5f:c2:13:7f:49:f4:d1:09:00:77:0b:aa:08:fe: f8:ec:c7:6b:0b:6c:81:4a:c5:00:d1:ab:78:cc:c4: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FB:8A:1F:E2:88:92:33:29:E6:65:0B:81:F8:DD:12:63:6C:3D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:81:c0:31:c8:0f:96:1f:65:08:b7:bb:93:ef:7e:0c:fc:3b: 2c:ce:ca:1c:7a:d8:43:5f:c6:bf:30:a3:fd:ee:ee:04:86:a3: fd:4e:7d:72:05:7a:8f:4e:71:e7:87:f2:0b:81:86:35:f2:2c: c0:c0:aa:7b:fd:77:4d:6c:69:70:6c:e4:20:8d:c6:83:53:bd: 0b:b6:fa:cc:e6:2b:ee:6a:f9:84:3a:89:f2:2c:f3:ac:49:24: 43:80:7c:ff:f7:df:1a:d5:84:58:bb:fc:b0:ad:7c:98:7c:44: 30:3f:ca:11:a9:9e:89:21:74:08:c4:5c:c0:d6:69:08:35:47: 2d:f5:99:1c:60:e5:15:48:6f:9d:46:eb:96:75:86:27:14:b1: 4e:34:5f:58:0c:d0:31:84:60:d9:69:b6:b5:74:d0:10:76:50: 70:37:8a:37:17:d9:77:d9:94:bc:fb:c1:f7:df:ba:9c:50:78: 5e:cd:3f:9c:38:15:5c:5b:8f:4a:33:b3:20:78:cc:94:c4:c2: 75:f2:cb:e6:19:b0:2b:c2:a0:80:74:1c:06:99:a9:ee:17:60: 88:98:f5:eb:be:70:6b:ec:a2:34:af:1e:33:02:05:8d:a1:45: 23:05:6e:22:dd:ce:e0:91:29:d6:1b:08:c4:45:8b:ce:79:8b: fe:b4:4a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyjkE8tWD5DGgTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk MzBjYzgwMzctYzYxMS00Y2ZjLWE3YWQtZjdiYTEzOGM1ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LP+Umu5BwA9skKcxt/3Wq2e+rVZDdE2DOct JNyye8bQXECd5CSaHFk4d3ExarjJHF5v7/Zsb/EjoQ7OeAfcieojh5c4s6TK2jDo 2R9HCD2JRyKkvRuw0B+FaXp+m8K7cZ1J2TaJekhy5dWcE+a1QPhIecBV3+XRsrTL 2pYb8uwaV8NSlaI21zLJBP/OTSF8Nmsb7wzZ06t1gmW4+V2UH0I1gmj3Zpcs0WfL CWIeWMVI0b7rEPMV65qYkxxWWNB6zf78azg/fAJD5mcOydbnvnTL+XgBYzh4yPSv pTdYW0gwX8ITf0n00QkAdwuqCP747MdrC2yBSsUA0at4zMQ7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD7ih/iiJIzKeZlC4H43RJjbD0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDRmZjcxMzEtNDU0MS0z MzRiLWJhNzctNDZkNWE1MzFjYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKBwDHID5YfZQi3u5Pvfgz8OyzOyhx62ENfxr8wo/3u7gSGo/1OfXIF eo9OceeH8guBhjXyLMDAqnv9d01saXBs5CCNxoNTvQu2+szmK+5q+YQ6ifIs86xJ JEOAfP/33xrVhFi7/LCtfJh8RDA/yhGpnokhdAjEXMDWaQg1Ry31mRxg5RVIb51G 65Z1hicUsU40X1gM0DGEYNlptrV00BB2UHA3ijcX2XfZlLz7wfffupxQeF7NP5w4 FVxbj0ozsyB4zJTEwnXyy+YZsCvCoIB0HAaZqe4XYIiY9eu+cGvsojSvHjMCBY2h RSMFbiLdzuCRKdYbCMRFi855i/60Sis= -----END CERTIFICATE-----Generated at Mon Nov 25 16:30:52 2024 by rpki-client on console-ams.rpki-client.org