$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e04ffa4-0fdc-34e8-b0c0-f40a8767588f.roa File: 0e04ffa4-0fdc-34e8-b0c0-f40a8767588f.roa (raw, json) Hash identifier: qgUpQeLfI+N7cPPfFLebMeuFbQhvy+iINLq1pZC8EhM= Subject key identifier: B4:5A:3D:43:5C:21:86:1A:D3:27:5C:27:C7:A4:A3:30:C0:B5:2F:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F708532FF4596E77E8900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e04ffa4-0fdc-34e8-b0c0-f40a8767588f.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397224 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:70:85:32:ff:45:96:e7:7e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=e33a3a2e-2514-46cd-9c76-999f282fb94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:5a:5d:13:7a:88:68:36:8f:fb:fe:fc:81: 4c:27:ae:2f:a9:06:b5:4c:9e:6a:0b:54:08:ef:0e: 38:22:e4:37:43:41:0b:67:b7:2c:df:74:ec:80:c7: 68:cb:3b:e8:7c:50:4a:3f:ab:e1:9e:a1:5f:b5:e7: b3:21:d2:51:9b:c3:8b:eb:ca:80:1c:64:0b:de:bb: 91:5c:d3:e5:b7:99:41:2b:a6:c5:30:02:5a:15:6b: d0:01:28:3e:92:fc:35:f3:34:7a:f4:d3:e1:19:63: 37:93:68:ef:14:25:14:b7:3f:9c:80:22:d7:21:3c: a3:ba:99:67:8d:45:97:65:36:04:88:da:8a:d5:fd: 98:f7:4d:c9:9e:c9:3d:e0:dd:07:ad:6a:1e:cc:05: 98:cb:7c:ae:aa:3d:3d:0b:ad:31:60:59:ec:b0:32: ba:ce:81:af:2b:a1:e4:67:d1:8f:a6:41:8f:51:21: 8b:c5:13:ef:40:5a:ac:81:3a:a1:9d:e1:9c:87:d8: a8:63:82:8b:c3:82:fe:e4:82:c1:61:3f:b1:7d:44: 37:7a:70:6d:da:cd:22:1c:93:91:b9:45:09:6e:a9: 25:cf:a5:e6:2b:9b:17:b7:7b:23:04:2d:8f:9b:dc: fa:af:f8:21:b7:9b:de:b0:1d:a4:d0:67:66:75:50: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:3D:43:5C:21:86:1A:D3:27:5C:27:C7:A4:A3:30:C0:B5:2F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e04ffa4-0fdc-34e8-b0c0-f40a8767588f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9d:94:5b:4e:67:2c:d2:64:62:30:cc:6e:ee:98:f1:df:3a: f7:ab:6c:53:20:94:15:d4:d9:03:eb:3c:7d:db:ec:ed:27:ac: d8:fd:b3:a2:61:7d:5f:5c:1d:28:43:fd:9b:16:c3:ab:74:04: 10:c2:ac:4b:86:18:bb:1c:2c:12:7e:11:1a:62:d9:83:47:9c: 65:5b:2e:dc:49:8f:ff:f3:23:fe:8b:28:59:89:3b:d7:70:43: 0d:e6:01:86:9f:85:2d:c4:b2:d7:7f:35:ed:fa:56:37:da:33: d8:b6:d6:82:45:ce:6f:3d:31:75:de:6a:97:20:f2:25:24:9f: 2a:f3:00:1e:59:6f:4d:be:dd:7a:97:d8:b2:3e:33:cb:80:b5: 32:bf:cf:c0:8f:e9:b7:00:9e:54:05:95:2f:59:e4:4f:20:1a: b5:55:1f:f1:a5:93:ad:cc:71:4b:16:80:68:bb:17:91:a2:a0: 94:15:2e:bf:e0:64:2b:66:30:8d:ae:a7:9b:ce:0c:ab:ec:4a: 46:26:51:6e:19:4e:bd:68:3b:87:fc:78:be:e3:c5:29:3a:ac: 3a:b9:97:39:37:4e:e0:b5:32:9b:98:a7:68:62:ef:28:e2:02: e1:96:2d:06:ed:c6:5a:b5:c2:df:e3:31:eb:c6:da:f6:f6:ed: bd:d4:96:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3CFMv9Flud+iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTMzYTNhMmUtMjUxNC00NmNkLTljNzYtOTk5ZjI4MmZiOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BaXRN6iGg2j/v+/IFMJ64vqQa1TJ5qC1QI 7w44IuQ3Q0ELZ7cs33TsgMdoyzvofFBKP6vhnqFfteezIdJRm8OL68qAHGQL3ruR XNPlt5lBK6bFMAJaFWvQASg+kvw18zR69NPhGWM3k2jvFCUUtz+cgCLXITyjupln jUWXZTYEiNqK1f2Y903Jnsk94N0HrWoezAWYy3yuqj09C60xYFnssDK6zoGvK6Hk Z9GPpkGPUSGLxRPvQFqsgTqhneGch9ioY4KLw4L+5ILBYT+xfUQ3enBt2s0iHJOR uUUJbqklz6XmK5sXt3sjBC2Pm9z6r/ght5vesB2k0GdmdVAhtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRaPUNcIYYa0ydcJ8ekozDAtS8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGUwNGZmYTQtMGZkYy0z NGU4LWIwYzAtZjQwYTg3Njc1ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKdlFtOZyzSZGIwzG7umPHfOverbFMglBXU2QPrPH3b7O0nrNj9s6Jh fV9cHShD/ZsWw6t0BBDCrEuGGLscLBJ+ERpi2YNHnGVbLtxJj//zI/6LKFmJO9dw Qw3mAYafhS3Estd/Ne36VjfaM9i21oJFzm89MXXeapcg8iUknyrzAB5Zb02+3XqX 2LI+M8uAtTK/z8CP6bcAnlQFlS9Z5E8gGrVVH/Glk63McUsWgGi7F5GioJQVLr/g ZCtmMI2up5vODKvsSkYmUW4ZTr1oO4f8eL7jxSk6rDq5lzk3TuC1MpuYp2hi7yji AuGWLQbtxlq1wt/jMevG2vb27b3Ulj4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:30:53 2024 by rpki-client on console-ams.rpki-client.org