$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29872dfd-59c9-3c44-aa24-b54c3d575350.roa File: 29872dfd-59c9-3c44-aa24-b54c3d575350.roa (raw, json) Hash identifier: 77p2J7P9T01m5B80ZiO0AJLB49vRcTFrcZx1DfGGgWw= Subject key identifier: D2:CD:13:85:EE:79:10:7D:DA:78:4B:2F:12:8A:24:5C:6E:CD:86:D7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F00585D01F6B61175BBA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29872dfd-59c9-3c44-aa24-b54c3d575350.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 19905 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:05:85:d0:1f:6b:61:17:5b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=8e47e6d7-d38f-445d-991f-75a5357e183a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:82:97:06:a8:06:2d:0f:2b:87:1d:fd:57: 32:a7:93:10:1e:4d:44:3f:10:54:e7:a1:5f:ae:3e: 5b:91:5e:e8:69:e9:ff:a1:88:63:87:e8:df:d7:17: fe:7f:d1:75:93:65:a6:72:c4:e4:c0:fe:4d:3a:24: 35:2e:0e:57:c0:f9:84:d1:92:29:97:e1:ae:76:05: b8:99:e7:91:2e:80:c8:54:ce:04:5a:6e:f5:30:3a: 9c:6b:dd:85:16:6e:84:7b:d9:6e:e2:73:ff:18:fe: bd:ac:ae:a8:52:da:55:cd:16:7b:c6:50:27:2c:ff: 2f:12:78:1c:b3:e9:61:15:da:5f:fe:93:11:22:ee: ed:d3:56:b5:20:06:37:95:9e:d1:a7:21:fe:9e:fe: 96:21:0b:77:bd:f8:a9:50:33:48:ed:a8:95:02:0e: 3a:b0:c0:fd:28:83:17:4a:0f:f8:cb:2f:ea:c4:76: 76:8a:d9:0a:13:33:c2:eb:9b:47:2a:bf:78:18:49: d3:21:5f:f4:99:0d:03:9b:8d:a4:fe:11:64:bd:2c: b6:0a:c2:32:70:be:68:b5:f2:36:3e:64:92:83:07: 7c:66:7e:9a:ca:e0:df:14:2b:cc:1e:93:a6:c7:74: 6d:a8:cb:e1:5b:25:64:a0:fd:e2:06:b5:df:a5:b4: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CD:13:85:EE:79:10:7D:DA:78:4B:2F:12:8A:24:5C:6E:CD:86:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29872dfd-59c9-3c44-aa24-b54c3d575350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e3:86:d6:1d:24:28:0a:4f:88:33:27:f1:7b:b5:c3:ab:77: 95:8a:b7:d5:ec:83:f6:7c:6a:c5:69:3e:94:ec:ad:d8:33:df: 25:49:95:70:ef:b1:e2:8b:37:a6:c1:7b:62:e4:4f:49:62:a1: df:a4:3b:99:a5:e7:7f:e6:f6:c4:09:4a:5d:c1:b6:00:a5:e7: 7c:ff:a9:4b:41:9f:df:a2:b2:76:ea:02:df:1e:9a:5c:7e:12: 6e:d0:37:10:67:54:be:20:60:84:8e:8b:23:07:25:c4:a4:fa: ec:46:85:5d:54:05:bf:5e:03:b7:68:24:ed:fe:0c:07:b6:5e: 16:10:4a:40:09:2f:4d:12:09:d1:7a:9c:d7:79:23:69:33:e2: e7:d8:2b:46:6e:75:00:38:58:68:36:01:cc:8a:8c:66:6c:8c: 8d:9e:8d:0d:97:64:e0:1e:06:2e:fa:03:14:4d:4a:4d:b7:4b: 18:53:49:2e:6e:b7:65:ae:94:39:bf:f9:eb:59:da:1c:62:79: 9e:2e:3c:bb:de:e6:14:a9:6b:05:32:b2:43:c9:57:d3:ef:b1: fd:3f:be:d9:16:3c:2c:08:9a:66:e5:dd:44:3c:10:86:aa:ea: 27:56:45:10:46:c3:4b:09:59:01:e5:e7:23:73:eb:33:f9:0d: ad:44:1e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8AWF0B9rYRdbuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk OGU0N2U2ZDctZDM4Zi00NDVkLTk5MWYtNzVhNTM1N2UxODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKeClwaoBi0PK4cd/Vcyp5MQHk1EPxBU56Ff rj5bkV7oaen/oYhjh+jf1xf+f9F1k2WmcsTkwP5NOiQ1Lg5XwPmE0ZIpl+GudgW4 meeRLoDIVM4EWm71MDqca92FFm6Ee9lu4nP/GP69rK6oUtpVzRZ7xlAnLP8vEngc s+lhFdpf/pMRIu7t01a1IAY3lZ7RpyH+nv6WIQt3vfipUDNI7aiVAg46sMD9KIMX Sg/4yy/qxHZ2itkKEzPC65tHKr94GEnTIV/0mQ0Dm42k/hFkvSy2CsIycL5otfI2 PmSSgwd8Zn6ayuDfFCvMHpOmx3RtqMvhWyVkoP3iBrXfpbTk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLNE4XueRB92nhLLxKKJFxuzYbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjk4NzJkZmQtNTljOS0z YzQ0LWFhMjQtYjU0YzNkNTc1MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzjhtYdJCgKT4gzJ/F7tcOrd5WKt9Xsg/Z8asVpPpTsrdgz3yVJlXDv seKLN6bBe2LkT0liod+kO5ml53/m9sQJSl3BtgCl53z/qUtBn9+isnbqAt8emlx+ Em7QNxBnVL4gYISOiyMHJcSk+uxGhV1UBb9eA7doJO3+DAe2XhYQSkAJL00SCdF6 nNd5I2kz4ufYK0ZudQA4WGg2AcyKjGZsjI2ejQ2XZOAeBi76AxRNSk23SxhTSS5u t2WulDm/+etZ2hxieZ4uPLve5hSpawUyskPJV9Pvsf0/vtkWPCwImmbl3UQ8EIaq 6idWRRBGw0sJWQHl5yNz6zP5Da1EHmc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:25 2025 by rpki-client