$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa File: 7cf2603a-075d-3a24-850f-ff16f6f88964.roa (raw, json) Hash identifier: /NvSr72xJruXtanz6IIUp6m2jsjogwsaj6rwxaw/jJA= Subject key identifier: BC:4D:46:0B:B3:1E:1F:BB:62:24:DE:83:52:2A:5E:7C:D3:82:D3:95 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F6DFEFFC3A2138322D3C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 12008 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:6d:fe:ff:c3:a2:13:83:22:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=33dec296-4011-465b-af3e-1555b69ac29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:fe:f0:bd:00:93:82:e6:12:1b:8c:e4:5d: 67:ea:f6:7b:45:4e:2d:38:3d:3c:57:31:ff:da:9d: 8a:d1:ef:30:b5:ee:91:5f:4c:0d:6d:a4:82:15:40: 87:88:d1:da:d7:dc:f2:c7:a2:33:4c:d5:33:35:69: 69:f8:35:63:0b:46:ec:65:23:cf:53:bf:90:91:a4: 92:d6:35:fb:28:a1:fa:e2:e8:f9:1d:ec:32:6b:e6: 30:b6:53:12:2a:20:b5:cd:74:da:34:97:1d:ce:b9: ca:45:30:72:4a:b4:f2:ec:10:9b:5c:84:f9:e7:b1: 46:52:a9:55:8d:e2:6a:bd:15:70:fa:7f:a8:be:01: 25:7f:74:6c:90:18:4f:c3:98:04:f7:0f:54:4f:dc: d1:6d:65:3e:fd:52:d7:25:22:1e:d1:4e:e5:5f:7d: 9b:60:a2:61:6b:2f:0d:06:fc:f5:2b:a2:63:dc:13: 96:ee:9a:7d:91:87:1f:09:84:22:05:99:4c:44:c0: cc:0b:93:9c:30:e4:27:fa:10:3f:a0:21:6a:64:4b: f0:c1:57:9f:02:10:5e:ff:1a:ea:16:7a:42:5b:6c: d9:a0:32:c3:1d:58:80:3d:56:a3:77:31:43:a0:16: e6:53:79:ed:9f:dd:08:56:86:41:90:71:eb:e4:6d: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4D:46:0B:B3:1E:1F:BB:62:24:DE:83:52:2A:5E:7C:D3:82:D3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4f:4a:61:62:31:07:63:a1:69:bc:fc:da:3c:dc:69:5f:e0: 6f:17:1d:49:70:56:53:20:6d:9b:93:0e:6d:30:c9:e7:a2:eb: 54:d5:39:4e:a5:89:50:c0:79:e8:f0:e2:ac:a3:a6:a5:c1:09: 06:0d:cc:d4:07:14:15:9b:b5:75:db:c2:56:2c:66:16:75:d1: 7f:52:97:ae:ac:ca:56:84:a8:78:a7:f2:4f:02:93:93:b0:13: de:1f:7e:35:cb:47:46:62:14:b1:9e:d8:4e:5a:11:0b:f3:58: 38:c7:40:bc:02:35:cf:5d:5b:e7:65:08:0f:eb:d3:b9:e0:a0: f1:c5:7e:09:20:8c:79:f1:06:8a:12:dc:79:92:f9:67:8b:31: e2:8d:d4:6b:29:f3:ed:5f:86:59:8a:bd:03:94:8f:fd:ad:24: f4:21:8a:d7:0f:24:8c:e5:44:86:4b:86:f1:57:4a:1b:e5:b2: fc:14:0e:2f:35:1d:cc:87:9a:5e:0b:57:35:6b:1c:d0:5a:96: 02:a2:a6:17:d7:5d:87:da:8e:be:ea:3a:2f:d6:59:03:94:94: 51:a6:d0:45:86:17:5f:16:c8:1d:4b:05:a0:32:30:b9:c5:13: 1e:b3:6f:0c:ac:89:0c:36:42:01:2f:cd:ea:6e:ff:f1:d7:25: 82:32:fe:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP23+/8OiE4Mi08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzNkZWMyOTYtNDAxMS00NjViLWFmM2UtMTU1NWI2OWFjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitv+8L0Ak4LmEhuM5F1n6vZ7RU4tOD08VzH/ 2p2K0e8wte6RX0wNbaSCFUCHiNHa19zyx6IzTNUzNWlp+DVjC0bsZSPPU7+QkaSS 1jX7KKH64uj5Hewya+YwtlMSKiC1zXTaNJcdzrnKRTBySrTy7BCbXIT557FGUqlV jeJqvRVw+n+ovgElf3RskBhPw5gE9w9UT9zRbWU+/VLXJSIe0U7lX32bYKJhay8N Bvz1K6Jj3BOW7pp9kYcfCYQiBZlMRMDMC5OcMOQn+hA/oCFqZEvwwVefAhBe/xrq FnpCW2zZoDLDHViAPVajdzFDoBbmU3ntn90IVoZBkHHr5G2aVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxNRguzHh+7YiTeg1IqXnzTgtOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NmMjYwM2EtMDc1ZC0z YTI0LTg1MGYtZmYxNmY2Zjg4OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1PSmFiMQdjoWm8/No83Glf4G8XHUlwVlMgbZuTDm0wyeei61TVOU6l iVDAeejw4qyjpqXBCQYNzNQHFBWbtXXbwlYsZhZ10X9Sl66sylaEqHin8k8Ck5Ow E94ffjXLR0ZiFLGe2E5aEQvzWDjHQLwCNc9dW+dlCA/r07ngoPHFfgkgjHnxBooS 3HmS+WeLMeKN1Gsp8+1fhlmKvQOUj/2tJPQhitcPJIzlRIZLhvFXShvlsvwUDi81 HcyHml4LVzVrHNBalgKiphfXXYfajr7qOi/WWQOUlFGm0EWGF18WyB1LBaAyMLnF Ex6zbwysiQw2QgEvzepu//HXJYIy/po= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:46 2024 by rpki-client on console-ams.rpki-client.org