$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa File: 828ba51e-8e44-3e85-b79a-94a913c838e4.roa (raw, json) Hash identifier: GaMZ8Rwxe9fofEjDyJkFtGHIACsI0CxmmV9voQjJJfI= Subject key identifier: ED:EB:57:CE:62:F2:EE:FD:B7:B4:89:40:17:01:D2:A4:29:80:6D:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F0160FA6372164544D2580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 397239 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:16:0f:a6:37:21:64:54:4d:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=670328e6-1e44-41a0-929a-f710b01e994e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:85:7a:ee:78:b0:0d:ed:2e:e2:47:7a:61: b5:2c:71:9f:98:c1:07:61:42:7c:df:a3:99:5e:f1: 7f:16:0e:1e:83:3e:51:e6:f5:84:88:2d:44:7c:86: f6:69:95:0a:51:dc:10:e2:ad:f0:64:da:cd:f9:d8: 40:7d:17:82:d0:5d:88:35:05:f0:81:81:87:d1:97: a3:cf:b3:15:69:bb:4e:20:39:3a:43:45:51:26:64: da:18:93:16:38:db:0b:57:28:0c:fc:f6:56:ec:46: ca:9b:09:a8:ca:b9:34:8a:f3:0b:87:7d:a4:3e:c4: 04:cb:1c:d1:99:26:9f:08:0f:67:21:ad:dc:f6:30: 1e:37:d3:75:bb:10:03:03:51:8c:df:79:32:12:0d: 96:1f:af:52:81:84:dd:dd:cd:bc:ed:f2:98:8c:89: be:50:19:c3:66:af:c8:1a:64:ec:05:ec:14:96:54: a3:80:de:3a:e5:cc:fc:e6:18:f1:0f:e0:5f:c3:7c: 54:e4:1c:28:6d:e7:69:05:c3:62:c1:a8:82:83:5e: 30:79:d8:9e:1a:05:b4:75:30:4f:d2:2d:0f:b2:f3: ac:d7:75:73:3b:ba:46:c8:9b:11:32:38:f7:82:e9: c1:d2:12:93:a2:e4:b3:c7:fd:04:2b:b0:56:96:76: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:57:CE:62:F2:EE:FD:B7:B4:89:40:17:01:D2:A4:29:80:6D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2e:a8:0a:21:a3:da:d3:1c:1d:5a:ba:6b:96:f9:3d:a6:d9: 19:07:b3:56:a5:6e:0c:04:2e:8f:49:27:c4:12:6f:f4:1f:85: af:85:88:64:5c:f1:f3:42:03:39:9b:0a:ef:08:40:fe:e1:ec: df:93:0f:ed:da:c0:c1:19:95:31:08:c3:1b:5b:02:d1:a6:d6: e2:05:72:23:7e:73:d8:48:0d:0a:1d:e3:0b:26:f5:24:36:7b: 63:2b:f6:1a:34:81:de:3c:f6:44:d5:8e:0c:a2:31:68:8a:36: 8f:f6:6c:bb:4d:08:d0:8b:ca:ba:81:42:14:0e:27:ad:58:34: 2a:4d:0a:b6:21:cb:3e:56:ff:88:ee:19:d0:7f:0b:5a:d0:6b: 33:33:55:4c:f5:c3:ab:d9:e8:17:cc:b9:8e:cc:8c:05:18:b5: 5b:e4:7d:dd:78:00:0b:6d:ac:4f:c9:72:b2:8c:58:5d:da:5f: 3f:db:ba:43:d7:f9:bd:c8:86:d2:44:93:38:eb:73:40:44:1f: 95:ae:dc:22:aa:4d:07:3e:10:d7:b3:f1:74:a2:3b:19:3f:72: d6:30:cc:c8:3d:76:a7:a5:aa:4e:d2:00:d3:7d:9b:0a:1d:d5: a7:03:b0:11:12:3f:af:65:ac:a3:0a:23:83:bf:57:71:cb:18: 93:da:9e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BYPpjchZFRNJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NjcwMzI4ZTYtMWU0NC00MWEwLTkyOWEtZjcxMGIwMWU5OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgKFeu54sA3tLuJHemG1LHGfmMEHYUJ836OZ XvF/Fg4egz5R5vWEiC1EfIb2aZUKUdwQ4q3wZNrN+dhAfReC0F2INQXwgYGH0Zej z7MVabtOIDk6Q0VRJmTaGJMWONsLVygM/PZW7EbKmwmoyrk0ivMLh32kPsQEyxzR mSafCA9nIa3c9jAeN9N1uxADA1GM33kyEg2WH69SgYTd3c287fKYjIm+UBnDZq/I GmTsBewUllSjgN465cz85hjxD+Bfw3xU5BwobedpBcNiwaiCg14wedieGgW0dTBP 0i0PsvOs13VzO7pGyJsRMjj3gunB0hKTouSzx/0EK7BWlnaGKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3rV85i8u79t7SJQBcB0qQpgG1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODI4YmE1MWUtOGU0NC0z ZTg1LWI3OWEtOTRhOTEzYzgzOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsuqAoho9rTHB1aumuW+T2m2RkHs1albgwELo9JJ8QSb/Qfha+FiGRc 8fNCAzmbCu8IQP7h7N+TD+3awMEZlTEIwxtbAtGm1uIFciN+c9hIDQod4wsm9SQ2 e2Mr9ho0gd489kTVjgyiMWiKNo/2bLtNCNCLyrqBQhQOJ61YNCpNCrYhyz5W/4ju GdB/C1rQazMzVUz1w6vZ6BfMuY7MjAUYtVvkfd14AAttrE/JcrKMWF3aXz/bukPX +b3IhtJEkzjrc0BEH5Wu3CKqTQc+ENez8XSiOxk/ctYwzMg9dqelqk7SANN9mwod 1acDsBESP69lrKMKI4O/V3HLGJPanvE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:57 2025 by rpki-client