$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa File: 8a0e1bff-f033-3495-a807-25f1c3db0753.roa (raw, json) Hash identifier: 4IV+hxhn5GXngDDJy/YReQRfQR26DgH8IhuiJZq4iMY= Subject key identifier: 30:E7:AF:DE:A6:33:84:36:61:07:7B:D8:10:BB:FF:0B:6A:4B:CA:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F71AEC5C9FBB7E8EFD850 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397214 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:71:ae:c5:c9:fb:b7:e8:ef:d8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=c2d2aa7d-7b09-4de2-ad5a-f0a368cf86c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:48:35:f5:10:5f:96:9f:0e:91:b6:84:76: 29:f3:a4:3f:a6:9f:34:5c:75:18:4c:fc:02:f9:02: 53:fe:fd:cb:c4:23:db:7e:81:0e:5d:4c:21:c9:c7: 84:c3:cf:de:68:b5:00:62:51:1a:01:b6:f9:67:97: e2:8b:2d:52:6a:40:47:ec:1b:25:ed:4b:8f:e0:e9: c8:cc:6c:06:61:59:47:84:ad:f3:16:9d:f0:5d:83: 47:99:e9:c2:07:e3:2a:d1:ab:25:b6:92:ba:3a:e3: 8b:d9:e7:d8:40:68:b3:fd:02:74:de:83:f6:52:aa: 32:50:99:a1:4c:5d:6e:09:d8:47:fe:35:7d:c8:9a: 8b:9e:29:fa:14:57:ff:95:c9:8d:e4:c8:66:12:77: d4:bd:3b:73:4e:a7:7e:7c:e7:6d:e0:23:76:8f:1a: 57:51:06:8f:6d:e3:43:46:e6:60:90:4b:ac:39:cf: e2:9f:87:af:a9:20:80:93:f0:90:47:26:12:dc:2a: 18:06:ff:ae:90:c7:d4:c7:61:83:49:c8:28:8f:a6: 52:e4:cf:52:cb:00:0a:e4:bf:c9:ff:32:e5:dd:66: 59:b9:ac:4e:56:06:f5:82:57:56:34:04:79:9a:66: bd:5c:26:21:4e:a5:29:51:46:00:24:68:cf:d0:4e: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E7:AF:DE:A6:33:84:36:61:07:7B:D8:10:BB:FF:0B:6A:4B:CA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a0e1bff-f033-3495-a807-25f1c3db0753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a4:1e:ca:d1:cc:24:c7:68:e8:15:36:73:95:ef:87:02:c8: ca:f8:2a:41:0b:5a:f5:b0:10:e3:bc:6e:07:f9:77:97:12:3f: a1:e0:56:93:b2:dc:83:26:78:77:77:10:3f:c0:29:90:d5:ad: cb:e7:5d:09:31:50:30:7c:e1:c8:35:1e:74:5f:ea:ff:5b:4d: 22:c1:7a:f6:39:4f:d8:7b:b5:7b:6e:a8:84:22:43:77:fc:17: b1:e0:b3:61:de:89:5d:1a:ce:20:2c:5a:04:ff:42:8f:15:ca: 6e:39:0b:23:cf:da:a3:c2:45:e0:1f:88:40:8e:7a:2d:dd:29: 22:1b:b9:0f:9b:9f:be:e1:28:38:35:25:e6:8c:45:5e:69:32: f8:21:02:8e:69:59:93:42:6e:e4:e7:7a:69:a8:9d:68:6f:47: b6:34:c3:a6:e6:1e:41:33:a2:15:7b:29:8e:07:05:6e:38:12: ec:a8:de:6b:7f:94:43:56:23:c4:63:25:6e:ad:bd:2b:43:09: e4:9b:35:ee:e4:62:1d:c9:c2:94:0e:a5:36:d8:8a:5b:3b:c9: 1d:32:78:f6:2e:79:c5:9d:28:28:11:9f:16:80:1b:20:dc:b0: 42:8c:8b:12:47:74:d1:88:76:2d:62:4c:6a:a7:eb:90:46:1e: ee:a7:07:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3Guxcn7t+jv2FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzJkMmFhN2QtN2IwOS00ZGUyLWFkNWEtZjBhMzY4Y2Y4NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUhINfUQX5afDpG2hHYp86Q/pp80XHUYTPwC +QJT/v3LxCPbfoEOXUwhyceEw8/eaLUAYlEaAbb5Z5fiiy1SakBH7Bsl7UuP4OnI zGwGYVlHhK3zFp3wXYNHmenCB+Mq0asltpK6OuOL2efYQGiz/QJ03oP2UqoyUJmh TF1uCdhH/jV9yJqLnin6FFf/lcmN5MhmEnfUvTtzTqd+fOdt4CN2jxpXUQaPbeND RuZgkEusOc/in4evqSCAk/CQRyYS3CoYBv+ukMfUx2GDScgoj6ZS5M9SywAK5L/J /zLl3WZZuaxOVgb1gldWNAR5mma9XCYhTqUpUUYAJGjP0E4IFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDnr96mM4Q2YQd72BC7/wtqS8oGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGEwZTFiZmYtZjAzMy0z NDk1LWE4MDctMjVmMWMzZGIwNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACukHsrRzCTHaOgVNnOV74cCyMr4KkELWvWwEOO8bgf5d5cSP6HgVpOy 3IMmeHd3ED/AKZDVrcvnXQkxUDB84cg1HnRf6v9bTSLBevY5T9h7tXtuqIQiQ3f8 F7Hgs2HeiV0aziAsWgT/Qo8Vym45CyPP2qPCReAfiECOei3dKSIbuQ+bn77hKDg1 JeaMRV5pMvghAo5pWZNCbuTnemmonWhvR7Y0w6bmHkEzohV7KY4HBW44Euyo3mt/ lENWI8RjJW6tvStDCeSbNe7kYh3JwpQOpTbYils7yR0yePYuecWdKCgRnxaAGyDc sEKMixJHdNGIdi1iTGqn65BGHu6nB8I= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:00 2024 by rpki-client on console-ams.rpki-client.org