$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dd5bd45-10b1-386c-9c16-6af5961dc196.roa File: 8dd5bd45-10b1-386c-9c16-6af5961dc196.roa (raw, json) Hash identifier: QUEzBe1aOzJrr7DDO0Fwip2Lkq7B1f4f2EqhnFWU8TE= Subject key identifier: 22:3D:F0:A8:85:2B:8F:D1:C2:87:FD:12:7E:54:FB:A1:15:63:87:38 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858479D76D3A965A1A18AD8DAA880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dd5bd45-10b1-386c-9c16-6af5961dc196.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 397217 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:d3:a9:65:a1:a1:8a:d8:da:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=be47af66-0585-4aa9-aada-562a4c856160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0d:90:11:a2:d0:29:68:3f:8a:27:9f:af:e6: ed:32:3d:d4:98:1f:ef:60:66:97:1c:06:dc:e6:12: dd:e6:be:31:49:e7:9e:dd:79:dc:22:c1:a5:7a:94: 71:2d:58:6c:d8:be:1c:f6:72:75:61:48:cc:ac:43: 23:6a:c8:b9:12:f4:69:ab:e7:9f:14:15:e8:52:81: ff:7c:8d:d9:c2:71:69:4e:84:5d:f9:09:0e:d6:96: bd:be:f0:c5:03:f3:73:27:e3:4f:39:21:2e:a1:31: 49:9d:69:66:ee:1d:79:50:37:bc:3b:61:2a:a4:6c: 51:df:87:10:da:df:e1:05:68:82:ec:80:08:ae:84: 70:e8:6d:8c:4d:c0:58:59:a5:c8:7b:dc:31:f4:b7: 60:df:90:9c:cd:99:aa:34:f1:9b:4d:45:05:a2:e9: 6c:ff:3d:ca:c4:9e:8f:f1:f4:64:af:01:e3:f9:08: 8f:39:26:a1:7e:4c:d8:dc:02:c5:5b:06:dc:d5:38: 02:a1:94:16:8d:77:f8:e2:72:12:9f:82:29:9b:c0: d8:4e:7d:fe:34:55:a9:b8:2e:66:67:a0:ca:35:ff: 37:9c:05:cb:40:ea:85:cd:8e:2c:7e:34:65:da:7b: 6b:7c:59:10:99:9e:e0:dc:12:eb:43:a5:b1:b1:4e: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:F0:A8:85:2B:8F:D1:C2:87:FD:12:7E:54:FB:A1:15:63:87:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8dd5bd45-10b1-386c-9c16-6af5961dc196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:be:4e:1a:83:aa:cc:35:10:b4:77:09:5e:59:41:8d:d3:dd: ad:1b:5e:23:73:82:8b:38:31:2b:fe:ae:c7:38:96:f7:73:1c: d7:80:ce:78:94:45:4b:4a:5e:f9:02:ac:f6:0c:13:38:b7:cb: 81:aa:0d:4b:52:ab:35:59:84:2e:2b:f9:32:89:61:bc:f7:aa: 2c:f6:c8:65:0e:99:5e:94:61:ff:89:19:d4:5f:07:0a:2f:f6: 0f:2c:99:b2:2c:07:9d:ca:9b:ee:f2:46:5e:e5:0c:2c:b2:88: 32:f5:c0:e3:ea:7b:45:94:c8:d3:95:93:5e:b7:bd:fc:1f:a6: c4:7d:83:8c:97:f2:1d:d1:16:d5:f6:6a:48:ae:4e:ad:fb:55: 60:2c:bc:b4:01:bb:a4:30:78:e5:4c:e2:02:21:76:0f:b3:a0: 48:a1:05:ee:31:1a:3b:d7:d1:8e:90:79:c2:40:e3:07:c6:66: 93:e1:37:df:20:f3:03:8a:8b:bc:a4:00:ea:84:75:fe:9a:9c: 0b:92:17:ff:33:7e:c7:6a:b1:1a:58:44:fc:0e:e6:e5:d4:b7: cf:a8:85:f3:a2:c7:e7:7d:48:6e:2b:9c:0c:6e:84:9d:fd:ef: d1:97:65:f1:19:ef:78:ff:f0:5a:ef:91:ee:6d:37:99:e6:f0: d2:2a:d4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddtOpZaGhitjaqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YmU0N2FmNjYtMDU4NS00YWE5LWFhZGEtNTYyYTRjODU2MTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw2QEaLQKWg/iiefr+btMj3UmB/vYGaXHAbc 5hLd5r4xSeee3XncIsGlepRxLVhs2L4c9nJ1YUjMrEMjasi5EvRpq+efFBXoUoH/ fI3ZwnFpToRd+QkO1pa9vvDFA/NzJ+NPOSEuoTFJnWlm7h15UDe8O2EqpGxR34cQ 2t/hBWiC7IAIroRw6G2MTcBYWaXIe9wx9Ldg35CczZmqNPGbTUUFouls/z3KxJ6P 8fRkrwHj+QiPOSahfkzY3ALFWwbc1TgCoZQWjXf44nISn4Ipm8DYTn3+NFWpuC5m Z6DKNf83nAXLQOqFzY4sfjRl2ntrfFkQmZ7g3BLrQ6WxsU4WJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI98KiFK4/Rwof9En5U+6EVY4c4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGRkNWJkNDUtMTBiMS0z ODZjLTljMTYtNmFmNTk2MWRjMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS+ThqDqsw1ELR3CV5ZQY3T3a0bXiNzgos4MSv+rsc4lvdzHNeAzniU RUtKXvkCrPYMEzi3y4GqDUtSqzVZhC4r+TKJYbz3qiz2yGUOmV6UYf+JGdRfBwov 9g8smbIsB53Km+7yRl7lDCyyiDL1wOPqe0WUyNOVk163vfwfpsR9g4yX8h3RFtX2 akiuTq37VWAsvLQBu6QweOVM4gIhdg+zoEihBe4xGjvX0Y6QecJA4wfGZpPhN98g 8wOKi7ykAOqEdf6anAuSF/8zfsdqsRpYRPwO5uXUt8+ohfOix+d9SG4rnAxuhJ39 79GXZfEZ73j/8Frvke5tN5nm8NIq1OE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:05:38 2024 by rpki-client on console-fra.rpki-client.org