$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af620be1-e1af-38e3-a957-f4f4c1ab1783.roa File: af620be1-e1af-38e3-a957-f4f4c1ab1783.roa (raw, json) Hash identifier: 9iavxQ6Mz7S5WQqNILWMnsB8U2kiTqfYLPn6xn2dOxc= Subject key identifier: 20:62:1D:AF:0C:9B:08:83:28:DC:BE:06:9E:57:38:82:10:A8:76:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F72105A9199E2D01B14E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af620be1-e1af-38e3-a957-f4f4c1ab1783.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397221 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:72:10:5a:91:99:e2:d0:1b:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=c92f9c58-ebbe-44c2-bd70-5155118a327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:37:a0:22:c8:01:00:0d:de:ff:20:26:40: 81:09:72:33:15:74:04:5d:16:2f:6e:cd:e6:28:a7: 94:c0:2a:93:ac:e3:9f:b5:18:64:76:f9:df:8d:a2: 46:f0:3f:c9:ce:fa:45:aa:78:a8:c2:7e:18:2f:84: 61:26:46:d1:cd:98:59:71:e6:0d:9a:99:e9:4f:03: 91:13:0b:b8:28:c0:8a:60:2b:19:8b:31:bf:21:6e: 50:b9:1e:1c:be:41:3d:bb:54:54:1f:0f:b7:85:d0: 2c:0f:be:3f:11:28:fc:d2:48:7b:6d:6e:e1:6f:06: a0:6e:d0:23:aa:cd:3e:69:9c:f8:49:63:8d:e5:0b: a9:bd:59:44:37:f1:61:ac:86:f0:f2:ae:28:d1:bf: ef:22:18:5d:60:3e:ec:fd:80:82:89:e2:79:50:e2: 11:bc:04:c0:0b:b3:8f:87:c0:fc:bb:58:62:fa:dd: ed:f8:9b:dc:60:01:1b:38:b5:9f:4a:72:d1:aa:95: 29:a5:44:a9:34:a7:64:0c:2a:49:5b:4c:12:8f:02: 4c:54:54:b3:d6:fc:4f:c9:26:35:55:60:c0:7e:3f: bd:71:07:6a:c2:37:fe:c0:8b:25:4a:75:d8:7d:cb: 37:75:9c:8d:06:8d:da:1a:c2:92:17:25:dc:13:19: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:1D:AF:0C:9B:08:83:28:DC:BE:06:9E:57:38:82:10:A8:76:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af620be1-e1af-38e3-a957-f4f4c1ab1783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:64:fc:0c:48:97:a5:ef:0a:40:59:a0:1d:d3:ec:5c:73:3d: 4f:09:c7:4b:7a:ea:95:c2:ad:2a:4a:fd:9e:43:2f:67:2a:a7: a0:9f:01:c1:49:85:a6:65:20:28:fc:6d:bb:97:8c:44:bb:31: 8e:7d:23:4f:90:f7:47:1f:2e:4f:8b:1a:b3:f4:09:48:e6:2d: 1c:15:e8:aa:08:15:cb:fa:bc:aa:1b:43:fc:c3:46:4e:d9:da: 3d:88:bd:ee:a6:4f:78:5d:2e:80:ae:46:7d:aa:0d:26:9a:42: b2:75:06:6e:af:10:64:6a:0e:f8:2e:f9:1e:39:22:aa:06:a9: 6d:01:63:d0:8b:9e:ea:5b:12:09:b5:09:3c:d9:57:b3:59:6e: 4c:78:79:69:ee:ee:71:0c:2e:43:16:33:64:2d:ce:65:7c:06: 59:37:0d:34:c3:66:ff:54:a5:87:97:91:0a:d3:3e:40:2e:d3: 74:19:10:21:f4:29:b3:b0:00:db:d1:07:2c:fd:79:6b:15:21: ed:32:34:b2:b6:0f:7d:af:15:67:65:d3:6d:f9:b7:09:1c:c2: da:84:f0:e5:6c:d3:43:c9:f8:0c:a4:b2:5c:c9:80:f1:1b:11: cd:79:85:37:60:99:1b:11:06:6b:e2:a9:a9:20:e5:82:c5:da: 08:bb:69:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3IQWpGZ4tAbFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzkyZjljNTgtZWJiZS00NGMyLWJkNzAtNTE1NTExOGEzMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS43oCLIAQAN3v8gJkCBCXIzFXQEXRYvbs3m KKeUwCqTrOOftRhkdvnfjaJG8D/JzvpFqniown4YL4RhJkbRzZhZceYNmpnpTwOR Ewu4KMCKYCsZizG/IW5QuR4cvkE9u1RUHw+3hdAsD74/ESj80kh7bW7hbwagbtAj qs0+aZz4SWON5QupvVlEN/FhrIbw8q4o0b/vIhhdYD7s/YCCieJ5UOIRvATAC7OP h8D8u1hi+t3t+JvcYAEbOLWfSnLRqpUppUSpNKdkDCpJW0wSjwJMVFSz1vxPySY1 VWDAfj+9cQdqwjf+wIslSnXYfcs3dZyNBo3aGsKSFyXcExmS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBiHa8MmwiDKNy+Bp5XOIIQqHadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY2MjBiZTEtZTFhZi0z OGUzLWE5NTctZjRmNGMxYWIxNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZk/AxIl6XvCkBZoB3T7FxzPU8Jx0t66pXCrSpK/Z5DL2cqp6CfAcFJ haZlICj8bbuXjES7MY59I0+Q90cfLk+LGrP0CUjmLRwV6KoIFcv6vKobQ/zDRk7Z 2j2Ive6mT3hdLoCuRn2qDSaaQrJ1Bm6vEGRqDvgu+R45IqoGqW0BY9CLnupbEgm1 CTzZV7NZbkx4eWnu7nEMLkMWM2QtzmV8Blk3DTTDZv9UpYeXkQrTPkAu03QZECH0 KbOwANvRByz9eWsVIe0yNLK2D32vFWdl0235twkcwtqE8OVs00PJ+AykslzJgPEb Ec15hTdgmRsRBmviqakg5YLF2gi7aeQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:02 2024 by rpki-client on console-ams.rpki-client.org