$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa File: cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa (raw, json) Hash identifier: DGrSVHr+P+FFGsfUlkSzsD5G1gJ21+EXbtfV+w90C3Q= Subject key identifier: 8A:00:56:ED:BA:13:32:BA:7F:71:8B:8B:CD:0B:DF:95:8A:32:C0:E9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F4FF99FB14253105D0500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397230 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:4f:f9:9f:b1:42:53:10:5d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=57a45626-3b1d-4018-80cc-00f0ebda9c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:10:ff:73:87:1f:2b:6d:ca:53:7b:d0:67: 3e:ff:c5:79:3e:38:eb:43:40:9a:77:b8:4c:f9:51: 8e:64:fc:26:83:bf:8a:27:38:99:fa:d0:a2:7b:4b: fa:83:e9:bc:1b:2c:7b:b5:28:79:bd:b5:9b:82:75: 04:45:9a:77:0b:af:2b:d1:34:32:44:92:cb:54:50: 94:58:e0:0a:14:ab:00:f1:17:d7:49:75:7a:e8:2f: 76:b8:5a:14:98:d4:53:af:73:a9:2f:5b:7f:5b:77: d6:6b:c2:7f:a3:5a:e9:ca:89:19:3d:0e:9c:d8:8d: 30:cd:8e:69:57:dc:e6:af:d7:f3:52:7a:9e:e4:01: d5:35:2e:54:53:1f:b6:29:26:86:2b:2d:cd:12:2e: 72:f1:3b:45:7c:07:b0:14:b5:1f:4f:5d:ba:2f:c9: bc:2f:5d:dc:f3:a2:e4:c8:54:7f:79:a5:fa:d8:bc: 06:2f:ca:de:bb:98:9f:3f:4c:fd:7b:4c:72:57:c1: a0:0d:da:f7:c0:05:6d:94:09:d4:a8:bc:e6:15:9d: 08:a7:da:d0:9a:16:90:ac:38:d8:dc:11:46:de:66: 1d:3c:ef:0d:52:82:2f:dd:51:e2:24:58:c1:d5:3e: bc:9b:a0:01:00:7c:aa:66:49:b5:52:66:d8:0b:ee: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:00:56:ED:BA:13:32:BA:7F:71:8B:8B:CD:0B:DF:95:8A:32:C0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b3:2b:97:33:03:73:46:89:fa:ee:0e:0c:9a:d8:f0:e1:1f: 46:98:11:56:9b:92:23:15:7a:33:67:62:81:05:12:06:b7:ea: 9a:24:e8:3b:ff:30:a2:cb:97:64:42:fa:69:a2:86:be:18:62: 5e:96:88:f2:3a:97:dd:19:84:0f:6f:45:7a:3e:8a:2d:1a:15: bf:24:15:44:f8:39:f4:7d:9f:b1:4c:64:2b:e1:41:d2:98:09: 84:fd:e7:37:a3:56:b1:fc:c2:37:fc:c4:a6:ca:79:a5:7f:2f: b1:c2:d0:73:b7:3a:93:77:c7:d0:31:e7:f2:f9:cb:0e:bf:5a: b8:4e:a2:0b:2e:c0:26:77:82:06:25:d8:fb:b1:21:6a:fc:fb: 9e:dd:fc:82:e9:a3:e8:44:a7:2c:e1:89:9e:b1:7c:a4:69:f4: 28:13:47:7a:cf:38:28:26:91:63:cd:58:d2:21:9b:b7:fb:87: 0a:73:e0:80:14:7f:99:77:0a:0c:20:7f:89:50:af:24:9e:33: 8b:40:89:ba:d4:bb:3f:7e:41:5e:e2:3e:59:af:3a:58:9e:74: 64:c2:74:0a:e8:d1:85:a3:ff:43:21:11:04:48:a9:73:c1:60: 83:85:8b:17:f4:e6:fe:75:6b:52:e7:da:b8:1c:b4:4e:49:0c: 50:24:e6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP0/5n7FCUxBdBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTdhNDU2MjYtM2IxZC00MDE4LTgwY2MtMDBmMGViZGE5YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9MQ/3OHHyttylN70Gc+/8V5PjjrQ0Cad7hM +VGOZPwmg7+KJziZ+tCie0v6g+m8Gyx7tSh5vbWbgnUERZp3C68r0TQyRJLLVFCU WOAKFKsA8RfXSXV66C92uFoUmNRTr3OpL1t/W3fWa8J/o1rpyokZPQ6c2I0wzY5p V9zmr9fzUnqe5AHVNS5UUx+2KSaGKy3NEi5y8TtFfAewFLUfT126L8m8L13c86Lk yFR/eaX62LwGL8reu5ifP0z9e0xyV8GgDdr3wAVtlAnUqLzmFZ0Ip9rQmhaQrDjY 3BFG3mYdPO8NUoIv3VHiJFjB1T68m6ABAHyqZkm1UmbYC+753QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoAVu26EzK6f3GLi80L35WKMsDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2M2Mzc2ZmQtNmIxZi0z MDkzLWIwZDAtZDI4OGI3YWY4ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKzK5czA3NGifruDgya2PDhH0aYEVabkiMVejNnYoEFEga36pok6Dv/ MKLLl2RC+mmihr4YYl6WiPI6l90ZhA9vRXo+ii0aFb8kFUT4OfR9n7FMZCvhQdKY CYT95zejVrH8wjf8xKbKeaV/L7HC0HO3OpN3x9Ax5/L5yw6/WrhOogsuwCZ3ggYl 2PuxIWr8+57d/ILpo+hEpyzhiZ6xfKRp9CgTR3rPOCgmkWPNWNIhm7f7hwpz4IAU f5l3Cgwgf4lQrySeM4tAibrUuz9+QV7iPlmvOliedGTCdAro0YWj/0MhEQRIqXPB YIOFixf05v51a1Ln2rgctE5JDFAk5pI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:03 2024 by rpki-client on console-ams.rpki-client.org