$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cedeeb87-c004-3e96-af66-b19709b28929.roa File: cedeeb87-c004-3e96-af66-b19709b28929.roa (raw, json) Hash identifier: 1d0+dB2T9ex2FSkhPZc0X568z4+gmmrOiXV/mzVQM6A= Subject key identifier: DD:94:41:5A:66:D5:61:1A:D7:BE:D4:7E:B1:0B:77:18:E9:15:E3:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285846FCF03DECE93BCB5DFF168DC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cedeeb87-c004-3e96-af66-b19709b28929.roa Signing time: Sun 25 Aug 2024 01:00:32 +0000 ROA not before: Sun 25 Aug 2024 01:00:32 +0000 ROA not after: Sat 23 Nov 2024 02:00:32 +0000 asID: 19905 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:fc:f0:3d:ec:e9:3b:cb:5d:ff:16:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 25 01:00:32 2024 GMT Not After : Nov 23 02:00:32 2024 GMT Subject: CN=5b7c8950-006a-45c3-9d6f-5eec8342db39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:69:36:c7:58:47:c8:9b:cb:8c:6a:1f:f1: f3:6d:78:9b:99:2f:24:92:70:88:ab:0a:df:a4:ae: da:94:f6:61:70:af:e1:7f:2c:e5:f0:a7:8a:a9:6d: bd:23:79:f2:43:4e:25:ff:67:33:c6:17:28:78:83: e0:b4:23:e1:7f:9a:d8:8b:45:bd:1b:08:33:04:f3: cf:aa:f2:c9:19:ae:45:1e:68:5b:cd:f9:0b:cd:f5: 09:ec:49:2e:2c:b9:b4:8f:a2:b6:6c:aa:70:32:d9: f6:5f:66:78:0e:c3:1c:eb:b8:99:fa:1b:b9:58:6a: dc:42:4e:26:c5:96:9c:ab:ee:45:db:49:40:1e:fb: 64:d5:ab:91:b4:f9:b3:00:1e:b0:e2:51:b0:7c:c5: a2:6b:68:3e:d9:5f:5f:2e:a0:59:29:38:18:c6:c0: 22:60:89:20:f7:3a:92:8e:0b:57:4b:4f:65:13:57: d0:70:21:80:c4:cc:df:b4:f7:5b:ec:b6:1f:9a:f9: 5a:2b:65:bf:f6:c7:e8:e6:7d:85:87:4e:9a:38:65: d7:54:fe:2f:1d:b3:75:24:6b:90:ec:60:51:e5:a1: 88:dd:5b:85:78:70:55:de:40:99:a8:34:3f:31:58: ee:94:65:1a:dc:90:60:32:7e:ec:33:c9:81:36:b4: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:41:5A:66:D5:61:1A:D7:BE:D4:7E:B1:0B:77:18:E9:15:E3:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cedeeb87-c004-3e96-af66-b19709b28929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b0:ef:be:46:d2:5f:d8:d8:9c:ff:03:64:08:ff:b2:8a:6f: 7a:4c:17:2a:8f:1d:2b:46:a1:ed:db:83:30:1a:15:d6:e6:f4: e4:fe:3d:df:68:65:ce:ed:79:4e:ed:ec:ec:8a:79:b7:b0:04: 4c:d9:52:bd:7f:68:d2:4e:a3:25:3e:14:6a:f3:66:6a:5a:d5: 01:3b:2e:bd:5a:ee:0b:98:b4:7a:d4:a7:ee:02:fb:5b:6f:a4: be:4b:5a:93:82:3d:c6:11:fb:3c:a3:ce:b1:5a:c0:cd:cf:ec: 90:ea:1c:84:d6:60:fb:2c:be:6f:48:a7:97:cd:0b:25:b1:d8: 87:67:1b:d0:31:9a:89:2c:06:c4:2c:e4:bd:b4:c7:73:da:94: c7:d9:72:e3:64:f6:80:65:66:ca:d5:1f:11:7e:1e:19:d0:c0: d0:cd:0d:12:70:71:fc:e7:68:09:ed:63:62:ee:99:10:4e:55: bd:71:95:d5:1f:56:ac:48:83:f4:c6:4a:4f:39:52:a2:81:81: 1a:1a:6a:98:cd:00:3a:cf:e7:26:7b:6e:c2:0c:b7:0a:44:9a: 2e:cf:58:fe:0a:7f:b2:ab:c0:7b:50:73:bc:eb:7e:44:9d:4d: ab:a8:46:c8:fd:82:a3:95:cf:87:ca:80:85:e5:b1:8d:93:33: be:a4:d2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88D3s6TvLXf8WjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk NWI3Yzg5NTAtMDA2YS00NWMzLTlkNmYtNWVlYzgzNDJkYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwhpNsdYR8iby4xqH/HzbXibmS8kknCIqwrf pK7alPZhcK/hfyzl8KeKqW29I3nyQ04l/2czxhcoeIPgtCPhf5rYi0W9GwgzBPPP qvLJGa5FHmhbzfkLzfUJ7EkuLLm0j6K2bKpwMtn2X2Z4DsMc67iZ+hu5WGrcQk4m xZacq+5F20lAHvtk1auRtPmzAB6w4lGwfMWia2g+2V9fLqBZKTgYxsAiYIkg9zqS jgtXS09lE1fQcCGAxMzftPdb7LYfmvlaK2W/9sfo5n2Fh06aOGXXVP4vHbN1JGuQ 7GBR5aGI3VuFeHBV3kCZqDQ/MVjulGUa3JBgMn7sM8mBNrQORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2UQVpm1WEa177UfrELdxjpFeMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2VkZWViODctYzAwNC0z ZTk2LWFmNjYtYjE5NzA5YjI4OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaw775G0l/Y2Jz/A2QI/7KKb3pMFyqPHStGoe3bgzAaFdbm9OT+Pd9o Zc7teU7t7OyKebewBEzZUr1/aNJOoyU+FGrzZmpa1QE7Lr1a7guYtHrUp+4C+1tv pL5LWpOCPcYR+zyjzrFawM3P7JDqHITWYPssvm9Ip5fNCyWx2IdnG9AxmoksBsQs 5L20x3PalMfZcuNk9oBlZsrVHxF+HhnQwNDNDRJwcfznaAntY2LumRBOVb1xldUf VqxIg/TGSk85UqKBgRoaapjNADrP5yZ7bsIMtwpEmi7PWP4Kf7KrwHtQc7zrfkSd TauoRsj9gqOVz4fKgIXlsY2TM76k0iA= -----END CERTIFICATE-----Generated at Sat Sep 7 19:18:55 2024 by rpki-client on console-fra.rpki-client.org