$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa File: cf81221b-0a41-37b9-9909-8340202ab1e1.roa (raw, json) Hash identifier: u9BYvfBrqtZ7q5kSJiOq3cTy3qAnrRQ9kxlZfB306LQ= Subject key identifier: 92:A8:AB:35:46:2E:18:6F:69:0B:40:12:C6:E8:C1:02:97:4A:93:9F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847527C8E7C1F67E73054FC3480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa Signing time: Tue 24 Sep 2024 16:27:12 +0000 ROA not before: Tue 24 Sep 2024 16:27:12 +0000 ROA not after: Mon 23 Dec 2024 17:27:12 +0000 asID: 397221 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:7c:8e:7c:1f:67:e7:30:54:fc:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 24 16:27:12 2024 GMT Not After : Dec 23 17:27:12 2024 GMT Subject: CN=2c254261-0ee4-46cd-b633-27af6a5b6f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:66:99:af:93:dc:f4:cc:97:3f:cf:35:23: 43:ff:02:c6:90:19:5b:36:88:6d:5b:62:27:9c:e1: 94:b2:a1:45:a5:30:f5:09:d2:f3:04:3b:03:7a:5b: 55:cb:f4:1f:6d:59:aa:17:e4:2e:dd:c8:dd:33:1e: 8e:98:ab:5c:95:28:c1:7d:20:9d:55:b6:c3:2b:b7: 25:69:28:e8:13:02:ad:1e:15:0c:12:87:69:8a:5b: ca:97:80:b5:36:c2:31:67:e8:1f:f6:7a:63:a3:cc: 83:13:34:46:e5:1d:96:25:db:98:d6:8a:66:a9:25: 2b:94:37:b1:b9:91:27:6f:48:be:5c:ae:bb:06:99: 2e:d0:aa:4a:b7:3a:15:2f:f4:bc:d8:7d:19:69:8c: b4:d0:d4:cb:10:e4:bf:39:37:a6:60:36:c5:24:20: 40:8a:ee:49:dc:46:76:00:a2:03:6a:fe:f9:eb:32: 51:d3:4e:8d:14:00:c0:90:28:0f:05:37:37:43:fc: 5a:19:b4:57:09:ee:9c:a5:a4:e8:3f:0c:0d:0e:48: 58:12:e2:7a:ba:3a:60:90:80:a5:62:f0:5e:59:a8: a4:3e:4a:5e:52:8e:5d:5e:49:71:f3:34:49:8a:b0: c2:39:0d:f2:5d:13:63:65:2c:3c:c9:e7:46:c0:e8: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A8:AB:35:46:2E:18:6F:69:0B:40:12:C6:E8:C1:02:97:4A:93:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bb:40:88:60:67:37:af:34:ea:97:33:ad:97:1f:f9:86:80: e3:d6:2e:00:6f:41:40:8a:15:bf:ba:d6:a0:dd:17:4f:f0:4c: c2:ac:d0:50:40:dd:05:ef:2e:b3:54:0d:e2:e1:9f:3b:3b:6b: d1:58:d3:11:80:1c:82:39:f5:64:e3:c0:4c:6c:53:07:53:ff: b5:b7:0f:e6:a4:c9:21:99:73:8c:5c:03:ac:76:d1:87:26:60: ca:2d:79:e2:7d:3e:59:76:f9:e6:9d:ae:f5:f2:af:50:2a:6b: 94:44:60:16:fc:b7:68:68:1e:ce:00:6f:d2:94:a2:97:e4:f9: 44:db:82:e5:6b:95:fa:09:3c:49:da:de:0c:84:11:e4:d8:b6: f2:f0:55:73:8e:cd:b3:d6:70:00:7e:97:d1:ec:1d:55:18:6b: 79:5c:97:c8:e8:15:c8:01:67:b6:1b:58:ed:5a:b0:eb:99:b2: 41:a5:5d:23:2b:21:c9:da:c1:d6:15:d4:16:5b:06:e7:ba:3f: a1:84:54:98:5a:99:f3:a7:71:07:5e:a9:b3:df:83:db:19:6c: c2:38:3d:fc:90:d3:5b:45:eb:a3:85:84:fe:78:9f:84:69:59: d9:28:50:04:27:2e:b1:9f:85:3c:0e:6c:6b:c3:52:8e:bc:ae: a7:13:72:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSfI58H2fnMFT8NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MDkyNDE2MjcxMloXDTI0MTIyMzE3MjcxMlowLzEtMCsGA1UEAxMk MmMyNTQyNjEtMGVlNC00NmNkLWI2MzMtMjdhZjZhNWI2ZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAualmma+T3PTMlz/PNSND/wLGkBlbNohtW2In nOGUsqFFpTD1CdLzBDsDeltVy/QfbVmqF+Qu3cjdMx6OmKtclSjBfSCdVbbDK7cl aSjoEwKtHhUMEodpilvKl4C1NsIxZ+gf9npjo8yDEzRG5R2WJduY1opmqSUrlDex uZEnb0i+XK67Bpku0KpKtzoVL/S82H0ZaYy00NTLEOS/OTemYDbFJCBAiu5J3EZ2 AKIDav756zJR006NFADAkCgPBTc3Q/xaGbRXCe6cpaToPwwNDkhYEuJ6ujpgkICl YvBeWaikPkpeUo5dXklx8zRJirDCOQ3yXRNjZSw8yedGwOiYhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKoqzVGLhhvaQtAEsbowQKXSpOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2Y4MTIyMWItMGE0MS0z N2I5LTk5MDktODM0MDIwMmFiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy7QIhgZzevNOqXM62XH/mGgOPWLgBvQUCKFb+61qDdF0/wTMKs0FBA 3QXvLrNUDeLhnzs7a9FY0xGAHII59WTjwExsUwdT/7W3D+akySGZc4xcA6x20Ycm YMoteeJ9Pll2+eadrvXyr1Aqa5REYBb8t2hoHs4Ab9KUopfk+UTbguVrlfoJPEna 3gyEEeTYtvLwVXOOzbPWcAB+l9HsHVUYa3lcl8joFcgBZ7YbWO1asOuZskGlXSMr IcnawdYV1BZbBue6P6GEVJhamfOncQdeqbPfg9sZbMI4PfyQ01tF66OFhP54n4Rp WdkoUAQnLrGfhTwObGvDUo68rqcTclY= -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:16 2024 by rpki-client on console-fra.rpki-client.org