$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d11bb631-7f57-3620-89a9-47881f6b1565.roa File: d11bb631-7f57-3620-89a9-47881f6b1565.roa (raw, json) Hash identifier: rSXbDz1yCvlpVbc2CSl6WLDvA3km6aEGIElnHKDgeu4= Subject key identifier: 14:D1:B8:44:05:0C:47:F6:DE:B6:0B:D8:E8:B8:A6:9C:D2:5F:6F:65 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F011D2E7201D4126F67080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d11bb631-7f57-3620-89a9-47881f6b1565.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 397229 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:11:d2:e7:20:1d:41:26:f6:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=3e0ec24e-994f-4202-9602-205c8928e591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:fd:dc:48:9e:e9:93:c0:3d:09:18:f0:08: ac:87:f8:c5:54:a5:c5:b4:b1:83:dd:45:1a:e2:9c: 3e:e8:a4:8f:79:97:4d:5c:1f:5e:f3:6b:e8:62:b7: 72:27:3e:fd:4b:ac:a1:3a:2a:b2:18:fb:d4:09:f9: 91:84:f2:8f:27:fb:ab:79:41:c9:d5:5a:cf:8d:82: 73:2b:f6:3f:d7:9f:e4:94:ca:f8:ae:0e:6f:8c:6f: c1:ee:2f:4a:c0:8f:35:32:65:9d:e2:53:fc:21:0f: ac:fa:2e:8f:bf:4a:18:dc:4b:e3:90:ea:83:65:9c: b3:1f:a1:08:be:bf:e7:e3:18:44:42:88:f6:e9:04: c6:3c:74:ac:a6:9c:a5:c4:ef:67:4e:62:3f:cc:14: 10:5f:b2:ab:c1:58:15:40:16:25:81:04:95:7f:6b: 30:14:a5:73:89:e6:3f:5b:38:70:22:b8:1c:55:95: 8a:45:79:dd:27:f6:b0:56:b5:2c:31:fe:fa:57:bf: 0c:90:3d:31:59:70:ab:fa:7a:a8:41:95:1e:3c:15: f9:eb:9a:68:1c:ca:e9:99:63:a8:aa:6f:1b:6e:a3: c8:52:7a:b7:2b:0d:b3:db:0f:e0:bf:37:f0:e1:c2: aa:93:92:c3:3e:f6:da:c7:d1:3d:03:13:30:58:53: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D1:B8:44:05:0C:47:F6:DE:B6:0B:D8:E8:B8:A6:9C:D2:5F:6F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d11bb631-7f57-3620-89a9-47881f6b1565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:99:15:c2:e0:46:0e:94:c3:9a:f4:7a:21:a6:bd:c2:3e:e7: 29:85:8b:d7:7f:ba:a7:40:6b:65:69:c2:12:f2:8e:ae:f4:25: bb:e9:10:2d:7d:dd:1c:e3:f8:67:b8:87:ec:33:56:f6:9e:48: b1:72:01:c9:79:9b:f0:51:9b:63:45:33:76:fe:66:b5:5b:9c: 10:a3:3f:ba:9c:5c:64:69:c8:3f:ef:f7:18:1e:0b:c5:41:f7: f6:10:97:87:25:9c:4a:25:44:ba:c4:d1:db:01:c4:4e:b0:f7: b5:e2:f4:33:0b:0d:68:85:3a:80:90:db:9f:50:a8:86:3a:9e: 59:07:69:23:ec:8b:60:6c:2a:ae:77:d9:13:2c:81:9a:7a:5e: 2e:0d:0c:57:03:99:be:7a:e0:d0:ed:38:44:20:35:4c:72:15: 9c:65:74:06:08:9c:86:79:ca:5f:05:9e:9e:36:bf:17:12:17: f1:8f:10:5a:eb:4e:29:9b:8c:56:07:d4:6f:f2:a9:77:e3:98: ac:8d:95:e8:a0:13:f6:fc:19:00:df:f9:d3:ac:05:93:87:81: 91:98:32:cc:24:19:48:ee:08:e6:69:0d:d1:53:bd:12:8c:09: 8e:c8:f4:0e:c3:9c:bc:05:45:2a:48:c5:59:06:c4:1b:e7:a2: 0b:80:f5:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BHS5yAdQSb2cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk M2UwZWMyNGUtOTk0Zi00MjAyLTk2MDItMjA1Yzg5MjhlNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltr93Eie6ZPAPQkY8Aish/jFVKXFtLGD3UUa 4pw+6KSPeZdNXB9e82voYrdyJz79S6yhOiqyGPvUCfmRhPKPJ/ureUHJ1VrPjYJz K/Y/15/klMr4rg5vjG/B7i9KwI81MmWd4lP8IQ+s+i6Pv0oY3EvjkOqDZZyzH6EI vr/n4xhEQoj26QTGPHSsppylxO9nTmI/zBQQX7KrwVgVQBYlgQSVf2swFKVzieY/ WzhwIrgcVZWKRXndJ/awVrUsMf76V78MkD0xWXCr+nqoQZUePBX565poHMrpmWOo qm8bbqPIUnq3Kw2z2w/gvzfw4cKqk5LDPvbax9E9AxMwWFNwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTRuEQFDEf23rYL2Oi4ppzSX29lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDExYmI2MzEtN2Y1Ny0z NjIwLTg5YTktNDc4ODFmNmIxNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOZFcLgRg6Uw5r0eiGmvcI+5ymFi9d/uqdAa2VpwhLyjq70JbvpEC19 3Rzj+Ge4h+wzVvaeSLFyAcl5m/BRm2NFM3b+ZrVbnBCjP7qcXGRpyD/v9xgeC8VB 9/YQl4clnEolRLrE0dsBxE6w97Xi9DMLDWiFOoCQ259QqIY6nlkHaSPsi2BsKq53 2RMsgZp6Xi4NDFcDmb564NDtOEQgNUxyFZxldAYInIZ5yl8Fnp42vxcSF/GPEFrr TimbjFYH1G/yqXfjmKyNleigE/b8GQDf+dOsBZOHgZGYMswkGUjuCOZpDdFTvRKM CY7I9A7DnLwFRSpIxVkGxBvnoguA9e0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:15 2025 by rpki-client