$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1248ad2-4e19-3f12-8e21-f88672a5d98b.roa File: d1248ad2-4e19-3f12-8e21-f88672a5d98b.roa (raw, json) Hash identifier: J+k8Dq6OxcpK7dnb9Gsn90x0EaFJmqdNC3Hm+l8XCqs= Subject key identifier: 30:11:81:45:EC:08:7B:B6:D9:CD:20:1C:86:36:0B:F4:51:85:6A:AB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F710C25BF6D7EEE89F7C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1248ad2-4e19-3f12-8e21-f88672a5d98b.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397234 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:71:0c:25:bf:6d:7e:ee:89:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=bc5ffea0-8ac9-4380-863d-9384d77c9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:47:8c:f5:e0:12:0a:91:da:81:23:52:d6: b7:9a:1f:67:ff:bb:8e:98:b3:66:c7:e1:b0:46:35: 48:f7:31:ee:98:5f:6b:cb:49:b9:49:97:07:e5:b9: 8e:e8:71:d5:a0:40:4b:c6:8c:74:ff:5c:35:e9:6e: 1e:68:30:aa:7d:95:09:86:5e:e5:3a:24:b7:e0:b4: 5e:69:e3:88:02:c8:40:38:91:14:af:bd:0e:e0:81: e2:7e:69:e6:f6:81:85:7d:fc:54:56:10:47:c7:05: a2:85:fe:52:34:1a:8c:d6:c4:05:bf:a0:03:ae:9e: cd:33:14:c8:cc:0f:8e:ce:3f:29:9a:d6:9d:53:7f: f0:77:d2:5b:6f:3d:b2:45:2a:d8:68:a4:4b:cb:ed: b8:9e:b2:87:95:97:9b:5a:f3:eb:37:db:42:8b:db: b4:00:cb:14:8c:26:74:af:95:22:88:b2:6f:3f:1b: 47:a6:9b:10:22:85:8b:ad:ac:d3:e8:38:ef:31:68: 70:90:63:8c:f8:6a:fc:52:f1:18:27:b0:8f:3e:04: 1a:f8:a2:f7:1e:78:cf:6d:6c:2a:4b:d8:6b:00:c9: 0f:04:48:6d:5b:6a:85:1f:f8:b0:cb:50:ba:c9:25: 82:e5:d6:ee:95:e5:dc:c6:86:b9:01:cd:35:dc:6e: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:81:45:EC:08:7B:B6:D9:CD:20:1C:86:36:0B:F4:51:85:6A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1248ad2-4e19-3f12-8e21-f88672a5d98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f6:4a:cb:b4:b9:37:b0:e5:c3:33:4d:20:37:66:88:8e:3a: 39:3c:68:23:91:54:25:c5:c5:aa:85:2a:11:e5:34:de:10:ae: 13:30:8d:0d:f2:79:d1:47:e0:42:49:cd:c3:29:68:6d:a0:42: dd:04:0e:15:73:4a:5b:14:cf:80:00:a0:fb:3a:bf:98:20:fe: e5:e4:cd:5d:82:a6:b3:2d:20:0b:59:eb:32:98:20:84:c7:ba: ca:1e:62:48:de:37:6c:20:17:51:96:95:fc:0b:c9:91:5e:ad: 74:e3:dc:09:c5:47:e3:f8:76:49:91:e9:7a:99:13:4e:21:54: 02:2e:cd:66:14:6b:75:18:c3:1e:e8:53:5b:6c:6c:b8:95:5f: 93:2d:83:65:65:52:0b:28:a5:e5:49:98:a1:82:71:6d:34:b4: a0:29:96:0d:bd:0b:38:07:1c:8b:63:2c:a4:10:3b:9d:ec:f3: 19:ee:57:c8:e5:b8:71:b7:3b:03:4b:b6:e1:b5:8e:a5:b2:0d: 92:96:d4:d6:65:89:b1:eb:fe:e9:7a:d3:9a:fe:43:42:5d:4e: 9f:fb:eb:58:5b:67:48:47:b0:bd:98:52:12:fa:f0:05:d0:8f: 1e:5d:3f:02:44:a1:8f:b5:66:17:cd:00:bf:53:88:0e:c9:32: a9:6f:42:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3EMJb9tfu6J98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YmM1ZmZlYTAtOGFjOS00MzgwLTg2M2QtOTM4NGQ3N2M5MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV5HjPXgEgqR2oEjUta3mh9n/7uOmLNmx+Gw RjVI9zHumF9ry0m5SZcH5bmO6HHVoEBLxox0/1w16W4eaDCqfZUJhl7lOiS34LRe aeOIAshAOJEUr70O4IHifmnm9oGFffxUVhBHxwWihf5SNBqM1sQFv6ADrp7NMxTI zA+Ozj8pmtadU3/wd9Jbbz2yRSrYaKRLy+24nrKHlZebWvPrN9tCi9u0AMsUjCZ0 r5UiiLJvPxtHppsQIoWLrazT6DjvMWhwkGOM+Gr8UvEYJ7CPPgQa+KL3HnjPbWwq S9hrAMkPBEhtW2qFH/iwy1C6ySWC5dbuleXcxoa5Ac013G7nsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDARgUXsCHu22c0gHIY2C/RRhWqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDEyNDhhZDItNGUxOS0z ZjEyLThlMjEtZjg4NjcyYTVkOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr2Ssu0uTew5cMzTSA3ZoiOOjk8aCORVCXFxaqFKhHlNN4QrhMwjQ3y edFH4EJJzcMpaG2gQt0EDhVzSlsUz4AAoPs6v5gg/uXkzV2CprMtIAtZ6zKYIITH usoeYkjeN2wgF1GWlfwLyZFerXTj3AnFR+P4dkmR6XqZE04hVAIuzWYUa3UYwx7o U1tsbLiVX5Mtg2VlUgsopeVJmKGCcW00tKAplg29CzgHHItjLKQQO53s8xnuV8jl uHG3OwNLtuG1jqWyDZKW1NZlibHr/ul605r+Q0JdTp/761hbZ0hHsL2YUhL68AXQ jx5dPwJEoY+1ZhfNAL9TiA7JMqlvQvk= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:55 2024 by rpki-client on console-ams.rpki-client.org