$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa File: d876787e-6400-3e37-8c22-d71e15d2557f.roa (raw, json) Hash identifier: mt17iGwVVKQyrMri8g7zx4NbOv5oCi7yyPLRkOgM4TA= Subject key identifier: A5:FB:B3:8C:4F:F0:F6:11:C0:F7:E5:D5:6A:CD:69:29:10:74:06:48 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847B101748FD802DE2C53F46540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 397233 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:74:8f:d8:02:de:2c:53:f4:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=65dd5ee5-6d20-42dc-a5af-6d8a202ebb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:97:c7:bf:83:6d:63:bf:40:92:94:31:eb: cc:6a:82:fe:8b:22:e6:78:be:6e:40:c9:00:a6:08: 0c:78:28:47:6a:cf:af:fe:07:3e:6c:b3:58:43:a2: 90:b5:77:e1:c6:90:a1:13:6e:06:84:6c:97:c2:af: 22:26:93:7b:85:63:af:00:6f:f1:a8:f4:ac:35:2f: 75:cc:44:f7:9e:77:af:23:8a:03:6a:55:3b:30:0b: fa:32:ef:57:46:ab:81:ac:9f:b6:24:80:2f:40:7c: 41:5b:83:e6:b9:09:27:63:9b:40:87:74:cb:9f:ad: b9:f5:d0:9c:d8:3b:e1:69:1c:26:3c:c5:ce:08:50: 97:8d:cf:d3:f9:14:b2:d5:5f:dd:30:97:16:2b:0f: 8c:f0:29:9e:c8:d6:95:24:7b:41:76:47:e0:c3:ee: 5c:fc:d5:aa:f7:de:93:82:d6:b4:34:1b:68:1e:db: 49:5d:5e:8d:73:4f:cf:9a:2f:4c:51:4c:e3:22:bf: 7c:dc:3e:22:c8:ef:db:9f:12:59:8d:ab:f8:a9:8b: 3f:96:d0:1c:93:97:76:49:59:73:24:fc:56:fa:f9: c1:93:91:83:e6:18:4c:7c:99:b8:fb:26:1e:4b:17: a7:91:2c:db:88:fb:48:b2:50:9d:a4:4a:f6:17:c0: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:B3:8C:4F:F0:F6:11:C0:F7:E5:D5:6A:CD:69:29:10:74:06:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:46:da:4b:7f:76:39:30:c4:e2:68:c6:cf:65:15:a3:87: 44:3c:ff:71:cc:6f:7d:4b:dc:41:6a:ec:5b:49:f9:11:a8:65: a6:b4:73:1d:f0:cf:9a:e1:2e:eb:a5:7c:06:b7:1f:2d:ef:04: 7a:f6:07:41:80:ac:5f:af:36:0b:db:9c:df:44:7f:bc:3c:98: 08:61:f1:e9:e0:7b:92:e3:02:81:7a:67:6e:49:12:de:79:60: 2e:d2:1d:52:51:6a:8f:ba:12:65:0c:b2:75:da:42:40:13:4f: eb:0c:76:57:1a:65:ba:70:e2:05:c2:61:96:20:73:18:2f:27: d4:53:66:c9:04:91:30:c4:34:c3:8e:98:1b:d1:dd:df:ee:b8: 71:6c:3a:45:8e:27:80:dd:80:54:00:44:05:92:a6:2c:1e:a9: eb:a1:e4:8a:1d:fe:69:90:3a:4c:08:f4:24:e1:69:b1:ec:1a: f7:a0:4d:d6:d6:b2:c5:12:08:c6:b8:6d:4d:97:4e:0d:36:89: cd:14:88:23:9f:17:43:c8:5a:d3:4a:5d:c2:cd:34:80:08:79: 1e:75:b5:63:e5:8b:ac:0e:a4:7b:fc:78:d8:90:89:42:97:6b: 1f:c8:f9:bd:de:35:17:f7:04:2c:8b:f2:6e:75:51:dc:f5:bf: 96:cc:6d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAXSP2ALeLFP0ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NjVkZDVlZTUtNmQyMC00MmRjLWE1YWYtNmQ4YTIwMmViYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyXx7+DbWO/QJKUMevMaoL+iyLmeL5uQMkA pggMeChHas+v/gc+bLNYQ6KQtXfhxpChE24GhGyXwq8iJpN7hWOvAG/xqPSsNS91 zET3nnevI4oDalU7MAv6Mu9XRquBrJ+2JIAvQHxBW4PmuQknY5tAh3TLn6259dCc 2DvhaRwmPMXOCFCXjc/T+RSy1V/dMJcWKw+M8CmeyNaVJHtBdkfgw+5c/NWq996T gta0NBtoHttJXV6Nc0/Pmi9MUUzjIr983D4iyO/bnxJZjav4qYs/ltAck5d2SVlz JPxW+vnBk5GD5hhMfJm4+yYeSxenkSzbiPtIslCdpEr2F8AXzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX7s4xP8PYRwPfl1WrNaSkQdAZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDg3Njc4N2UtNjQwMC0z ZTM3LThjMjItZDcxZTE1ZDI1NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHozRtpLf3Y5MMTiaMbPZRWjh0Q8/3HMb31L3EFq7FtJ+RGoZaa0cx3w z5rhLuulfAa3Hy3vBHr2B0GArF+vNgvbnN9Ef7w8mAhh8enge5LjAoF6Z25JEt55 YC7SHVJRao+6EmUMsnXaQkATT+sMdlcaZbpw4gXCYZYgcxgvJ9RTZskEkTDENMOO mBvR3d/uuHFsOkWOJ4DdgFQARAWSpiweqeuh5Iod/mmQOkwI9CThabHsGvegTdbW ssUSCMa4bU2XTg02ic0UiCOfF0PIWtNKXcLNNIAIeR51tWPli6wOpHv8eNiQiUKX ax/I+b3eNRf3BCyL8m51Udz1v5bMbQs= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:04 2024 by rpki-client on console-ams.rpki-client.org