$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8baef3f-2822-3e73-8b22-75791cfe5849.roa File: f8baef3f-2822-3e73-8b22-75791cfe5849.roa (raw, json) Hash identifier: ALMDu2wjm3GNEP0v9zuUgA8GHZp1tIabZLlQd6zU1wY= Subject key identifier: 42:E9:47:77:BA:A0:15:22:08:B4:15:C8:CA:1A:8B:D6:E6:E8:44:A4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584511B589968402ED83A64B6F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8baef3f-2822-3e73-8b22-75791cfe5849.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 397235 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:89:96:84:02:ed:83:a6:4b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=f18f1cac-41d0-464c-af8a-96d3da6ea300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:ec:4b:cc:7c:4c:88:65:b5:5e:10:50:87: 63:88:19:a5:cd:08:db:f1:64:91:44:2e:fd:c3:a2: 2c:7d:f2:b4:e0:03:b7:b4:d7:06:a0:f8:4c:93:42: 9b:c6:0b:89:b1:79:f9:1f:f2:b4:fb:32:35:e2:88: b8:d0:e0:ab:9c:9d:1c:70:b1:4b:0c:22:6a:78:32: 44:38:d5:8f:65:82:d7:5e:8a:dd:1b:93:07:52:c3: cf:2f:9b:b1:69:71:17:77:0f:c2:99:98:44:86:4f: 7c:bb:bb:ac:0b:de:06:94:e0:42:13:23:6c:f0:f7: 2d:61:d8:31:e3:79:bf:9a:18:91:9e:30:0a:d8:c6: 4b:e6:36:3c:ef:fd:46:f1:fd:d4:0e:3a:ce:c2:dd: 25:91:d4:33:8f:23:64:5a:ef:a8:3f:51:43:48:66: 6c:c0:0f:56:73:e7:44:02:16:89:05:fd:69:aa:c9: 22:e2:e6:66:83:a0:c0:43:ed:67:c1:87:df:9d:4b: f9:85:84:fa:3a:b6:94:12:81:26:45:e2:2c:24:21: 6e:dc:9f:bc:68:9f:12:51:f4:17:bb:33:c5:98:d1: 49:93:a3:f6:44:e6:fb:6e:01:2a:96:56:b4:8c:d4: de:d8:4e:06:39:81:06:a5:2f:0a:19:cd:cd:56:cf: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:47:77:BA:A0:15:22:08:B4:15:C8:CA:1A:8B:D6:E6:E8:44:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8baef3f-2822-3e73-8b22-75791cfe5849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fe:bd:55:40:73:61:d5:54:59:c6:49:83:8f:cc:8e:90:c3: ec:e9:47:a8:8b:53:56:97:09:d6:94:c6:7d:b1:23:74:c0:19: 05:89:29:48:f5:c8:93:f3:06:d1:d6:3a:af:84:c0:48:51:a1: 93:76:45:65:25:3b:2b:b9:14:1b:c5:98:d5:f0:4e:5c:ce:2e: 11:3c:42:ac:54:39:9b:5e:85:a1:d6:61:8d:d7:7d:1e:9c:61: c1:29:50:cb:bd:a1:fc:3d:5d:11:fe:e6:ee:bc:99:5b:45:15: 78:ef:a9:1f:5e:43:7b:5d:ff:0b:c1:48:e4:19:b4:04:50:10: 41:20:ad:f9:78:cd:c2:e9:30:ef:44:2f:1b:5b:d2:63:41:86: 84:29:14:18:19:4f:f3:be:6a:09:da:76:3d:13:e6:5b:46:5e: 23:91:a4:d3:94:23:e5:99:d6:6e:d3:11:41:ff:64:0b:51:7d: fd:3b:17:f3:be:86:e5:d9:cb:2f:78:ad:60:ac:04:0d:24:08: f3:f6:be:9f:9d:77:47:65:70:e5:32:3f:99:a4:1f:4e:04:55: 67:d0:44:66:e0:b3:fe:38:ab:33:fc:4e:a6:8b:3e:31:49:78: de:cc:b2:17:09:36:c1:5f:ef:b3:7f:e1:08:ef:d0:c9:06:67: 66:74:f8:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtYmWhALtg6ZLb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk ZjE4ZjFjYWMtNDFkMC00NjRjLWFmOGEtOTZkM2RhNmVhMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrsS8x8TIhltV4QUIdjiBmlzQjb8WSRRC79 w6IsffK04AO3tNcGoPhMk0KbxguJsXn5H/K0+zI14oi40OCrnJ0ccLFLDCJqeDJE ONWPZYLXXordG5MHUsPPL5uxaXEXdw/CmZhEhk98u7usC94GlOBCEyNs8PctYdgx 43m/mhiRnjAK2MZL5jY87/1G8f3UDjrOwt0lkdQzjyNkWu+oP1FDSGZswA9Wc+dE AhaJBf1pqski4uZmg6DAQ+1nwYffnUv5hYT6OraUEoEmReIsJCFu3J+8aJ8SUfQX uzPFmNFJk6P2ROb7bgEqlla0jNTe2E4GOYEGpS8KGc3NVs8gtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELpR3e6oBUiCLQVyMoai9bm6ESkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjhiYWVmM2YtMjgyMi0z ZTczLThiMjItNzU3OTFjZmU1ODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD+vVVAc2HVVFnGSYOPzI6Qw+zpR6iLU1aXCdaUxn2xI3TAGQWJKUj1 yJPzBtHWOq+EwEhRoZN2RWUlOyu5FBvFmNXwTlzOLhE8QqxUOZtehaHWYY3XfR6c YcEpUMu9ofw9XRH+5u68mVtFFXjvqR9eQ3td/wvBSOQZtARQEEEgrfl4zcLpMO9E Lxtb0mNBhoQpFBgZT/O+agnadj0T5ltGXiORpNOUI+WZ1m7TEUH/ZAtRff07F/O+ huXZyy94rWCsBA0kCPP2vp+dd0dlcOUyP5mkH04EVWfQRGbgs/44qzP8TqaLPjFJ eN7MshcJNsFf77N/4Qjv0MkGZ2Z0+Oo= -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org