$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa File: f976ea62-be8d-313b-bb7f-afe7753dffd0.roa (raw, json) Hash identifier: pfGubNUJJUDwl6vVNUIK6kjGGeUq27H6/Zl1Jg6OlvM= Subject key identifier: 44:AD:67:B4:ED:C1:58:BB:3E:19:E6:BB:6D:D6:E1:ED:78:0A:E8:7B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847CA3F6B2D747C8697FBDFD880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 397223 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:6b:2d:74:7c:86:97:fb:df:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=f4138716-0e30-4697-a0a3-938e4ce286db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:bc:27:9d:5a:91:a8:51:c3:1f:0d:f3:a1: 15:9e:82:bc:0a:66:11:df:10:e4:35:d4:46:3c:a5: da:20:31:06:91:ef:6b:e7:e1:03:c1:13:34:23:d1: 56:18:a7:12:40:99:67:fe:b3:09:d8:15:a1:68:5e: f2:a7:d7:4b:bc:36:bf:6e:2e:48:e1:9a:c4:79:bf: ee:36:55:83:c2:75:70:0f:49:18:3a:ce:c9:52:99: 12:a1:43:6e:56:b5:70:56:6f:b5:d7:40:33:31:4c: bd:bf:e2:6c:24:f4:e9:02:1d:2b:74:aa:9f:73:e8: cc:f7:5e:af:89:54:07:28:82:3b:7b:9e:b4:11:d8: 4c:80:c0:1a:fa:99:38:88:2c:be:be:2d:93:64:5e: d3:9b:c0:c7:e1:a1:30:38:d2:bb:06:ee:73:5a:27: 95:c3:9a:50:05:3d:43:fa:5f:0c:2d:14:79:bb:40: 21:da:7d:c9:df:17:55:0a:d9:5a:f9:d9:b8:fd:25: 8d:24:39:7b:38:9c:33:2f:68:68:3a:7e:e8:95:68: 7b:09:11:42:1b:ca:68:04:e9:2b:0b:30:c3:ec:c5: c1:e4:c6:c0:05:bd:80:05:9b:b3:e2:84:ef:ba:c8: 2a:aa:ee:53:67:b6:00:e9:7e:f4:64:77:66:60:cd: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AD:67:B4:ED:C1:58:BB:3E:19:E6:BB:6D:D6:E1:ED:78:0A:E8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a3:cf:2d:85:35:55:6e:ba:ee:17:29:92:1f:4c:0b:10:fd: 0d:3a:65:1c:5b:7d:cf:dc:cd:f8:37:ad:46:24:b7:4d:aa:2b: 1e:ff:a5:15:d0:5a:21:3e:8d:c9:c9:3f:7c:e0:db:2f:9b:06: aa:e0:8d:cb:43:5e:85:cc:0e:66:94:fc:d2:48:bf:da:ba:2f: 74:17:98:0f:9d:fa:e0:30:82:e3:e5:28:04:c1:b0:3e:f6:87: 02:29:e8:b4:70:c2:b3:90:a2:5f:d8:cb:2f:00:b8:24:40:12: f4:9c:f1:ed:5b:86:6c:c0:b0:7e:c4:2f:2e:0a:0a:0c:8f:be: ad:a1:5a:85:d5:2b:19:72:e1:19:ed:f3:46:e8:4d:20:a7:bc: 26:26:b2:f8:70:20:c7:98:cc:b1:cb:27:30:4b:6d:53:ed:b4: ad:ab:62:f0:75:66:07:18:63:3c:54:0d:dc:7d:bb:04:0f:3c: de:d6:ce:12:3c:a9:15:b0:3e:2e:1f:b9:ec:a2:d6:50:c6:3d: b8:37:51:6d:b2:4f:36:fa:94:40:3d:a5:c1:2b:70:8c:55:bc: 82:08:da:11:d7:13:ba:61:84:0c:72:8b:00:f6:5b:a1:dc:26: cf:69:64:6b:a9:c6:01:24:bb:d6:e2:95:ad:0e:bf:34:8a:92: dd:8e:88:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP2stdHyGl/vf2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjQxMzg3MTYtMGUzMC00Njk3LWEwYTMtOTM4ZTRjZTI4NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbW8J51akahRwx8N86EVnoK8CmYR3xDkNdRG PKXaIDEGke9r5+EDwRM0I9FWGKcSQJln/rMJ2BWhaF7yp9dLvDa/bi5I4ZrEeb/u NlWDwnVwD0kYOs7JUpkSoUNuVrVwVm+110AzMUy9v+JsJPTpAh0rdKqfc+jM916v iVQHKII7e560EdhMgMAa+pk4iCy+vi2TZF7Tm8DH4aEwONK7Bu5zWieVw5pQBT1D +l8MLRR5u0Ah2n3J3xdVCtla+dm4/SWNJDl7OJwzL2hoOn7olWh7CRFCG8poBOkr CzDD7MXB5MbABb2ABZuz4oTvusgqqu5TZ7YA6X70ZHdmYM0dswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEStZ7TtwVi7Phnmu23W4e14Cuh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjk3NmVhNjItYmU4ZC0z MTNiLWJiN2YtYWZlNzc1M2RmZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2jzy2FNVVuuu4XKZIfTAsQ/Q06ZRxbfc/czfg3rUYkt02qKx7/pRXQ WiE+jcnJP3zg2y+bBqrgjctDXoXMDmaU/NJIv9q6L3QXmA+d+uAwguPlKATBsD72 hwIp6LRwwrOQol/Yyy8AuCRAEvSc8e1bhmzAsH7ELy4KCgyPvq2hWoXVKxly4Rnt 80boTSCnvCYmsvhwIMeYzLHLJzBLbVPttK2rYvB1ZgcYYzxUDdx9uwQPPN7WzhI8 qRWwPi4fueyi1lDGPbg3UW2yTzb6lEA9pcErcIxVvIII2hHXE7phhAxyiwD2W6Hc Js9pZGupxgEku9bila0OvzSKkt2OiJM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:09 2024 by rpki-client on console-ams.rpki-client.org