$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa File: 32d4eb15-889c-3c2c-a1e4-482420b45122.roa (raw, json) Hash identifier: p+sOxEt750Ykt/RjUnTbzW8fUek3b40kwkSE8nyRn5g= Subject key identifier: 7B:0C:BD:82:6F:35:4D:2D:42:9B:A8:82:32:13:A2:84:32:F1:A1:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847A3EEBD2FA827B87F150EF180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa Signing time: Wed 23 Oct 2024 20:37:44 +0000 ROA not before: Wed 23 Oct 2024 20:37:44 +0000 ROA not after: Tue 21 Jan 2025 21:37:44 +0000 asID: 15169 IP address blocks: 192.178.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:ee:bd:2f:a8:27:b8:7f:15:0e:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 23 20:37:44 2024 GMT Not After : Jan 21 21:37:44 2025 GMT Subject: CN=0743d49a-8e50-409f-8340-c909352c0a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:ae:ce:96:3d:8b:98:a2:e9:bc:18:18:9c: 9f:e6:1b:88:2e:e4:9b:9f:63:02:17:a9:15:cd:a8: a4:af:e5:44:96:13:77:63:54:29:43:5b:10:a5:0a: 2b:20:04:ad:cc:1e:dd:7a:52:2a:eb:4f:9e:ee:4d: ec:83:1b:e8:3d:34:37:3b:71:ed:e1:d4:9c:6c:8b: 17:28:cd:04:cf:82:5e:a2:13:cc:c1:ca:c9:50:cc: e8:f5:91:ef:b8:59:5d:64:0c:fa:7b:54:ec:0e:1b: 88:0b:32:e1:5b:09:7d:2c:df:ad:ed:9c:22:53:5f: d4:e8:d6:47:de:52:80:8c:88:a9:80:5b:03:17:77: 7f:bc:dd:9f:3b:72:5c:02:c3:0e:58:c7:d1:9b:64: 30:9b:00:a6:3f:56:13:60:a2:8e:27:25:54:7e:c6: d6:ac:14:08:cf:7d:25:8d:a3:2e:ec:38:c8:c1:8b: 52:62:1a:32:0e:dd:ad:67:14:1d:b7:84:53:ec:ac: 7e:03:cf:64:5b:44:c0:2e:37:a9:50:8c:31:66:25: 8f:88:90:62:be:a8:bb:ab:08:1a:1c:c1:40:98:e2: 60:dc:56:fa:10:4b:79:ae:90:12:1d:12:98:08:6e: bf:35:c5:e0:d3:93:80:b5:b1:5e:48:c0:72:58:96: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:BD:82:6F:35:4D:2D:42:9B:A8:82:32:13:A2:84:32:F1:A1:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c1:44:95:15:8d:3a:78:06:34:23:41:d6:c9:9a:45:8b:27: b1:13:c7:8e:26:07:50:40:bf:50:5e:f5:64:4a:66:78:f2:be: bb:69:1f:73:f8:4b:f2:36:b8:1e:3b:5b:26:2b:d3:54:64:a1: 40:e7:92:eb:b8:0e:f4:3a:d0:61:32:e2:f2:2c:08:e7:e6:da: 63:a9:2e:76:ee:f1:78:d8:63:42:e8:1b:a9:2c:93:45:16:a1: ab:af:bf:db:3c:c1:34:4b:d8:fc:67:4a:1e:4a:1d:db:26:d7: f5:80:f8:f4:4b:9e:44:c9:43:82:8f:1a:90:bb:28:f8:ea:97: 17:ab:06:61:e0:75:82:68:90:f3:ef:ea:f3:0b:67:d3:12:a2: 91:83:c3:00:b1:3b:29:dd:21:8e:40:b0:30:2c:fb:9d:e3:3f: c2:9c:04:62:d3:7f:ed:9f:32:49:dd:85:bb:60:93:7d:75:2a: 05:c6:48:d1:1c:87:18:78:47:ad:23:35:6f:cd:a2:72:72:d5: ab:1d:e5:bc:b1:ab:7b:9d:13:c4:37:0c:92:97:a7:68:f9:dd: 6e:e4:5c:c9:99:f2:fa:57:42:bd:99:7f:f5:d1:4b:49:97:f3: 02:7e:db:60:9b:29:f4:0f:9c:14:c6:df:f5:e1:75:c8:b0:73: e9:28:22:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEej7r0vqCe4fxUO8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTAyMzIwMzc0NFoXDTI1MDEyMTIxMzc0NFowLzEtMCsGA1UEAxMk MDc0M2Q0OWEtOGU1MC00MDlmLTgzNDAtYzkwOTM1MmMwYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvGuzpY9i5ii6bwYGJyf5huILuSbn2MCF6kV zaikr+VElhN3Y1QpQ1sQpQorIAStzB7delIq60+e7k3sgxvoPTQ3O3Ht4dScbIsX KM0Ez4JeohPMwcrJUMzo9ZHvuFldZAz6e1TsDhuICzLhWwl9LN+t7ZwiU1/U6NZH 3lKAjIipgFsDF3d/vN2fO3JcAsMOWMfRm2QwmwCmP1YTYKKOJyVUfsbWrBQIz30l jaMu7DjIwYtSYhoyDt2tZxQdt4RT7Kx+A89kW0TALjepUIwxZiWPiJBivqi7qwga HMFAmOJg3Fb6EEt5rpASHRKYCG6/NcXg05OAtbFeSMByWJbQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsMvYJvNU0tQpuogjITooQy8aEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkNGViMTUtODg5Yy0z YzJjLWExZTQtNDgyNDIwYjQ1MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHBRJUVjTp4BjQjQdbJmkWLJ7ETx44mB1BAv1Be9WRKZnjyvrtpH3P4 S/I2uB47WyYr01RkoUDnkuu4DvQ60GEy4vIsCOfm2mOpLnbu8XjYY0LoG6ksk0UW oauvv9s8wTRL2PxnSh5KHdsm1/WA+PRLnkTJQ4KPGpC7KPjqlxerBmHgdYJokPPv 6vMLZ9MSopGDwwCxOyndIY5AsDAs+53jP8KcBGLTf+2fMkndhbtgk311KgXGSNEc hxh4R60jNW/NonJy1asd5byxq3udE8Q3DJKXp2j53W7kXMmZ8vpXQr2Zf/XRS0mX 8wJ+22CbKfQPnBTG3/Xhdciwc+koIqk= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:12 2024 by rpki-client on console-fra.rpki-client.org