$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: 3YKGgGxyHmEy19xv2BsGr25jI8jiEy0ZEWb78qSbPd0= Subject key identifier: 9A:F7:31:73:A5:FE:D0:96:B3:EA:7D:57:9C:13:5C:E1:6B:A9:92:2E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847B9945042EECB99509FB378C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Thu 31 Oct 2024 14:43:20 +0000 ROA not before: Thu 31 Oct 2024 14:43:20 +0000 ROA not after: Wed 29 Jan 2025 15:43:20 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:94:50:42:ee:cb:99:50:9f:b3:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 31 14:43:20 2024 GMT Not After : Jan 29 15:43:20 2025 GMT Subject: CN=5eb513ea-58da-426f-8eb2-074cff67d74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:40:e0:ed:97:06:c9:05:72:03:ac:62:67: f1:03:17:18:d8:e4:2b:e4:fe:4d:30:cc:ce:a8:c0: b3:9c:5a:99:86:47:11:da:5d:07:1c:6f:59:2c:ac: 3e:56:b8:52:94:a1:ef:c7:c2:77:9a:ec:c4:39:22: 1f:ee:18:4a:65:ab:65:6b:63:23:88:0e:3f:6f:ee: 5f:cd:2c:da:f6:70:3f:9f:cb:21:d3:8e:e5:07:78: c7:98:19:d7:d0:19:ec:9e:a9:ca:f3:62:f7:8b:8b: 10:cf:ff:d7:01:78:6c:ea:15:ef:01:51:12:f2:f4: c1:ce:55:59:21:db:e8:5d:a4:35:c4:dd:9b:b9:3c: c7:65:b0:01:d2:fb:c3:28:a2:f5:2f:65:6b:ab:b1: 7b:83:67:cc:f2:fb:2a:a2:53:95:58:17:86:cd:90: dd:c3:e8:88:8c:fe:1b:a9:d2:af:f9:0d:a0:35:5a: 1a:8f:49:a4:ca:d8:d4:5e:60:23:07:da:42:ea:20: e8:ec:47:69:cc:39:00:fa:f4:7b:f5:f4:82:30:b4: e9:f7:b9:b1:b0:90:6e:c9:7e:9d:1f:00:e6:15:96: 59:0d:0c:7a:33:fb:61:65:5a:4b:a8:be:1b:6b:aa: a8:5e:9f:0c:d0:05:f3:3f:d9:40:9c:40:bc:21:01: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:31:73:A5:FE:D0:96:B3:EA:7D:57:9C:13:5C:E1:6B:A9:92:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4c:2d:3c:5c:06:ba:47:77:2a:50:20:29:b4:05:28:1f:95: 0b:d9:ab:c6:8d:b3:3b:8f:4b:29:d2:3b:00:3e:80:9a:20:71: e7:60:63:06:de:56:d9:c1:e0:55:e8:e2:09:0e:ed:36:e4:9d: 38:14:71:ed:74:c2:31:34:62:c4:ee:ff:b9:8c:05:6d:c5:bf: d4:07:d5:17:ba:05:af:47:60:4f:e2:56:f6:b3:e7:21:44:88: a4:29:2d:f1:67:5b:22:27:8d:f8:ac:86:e5:a3:30:d0:21:9e: 94:33:c6:dd:cc:74:93:f7:da:29:fa:62:33:6d:16:33:50:10: 1b:ad:9a:8a:2a:a3:a6:7a:ce:3f:62:a0:c4:c1:65:93:fa:e9: 91:f9:e6:20:b3:63:94:1e:1f:0b:2e:92:b0:58:75:d4:5a:77: 3b:e9:36:21:26:09:c6:c9:76:35:7c:eb:a6:d4:47:cc:9d:a6: 27:7f:50:a3:2f:0e:7e:99:c2:ad:66:1d:2f:b0:0f:b9:0d:f6: 69:17:37:ea:56:d9:0b:30:d5:e5:a0:23:33:ff:3f:ac:2d:5e: fa:2c:c2:bb:7a:10:f6:43:6d:6f:e6:b9:a6:d5:dc:cc:0e:14: 1e:c5:4a:c5:d4:97:6b:c7:4e:36:62:9f:76:16:76:b2:f1:a1: b0:a4:58:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5lFBC7suZUJ+zeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTAzMTE0NDMyMFoXDTI1MDEyOTE1NDMyMFowLzEtMCsGA1UEAxMk NWViNTEzZWEtNThkYS00MjZmLThlYjItMDc0Y2ZmNjdkNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOtA4O2XBskFcgOsYmfxAxcY2OQr5P5NMMzO qMCznFqZhkcR2l0HHG9ZLKw+VrhSlKHvx8J3muzEOSIf7hhKZatla2MjiA4/b+5f zSza9nA/n8sh047lB3jHmBnX0BnsnqnK82L3i4sQz//XAXhs6hXvAVES8vTBzlVZ IdvoXaQ1xN2buTzHZbAB0vvDKKL1L2Vrq7F7g2fM8vsqolOVWBeGzZDdw+iIjP4b qdKv+Q2gNVoaj0mkytjUXmAjB9pC6iDo7EdpzDkA+vR79fSCMLTp97mxsJBuyX6d HwDmFZZZDQx6M/thZVpLqL4ba6qoXp8M0AXzP9lAnEC8IQH3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr3MXOl/tCWs+p9V5wTXOFrqZIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJMLTxcBrpHdypQICm0BSgflQvZq8aNszuPSynSOwA+gJogcedgYwbe VtnB4FXo4gkO7TbknTgUce10wjE0YsTu/7mMBW3Fv9QH1Re6Ba9HYE/iVvaz5yFE iKQpLfFnWyInjfishuWjMNAhnpQzxt3MdJP32in6YjNtFjNQEButmooqo6Z6zj9i oMTBZZP66ZH55iCzY5QeHwsukrBYddRadzvpNiEmCcbJdjV866bUR8ydpid/UKMv Dn6Zwq1mHS+wD7kN9mkXN+pW2Qsw1eWgIzP/P6wtXvoswrt6EPZDbW/muabV3MwO FB7FSsXUl2vHTjZin3YWdrLxobCkWEs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:56 2024 by rpki-client on console-ams.rpki-client.org