$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa File: 752d5944-68d2-3730-ba55-3df75ad16419.roa (raw, json) Hash identifier: vEZoVIVWC346HJX4dEjRqW2jqMyHsez7VcjW/IRXdmw= Subject key identifier: AA:A8:B5:B5:86:F7:10:A8:D5:87:F8:1E:B1:ED:F3:30:35:E1:D5:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847C8D9EBEBBF60BEEA3E1F6A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 15169 IP address blocks: 192.178.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:eb:eb:bf:60:be:ea:3e:1f:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=0342c9b3-4095-46bc-9b79-e6ff1d5c0364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:29:48:4a:fb:17:98:6c:0b:c4:2f:aa:d9: b3:4f:e2:d9:f3:35:57:1b:8e:c7:87:5e:3c:5a:26: 3b:de:ca:ce:f4:ba:70:98:08:de:a3:22:fb:ac:cf: 5d:ea:7b:59:b4:16:76:14:5d:7e:9c:4e:90:10:54: ca:da:5a:23:3b:c1:e4:ec:83:28:aa:55:1b:77:34: 80:90:e6:ce:95:9c:fd:e9:5a:cf:6b:39:50:4e:9a: 10:26:bd:6f:a4:44:a1:fd:70:c3:9a:8b:1c:f7:dd: 85:1c:5f:bd:95:c2:0b:64:ff:02:1c:b6:80:d3:9d: e5:2d:f2:8b:25:60:ab:39:4c:d0:f3:3b:b5:10:c7: a8:41:aa:fd:e4:e4:c6:1f:dc:e0:51:c7:5f:04:b4: b5:67:de:89:bf:ad:f4:53:c1:dc:06:87:fd:50:9b: 93:02:fe:df:27:4b:58:d2:76:81:5a:6f:bd:27:13: 16:db:06:9a:a7:d2:4f:77:82:5b:ba:fb:1c:30:f0: 66:ff:c8:0e:17:c0:8b:18:a4:15:7d:3d:12:31:30: 13:b0:b1:7e:9a:c9:3f:7c:80:4c:e2:48:3c:99:da: 47:29:ee:e4:c8:ae:42:77:82:c5:c8:d1:2c:aa:e3: fc:6c:3a:af:19:d7:70:e3:fc:a3:e5:19:aa:9e:ea: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:B5:B5:86:F7:10:A8:D5:87:F8:1E:B1:ED:F3:30:35:E1:D5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:70:a2:00:50:39:d0:0c:3d:93:a1:0e:7d:2a:da:b5:f3: 4b:b6:39:f1:5a:d5:d6:0f:33:72:11:ad:e5:bd:ae:9c:e1:2c: c0:0c:40:b0:0c:8b:56:25:61:8a:01:bb:87:b4:74:ee:38:87: 6f:b8:92:ae:41:48:22:47:96:45:87:d1:f5:bb:c0:bc:fb:71: 6b:33:5e:db:a5:fa:63:48:ac:52:7c:97:1a:2d:dc:b8:79:7c: 1a:8d:22:c3:68:e7:de:6f:ff:98:6f:5a:24:e7:df:cd:a7:3e: 1a:0e:c7:35:2e:65:4b:ba:df:40:f5:01:1c:a3:43:cc:fd:6d: 5b:25:55:ff:69:7e:89:f8:99:a1:6b:61:73:02:b8:d7:38:71: da:f4:f1:f8:33:88:72:33:8c:78:6a:e0:3c:c1:ca:f9:6e:7d: 61:6b:92:14:20:21:ea:f3:80:fd:63:fc:62:fd:22:e8:b7:8b: 2b:12:0a:d5:93:1a:64:61:16:48:8e:16:5e:e8:61:2f:d0:f6: 59:6e:4f:36:3b:65:d7:37:31:f9:cd:51:df:ef:58:75:8b:03: a7:3e:89:7b:f3:4e:df:d1:11:d5:84:1c:b4:40:4f:a9:76:b0: 19:bd:13:50:3a:3e:98:16:fc:b2:f6:c7:2e:15:d4:9d:d2:4f: d8:ed:f0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2evrv2C+6j4faoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk MDM0MmM5YjMtNDA5NS00NmJjLTliNzktZTZmZjFkNWMwMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIIpSEr7F5hsC8QvqtmzT+LZ8zVXG47Hh148 WiY73srO9LpwmAjeoyL7rM9d6ntZtBZ2FF1+nE6QEFTK2lojO8Hk7IMoqlUbdzSA kObOlZz96VrPazlQTpoQJr1vpESh/XDDmosc992FHF+9lcILZP8CHLaA053lLfKL JWCrOUzQ8zu1EMeoQar95OTGH9zgUcdfBLS1Z96Jv630U8HcBof9UJuTAv7fJ0tY 0naBWm+9JxMW2waap9JPd4JbuvscMPBm/8gOF8CLGKQVfT0SMTATsLF+msk/fIBM 4kg8mdpHKe7kyK5Cd4LFyNEsquP8bDqvGddw4/yj5Rmqnupt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqotbWG9xCo1Yf4HrHt8zA14dVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzUyZDU5NDQtNjhkMi0z NzMwLWJhNTUtM2RmNzVhZDE2NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvcKIAUDnQDD2ToQ59Ktq180u2OfFa1dYPM3IRreW9rpzhLMAMQLAM i1YlYYoBu4e0dO44h2+4kq5BSCJHlkWH0fW7wLz7cWszXtul+mNIrFJ8lxot3Lh5 fBqNIsNo595v/5hvWiTn382nPhoOxzUuZUu630D1ARyjQ8z9bVslVf9pfon4maFr YXMCuNc4cdr08fgziHIzjHhq4DzByvlufWFrkhQgIerzgP1j/GL9Iui3iysSCtWT GmRhFkiOFl7oYS/Q9lluTzY7Zdc3MfnNUd/vWHWLA6c+iXvzTt/REdWEHLRAT6l2 sBm9E1A6PpgW/LL2xy4V1J3ST9jt8JA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:14 2024 by rpki-client on console-fra.rpki-client.org