$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa File: b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa (raw, json) Hash identifier: R4gNo8rxIpM0yOFUPzXZVnw1xRIOkq5Q+ukjlGrrrhY= Subject key identifier: C9:41:27:CD:47:77:6E:62:02:50:D9:BC:18:19:13:C2:FE:E7:8D:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847A3F0D35E99E898AF1A39F240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa Signing time: Wed 23 Oct 2024 20:41:57 +0000 ROA not before: Wed 23 Oct 2024 20:41:57 +0000 ROA not after: Tue 21 Jan 2025 21:41:57 +0000 asID: 15169 IP address blocks: 192.178.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:f0:d3:5e:99:e8:98:af:1a:39:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 23 20:41:57 2024 GMT Not After : Jan 21 21:41:57 2025 GMT Subject: CN=bb69bd14-f64d-4352-b878-d90cd1c64678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:94:8d:89:f1:b5:98:36:96:6f:cb:b9:0d: ce:1d:57:b8:ab:11:5c:af:4a:77:79:62:c0:2b:4d: c2:9c:7d:95:4f:56:17:de:58:67:f8:ab:6b:77:cb: df:8f:f5:19:3e:a4:4e:98:8b:d6:d3:06:2f:6a:4d: 91:49:98:26:90:5a:8d:ca:7b:f4:14:d3:ea:32:85: e8:a1:71:31:65:5c:23:70:49:7d:51:5b:6c:57:59: c4:71:34:c4:32:07:1d:5d:54:24:52:05:36:8b:eb: e6:6d:0b:71:42:e2:94:ea:33:40:4b:02:17:dd:b7: d1:79:b9:76:72:a9:e6:ea:7c:a1:7f:77:44:df:0e: ae:24:10:f1:e5:17:bc:e1:e9:97:92:1f:a8:ec:b9: 19:e5:99:b5:0b:69:72:63:24:75:2f:3e:f6:ad:00: a2:fd:e4:48:29:23:25:7b:40:25:dd:70:54:01:8e: 03:e8:8e:37:04:b5:a8:ef:f2:62:87:67:63:0c:80: ae:ce:ad:ea:07:d3:ab:0e:54:c4:2f:ad:d8:2e:28: f4:21:b9:f5:20:73:1b:8e:03:cf:d5:57:10:8e:f7: ad:e1:f7:f5:2f:75:82:c5:a4:26:06:49:59:35:a2: 98:a4:98:18:71:08:51:4e:ff:43:06:7c:3c:30:b3: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:27:CD:47:77:6E:62:02:50:D9:BC:18:19:13:C2:FE:E7:8D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a6:80:50:0a:d0:d4:72:ec:85:20:c9:2d:51:bc:8d:78:38: e5:42:06:1e:a3:2a:01:59:03:6d:50:9d:59:7f:67:c9:d0:25: 98:08:45:fe:b7:e2:0b:da:e5:64:41:5f:89:15:5b:79:92:f6: 75:13:78:6c:ec:38:ad:cd:db:6a:29:60:4c:ed:41:85:5d:6a: 7a:52:3a:9a:0b:1c:e5:69:0e:ee:dc:60:aa:b2:b2:29:e1:19: 7f:b6:d0:70:98:4a:d4:56:03:36:89:d5:c1:73:5e:1b:e1:fb: fb:b7:73:1b:9f:24:4c:f8:f9:6d:42:88:90:37:ab:99:64:1e: ed:6f:14:da:e3:cd:c6:56:8c:0a:81:99:87:60:d7:02:b7:de: f7:27:36:a5:0e:fd:07:49:2b:3e:88:4f:30:d0:ce:8e:d5:44: f7:f2:30:4d:58:fb:c9:b4:da:a5:e2:7b:97:5a:67:9a:b3:9b: e4:cb:20:fe:8d:78:85:9b:a6:fc:2d:c0:ff:30:c7:f2:d8:4f: 8b:60:23:99:24:40:36:23:d1:fb:1f:8c:14:1a:46:70:64:f2: ec:2f:48:47:6b:45:0c:f5:bc:25:4e:7d:3e:d8:a6:69:5b:73: b5:0e:a2:26:65:10:b6:d7:62:e7:89:fe:23:10:34:7e:4d:b3: 5c:41:32:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEej8NNemeiYrxo58kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTAyMzIwNDE1N1oXDTI1MDEyMTIxNDE1N1owLzEtMCsGA1UEAxMk YmI2OWJkMTQtZjY0ZC00MzUyLWI4NzgtZDkwY2QxYzY0Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkKUjYnxtZg2lm/LuQ3OHVe4qxFcr0p3eWLA K03CnH2VT1YX3lhn+Ktrd8vfj/UZPqROmIvW0wYvak2RSZgmkFqNynv0FNPqMoXo oXExZVwjcEl9UVtsV1nEcTTEMgcdXVQkUgU2i+vmbQtxQuKU6jNASwIX3bfRebl2 cqnm6nyhf3dE3w6uJBDx5Re84emXkh+o7LkZ5Zm1C2lyYyR1Lz72rQCi/eRIKSMl e0Al3XBUAY4D6I43BLWo7/Jih2djDICuzq3qB9OrDlTEL63YLij0Ibn1IHMbjgPP 1VcQjvet4ff1L3WCxaQmBklZNaKYpJgYcQhRTv9DBnw8MLOFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlBJ81Hd25iAlDZvBgZE8L+543MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhhMjg4MTAtMDBhMy0z Nzc3LTllZTUtZmNiOWI2NzJjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImmgFAK0NRy7IUgyS1RvI14OOVCBh6jKgFZA21QnVl/Z8nQJZgIRf63 4gva5WRBX4kVW3mS9nUTeGzsOK3N22opYEztQYVdanpSOpoLHOVpDu7cYKqysinh GX+20HCYStRWAzaJ1cFzXhvh+/u3cxufJEz4+W1CiJA3q5lkHu1vFNrjzcZWjAqB mYdg1wK33vcnNqUO/QdJKz6ITzDQzo7VRPfyME1Y+8m02qXie5daZ5qzm+TLIP6N eIWbpvwtwP8wx/LYT4tgI5kkQDYj0fsfjBQaRnBk8uwvSEdrRQz1vCVOfT7Ypmlb c7UOoiZlELbXYueJ/iMQNH5Ns1xBMrc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:00 2024 by rpki-client on console-ams.rpki-client.org