$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json) Hash identifier: Q4fBPt3kMogisMHUPPfdIZ8vzL8pVuoKLdnp6vyQ4xU= Subject key identifier: DC:5F:10:6F:C8:56:3C:15:79:D2:39:5A:0C:EF:6A:93:84:77:16:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847C3448674CDDE1E651D8A3D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 15169 IP address blocks: 192.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:86:74:cd:de:1e:65:1d:8a:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=2eb4e83c-032a-4fcb-b751-f64cdb877480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:08:a6:32:8b:a6:83:bd:8a:4a:02:6a:df: 52:61:37:8a:72:02:b8:84:4c:cf:09:fa:4c:dd:59: f6:ed:60:51:fe:bb:b6:6f:82:f8:96:9e:98:1e:86: 99:fe:23:f5:3b:ae:21:67:73:44:4d:0d:59:56:c9: 2f:57:c1:17:db:86:74:98:38:da:a8:95:c8:15:a5: 6a:28:68:a1:b6:98:d0:e5:c5:9b:25:a3:6b:47:e0: d1:e3:4b:43:a6:ce:93:25:93:88:aa:f9:00:7f:cf: 86:85:12:3c:10:b9:11:2c:95:b3:a1:1b:6f:c9:b5: 3c:36:49:69:36:dc:c7:25:dd:35:bf:f1:27:fc:df: 3d:fe:95:25:d2:e7:ef:b6:8a:cf:25:e1:9b:f0:96: 38:29:9c:0b:10:07:ca:75:4a:4a:7e:bc:84:f0:14: ce:a8:2f:e3:83:77:da:41:21:c6:8d:5c:c1:58:68: d5:1c:76:ad:bd:f8:35:15:a7:98:53:00:da:f4:02: d8:aa:39:28:ea:5a:f8:1b:1d:a6:a4:94:ee:00:d3: 09:95:46:b2:29:58:68:78:2f:72:47:aa:e4:c6:49: 9e:77:42:1b:df:7a:2c:92:a0:01:1c:62:36:bd:ca: 2b:3f:c2:45:37:3e:3d:81:b3:e6:22:60:14:64:1e: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:10:6F:C8:56:3C:15:79:D2:39:5A:0C:EF:6A:93:84:77:16:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e9:ce:e6:d8:c3:f4:d9:85:83:c2:8c:9f:67:86:23:28:fa: d6:c1:ae:cf:22:4b:db:1b:f6:b4:0d:16:cf:dc:79:a1:c2:a7: 22:8c:3a:57:e9:f4:56:c0:9b:37:26:ab:9c:92:3d:69:c5:61: a8:d9:8f:85:c9:95:b2:73:0a:a6:1f:41:4f:e0:db:7f:e1:21: 98:72:70:cb:dd:c2:93:b1:43:cf:5f:ed:da:2b:d0:66:2d:44: c8:60:b9:5b:58:d3:1d:31:84:8f:66:01:91:b8:5b:82:b8:6e: 0a:3a:69:97:3e:8e:95:b8:35:ad:93:27:db:c8:40:67:ea:3f: 8a:dd:9b:f0:42:4d:c3:e4:4e:0d:58:17:ac:cd:ed:55:ae:41: 0d:be:40:88:49:da:4a:48:80:4c:33:0b:1f:85:9c:6c:23:ae: b9:fb:e6:3e:79:b9:f9:8a:b9:3a:2f:a3:be:62:50:30:83:f6: a3:37:95:a4:ea:dc:1f:7c:7e:1c:55:3f:73:ea:11:7e:73:a1: 95:51:d9:0a:47:25:14:73:46:ce:94:86:b5:82:37:d6:6e:6c: 1f:31:c7:0d:fd:c0:0a:75:29:79:34:47:9c:4a:32:c8:a1:bb: 02:0e:0d:b3:ed:47:d1:8f:37:87:1e:b6:18:de:3c:8b:af:50: a8:97:d1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRIZ0zd4eZR2KPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk MmViNGU4M2MtMDMyYS00ZmNiLWI3NTEtZjY0Y2RiODc3NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9kIpjKLpoO9ikoCat9SYTeKcgK4hEzPCfpM 3Vn27WBR/ru2b4L4lp6YHoaZ/iP1O64hZ3NETQ1ZVskvV8EX24Z0mDjaqJXIFaVq KGihtpjQ5cWbJaNrR+DR40tDps6TJZOIqvkAf8+GhRI8ELkRLJWzoRtvybU8Nklp NtzHJd01v/En/N89/pUl0ufvtorPJeGb8JY4KZwLEAfKdUpKfryE8BTOqC/jg3fa QSHGjVzBWGjVHHatvfg1FaeYUwDa9ALYqjko6lr4Gx2mpJTuANMJlUayKVhoeC9y R6rkxkmed0Ib33oskqABHGI2vcorP8JFNz49gbPmImAUZB5AAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxfEG/IVjwVedI5WgzvapOEdxZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA4ZjQwM2UtZWQ5NC0z YjY2LTk5OTctZTYxOWY2MTYwMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATpzubYw/TZhYPCjJ9nhiMo+tbBrs8iS9sb9rQNFs/ceaHCpyKMOlfp 9FbAmzcmq5ySPWnFYajZj4XJlbJzCqYfQU/g23/hIZhycMvdwpOxQ89f7dor0GYt RMhguVtY0x0xhI9mAZG4W4K4bgo6aZc+jpW4Na2TJ9vIQGfqP4rdm/BCTcPkTg1Y F6zN7VWuQQ2+QIhJ2kpIgEwzCx+FnGwjrrn75j55ufmKuTovo75iUDCD9qM3laTq 3B98fhxVP3PqEX5zoZVR2QpHJRRzRs6UhrWCN9ZubB8xxw39wAp1KXk0R5xKMsih uwIODbPtR9GPN4cethjePIuvUKiX0W0= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org