$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa File: e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa (raw, json) Hash identifier: 5PDJlMfx0kFRKEPrr2KCgqb/uMxRxpa8GLKm0uZZeaM= Subject key identifier: 57:22:CC:25:F2:86:3B:A3:09:F0:FC:C7:9A:C7:4A:E9:42:54:A2:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847B993DEB91CE25143818B6500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa Signing time: Thu 31 Oct 2024 14:42:26 +0000 ROA not before: Thu 31 Oct 2024 14:42:26 +0000 ROA not after: Wed 29 Jan 2025 15:42:26 +0000 asID: 15169 IP address blocks: 192.178.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:93:de:b9:1c:e2:51:43:81:8b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 31 14:42:26 2024 GMT Not After : Jan 29 15:42:26 2025 GMT Subject: CN=8722b457-fa58-4b36-810b-f97e60b24407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:95:8a:6d:a5:27:26:5d:3b:63:c4:8a:03: 0c:d9:d3:aa:62:b6:f4:67:2d:34:a6:26:05:b4:a4: 90:df:8d:ca:06:a8:83:9d:aa:e0:62:6b:16:b5:fe: c9:94:71:c8:bf:00:97:b8:50:7d:3e:6c:84:26:14: 23:0a:8d:1a:6d:9d:65:00:6c:a6:f2:f9:dd:08:c5: af:0d:91:e4:7f:d3:2f:22:23:ef:a6:c8:76:ae:68: 57:6b:ee:43:db:5d:74:83:7d:90:14:de:51:6b:ad: 1b:c2:4d:00:1b:f8:be:92:b8:28:e2:1c:7a:f1:fa: b9:5a:6b:f1:6b:78:f9:7f:b3:b9:36:61:65:71:d8: d7:09:12:47:52:0f:54:c2:1c:2d:45:83:bd:06:1e: 1a:e8:de:6d:b9:bd:90:0d:07:65:ac:35:27:c8:ab: bc:cb:ef:07:88:ae:c0:ab:4f:ad:e7:be:81:ea:3a: d2:ea:5f:e8:77:07:e9:0e:46:c0:f7:04:0f:77:d5: 9c:ed:78:9e:f0:4f:f0:a7:e1:28:f2:aa:47:b0:99: 40:2f:6e:95:4f:d5:15:f4:e1:e3:07:5e:6d:f8:4c: e4:2b:0b:f2:ed:a5:ac:36:8c:cc:00:5e:ae:f9:40: 72:4d:79:69:22:7d:e8:e6:88:3f:7d:69:48:51:83: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:22:CC:25:F2:86:3B:A3:09:F0:FC:C7:9A:C7:4A:E9:42:54:A2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:90:31:8c:40:4d:a2:f6:a3:9c:8a:fb:cb:65:be:89:b4:45: 1d:fc:98:7e:f0:b1:0e:33:5c:d5:31:9d:f3:d5:a1:2b:85:bf: 37:86:5a:e2:9b:da:9d:a9:d4:aa:71:60:3f:1a:eb:76:36:18: fc:ff:cb:2f:da:78:08:25:fb:b5:76:7b:2e:0c:05:5b:0f:46: 34:13:0b:a2:54:5f:ba:0f:a6:f0:15:50:8d:e6:72:18:c4:e2: 35:9e:57:45:05:08:b6:21:47:3e:a5:35:08:b6:80:cf:1e:94: 3e:2a:c9:f6:b6:0a:4b:31:02:c9:fe:d8:e3:14:97:62:ca:74: 12:79:37:c9:fb:ae:0f:6f:42:38:8f:b9:e0:94:45:c5:75:09: 2c:28:b7:e5:35:55:88:e7:32:e7:97:c2:84:74:48:71:3b:20: c1:9f:c4:57:78:8d:5f:87:51:34:db:8b:bb:3c:2e:13:c5:0a: 5e:af:0a:96:e0:a4:7d:b0:3e:f9:d6:30:d5:7b:82:f4:8b:12: b6:0c:2e:2b:7d:66:6b:7f:c6:4d:11:28:46:9f:2e:85:44:f6: fb:04:d2:07:cc:3b:09:ba:9c:53:a4:4c:58:90:ae:ec:9c:9c: c4:b8:e7:55:f7:e2:2b:f3:94:f7:33:68:51:32:91:25:bb:88: 13:4b:f9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5k965HOJRQ4GLZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTAzMTE0NDIyNloXDTI1MDEyOTE1NDIyNlowLzEtMCsGA1UEAxMk ODcyMmI0NTctZmE1OC00YjM2LTgxMGItZjk3ZTYwYjI0NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWaVim2lJyZdO2PEigMM2dOqYrb0Zy00piYF tKSQ343KBqiDnargYmsWtf7JlHHIvwCXuFB9PmyEJhQjCo0abZ1lAGym8vndCMWv DZHkf9MvIiPvpsh2rmhXa+5D2110g32QFN5Ra60bwk0AG/i+krgo4hx68fq5Wmvx a3j5f7O5NmFlcdjXCRJHUg9UwhwtRYO9Bh4a6N5tub2QDQdlrDUnyKu8y+8HiK7A q0+t576B6jrS6l/odwfpDkbA9wQPd9Wc7Xie8E/wp+Eo8qpHsJlAL26VT9UV9OHj B15t+EzkKwvy7aWsNozMAF6u+UByTXlpIn3o5og/fWlIUYObNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcizCXyhjujCfD8x5rHSulCVKLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTZiZjYyNDYtNTFjYi0z MmU2LTk2ZjYtYmJiMTdjN2VkZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyQMYxATaL2o5yK+8tlvom0RR38mH7wsQ4zXNUxnfPVoSuFvzeGWuKb 2p2p1KpxYD8a63Y2GPz/yy/aeAgl+7V2ey4MBVsPRjQTC6JUX7oPpvAVUI3mchjE 4jWeV0UFCLYhRz6lNQi2gM8elD4qyfa2CksxAsn+2OMUl2LKdBJ5N8n7rg9vQjiP ueCURcV1CSwot+U1VYjnMueXwoR0SHE7IMGfxFd4jV+HUTTbi7s8LhPFCl6vCpbg pH2wPvnWMNV7gvSLErYMLit9Zmt/xk0RKEafLoVE9vsE0gfMOwm6nFOkTFiQruyc nMS451X34ivzlPczaFEykSW7iBNL+Qc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:17 2024 by rpki-client on console-fra.rpki-client.org