$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa File: 32332e3139302e32342e302f32342d3234203d3e203133383532.roa (raw, json) Hash identifier: N9miqn/XeWnI2x4q978KfgI3giSsB9quYTNg+REDQRU= Subject key identifier: B8:C7:21:CA:5F:22:38:E8:2B:CB:EF:3B:C7:1B:BB:A7:1E:2A:FA:67 Certificate issuer: /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8 Certificate serial: 75E600D90C8D357DF9A37B4F55C794E76BC02529 Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa Signing time: Thu 19 Sep 2024 13:37:55 +0000 ROA not before: Thu 19 Sep 2024 13:32:55 +0000 ROA not after: Thu 18 Sep 2025 13:37:55 +0000 asID: 13852 IP address blocks: 23.190.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 00:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e6:00:d9:0c:8d:35:7d:f9:a3:7b:4f:55:c7:94:e7:6b:c0:25:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8 Validity Not Before: Sep 19 13:32:55 2024 GMT Not After : Sep 18 13:37:55 2025 GMT Subject: CN=B8C721CA5F2238E82BCBEF3BC71BBBA71E2AFA67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:1f:80:71:74:fe:16:f4:68:35:c6:a7:12: 11:d9:cc:50:4c:59:3a:85:0f:be:95:82:09:f1:5d: 60:50:97:77:da:22:7d:1b:93:ce:ec:3e:95:fd:9d: dd:59:a9:db:a2:16:cb:cf:4d:17:23:4c:c3:45:fc: 9f:67:51:60:f4:51:c5:8c:2f:bc:2d:21:9a:1e:3e: fd:22:f3:75:18:47:c1:f2:82:f9:ca:8a:17:92:cd: 00:db:6d:60:bc:4d:15:45:cc:59:8b:28:25:82:26: f8:6d:2c:6a:e6:d6:bb:0b:0d:d3:27:0f:7c:01:3d: e2:c6:52:11:48:7f:a4:5d:77:60:7f:3f:71:b1:f9: 39:0d:9c:af:e6:24:2f:a5:cf:0f:1f:49:11:5f:6f: 3e:c6:df:ca:bb:21:cb:34:6e:b1:00:18:44:cd:77: 69:55:95:7c:7b:dc:ab:d9:40:bc:00:84:21:80:d8: 71:b7:80:1b:ae:e6:42:9c:cf:ac:13:b2:7e:c8:10: eb:2c:82:b5:ce:e2:f6:4b:9e:fd:dc:25:f6:19:ba: 87:dc:58:00:c0:50:71:2e:b1:e6:3a:4c:44:b8:a0: cb:1b:23:76:65:90:31:a2:b1:1b:cb:42:34:c8:8a: 49:9f:5f:f7:62:03:13:8a:56:64:dd:d5:9e:d1:bf: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:21:CA:5F:22:38:E8:2B:CB:EF:3B:C7:1B:BB:A7:1E:2A:FA:67 X509v3 Authority Key Identifier: keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.190.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:1e:af:21:1d:2d:b5:8e:fd:e0:81:3d:eb:90:7f:a5:39:9c: 52:25:7d:21:e9:4b:98:58:16:83:fc:b9:a2:3a:8d:46:c0:87: f4:87:cb:25:a8:a2:74:22:e0:6b:c3:96:6f:ea:e4:5e:87:98: 21:98:10:d1:a5:91:71:db:7f:de:b2:ef:03:5e:0a:4c:08:73: d5:26:84:7a:33:d4:b7:fc:cf:4e:09:79:d9:f6:5f:a8:8b:7f: b3:d5:7d:da:37:91:12:04:4e:cf:b3:10:64:75:2d:f4:bd:4f: d7:0a:1f:35:54:a7:81:06:54:db:cb:56:48:5a:3c:26:b0:55: d5:dd:ee:7c:c1:ba:ad:37:dd:b6:26:0b:a9:b0:17:59:88:a4: b5:e6:ae:7c:b3:b7:34:05:50:20:95:a6:cc:f9:6c:bc:95:50: b6:3b:12:8d:c6:42:38:5d:c5:1a:da:cf:82:a9:2d:95:12:7f: 51:5b:48:24:5e:ee:3c:0c:d2:e5:b1:d9:73:3e:15:d5:36:4a: 6c:93:87:3a:66:0c:ac:cd:53:76:4e:c2:b4:e0:db:3c:54:08: b3:6c:4d:9b:8e:86:c5:28:6c:e4:fd:7e:3f:ef:43:0e:f5:c5: e0:f0:40:13:64:29:f3:7e:f7:8c:78:70:da:b9:5d:be:80:f3: ca:75:48:0b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUdeYA2QyNNX35o3tPVceU52vAJSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdl NjU2NGMxMDJlZTc5OTZjZTgwHhcNMjQwOTE5MTMzMjU1WhcNMjUwOTE4MTMzNzU1 WjAzMTEwLwYDVQQDEyhCOEM3MjFDQTVGMjIzOEU4MkJDQkVGM0JDNzFCQkJBNzFF MkFGQTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwkfgHF0/hb0 aDXGpxIR2cxQTFk6hQ++lYIJ8V1gUJd32iJ9G5PO7D6V/Z3dWanbohbLz00XI0zD RfyfZ1Fg9FHFjC+8LSGaHj79IvN1GEfB8oL5yooXks0A221gvE0VRcxZiyglgib4 bSxq5ta7Cw3TJw98AT3ixlIRSH+kXXdgfz9xsfk5DZyv5iQvpc8PH0kRX28+xt/K uyHLNG6xABhEzXdpVZV8e9yr2UC8AIQhgNhxt4AbruZCnM+sE7J+yBDrLIK1zuL2 S5793CX2GbqH3FgAwFBxLrHmOkxEuKDLGyN2ZZAxorEby0I0yIpJn1/3YgMTilZk 3dWe0b9AXwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFLjHIcpfIjjoK8vvO8cbu6ce KvpnMB8GA1UdIwQYMBaAFCLsJ7yZl1ND5vJfWkbG5nwoLZbdMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0 LWNjODBkY2EwOTNlNi8zLzIyRUMyN0JDOTk5NzUzNDNFNkYyNUY1QTQ2QzZFNjdD MjgyRDk2REQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZTgzZmJmMi1iNjRiLTRjNTUtYmEyOC1j YTg0YWQwYWY1YWIvZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdlNjU2 NGMxMDJlZTc5OTZjZTguY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8zLzMyMzMyZTMx MzkzMDJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM1MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAAXvhgwDQYJKoZIhvcNAQELBQADggEBAHoeryEdLbWO/eCBPeuQf6U5 nFIlfSHpS5hYFoP8uaI6jUbAh/SHyyWoonQi4GvDlm/q5F6HmCGYENGlkXHbf96y 7wNeCkwIc9UmhHoz1Lf8z04Jedn2X6iLf7PVfdo3kRIETs+zEGR1LfS9T9cKHzVU p4EGVNvLVkhaPCawVdXd7nzBuq033bYmC6mwF1mIpLXmrnyztzQFUCCVpsz5bLyV ULY7Eo3GQjhdxRraz4KpLZUSf1FbSCRe7jwM0uWx2XM+FdU2SmyThzpmDKzNU3ZO wrTg2zxUCLNsTZuOhsUobOT9fj/vQw71xeDwQBNkKfN+94x4cNq5Xb6A88p1SAs= -----END CERTIFICATE-----Generated at Sat Nov 23 00:13:10 2024 by rpki-client on console-ams.rpki-client.org