$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa File: 32332e3135362e3130342e302f32342d3234203d3e203135333533.roa (raw, json) Hash identifier: kxSpXJcmHgJiDDh+CjREDn8rqsHgJnB9CFqrFwUrQFc= Subject key identifier: 69:AF:39:84:A6:39:10:A0:9F:4C:AE:7F:EB:80:E5:4B:A7:B7:61:3F Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 66A347DF306C361D0111681C04F3103C02E1784D Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa Signing time: Mon 14 Oct 2024 10:50:16 +0000 ROA not before: Mon 14 Oct 2024 10:45:16 +0000 ROA not after: Mon 13 Oct 2025 10:50:16 +0000 asID: 15353 IP address blocks: 23.156.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a3:47:df:30:6c:36:1d:01:11:68:1c:04:f3:10:3c:02:e1:78:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Oct 14 10:45:16 2024 GMT Not After : Oct 13 10:50:16 2025 GMT Subject: CN=69AF3984A63910A09F4CAE7FEB80E54BA7B7613F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:3c:9f:d8:52:56:22:42:42:98:ef:6d:b9: 64:39:4b:87:c2:fe:39:89:0f:67:a1:cf:f9:88:db: c0:d8:60:67:35:32:a4:eb:9c:47:b2:18:74:4d:00: 9d:4d:bd:4e:c0:49:39:e4:54:dc:d3:f6:a0:3b:62: 58:b1:2b:68:23:c4:f2:61:3c:2c:55:a3:5c:c4:67: 97:26:94:50:aa:1a:f0:7f:67:ca:af:6e:ed:60:23: 9e:4d:6d:02:fe:85:e6:26:e8:4a:78:9e:0d:e0:32: 7a:0c:81:ee:fd:bb:b4:82:72:c2:b8:0f:ce:59:22: 0d:85:1e:e3:b4:58:e5:aa:da:7a:8e:de:b0:8b:1b: 2c:e6:ed:ec:ea:71:79:a0:c1:27:2d:95:bb:4b:eb: 9c:82:5c:4a:f6:56:ad:c1:2d:69:99:51:65:10:94: a3:6c:db:34:62:c7:d6:1c:17:5c:21:49:ec:52:24: e6:81:42:4c:98:50:77:26:0d:51:26:57:91:5d:43: 48:eb:f0:77:5c:91:71:7f:ab:ba:b2:cb:92:07:f6: 11:9d:c2:a2:95:67:67:f1:c7:b7:77:48:da:ff:b5: 59:93:ec:a7:d1:ff:31:7f:5c:4a:66:6a:8c:cb:c4: 4f:a0:9f:e7:06:f6:26:cf:8c:66:ce:76:18:e1:4c: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:39:84:A6:39:10:A0:9F:4C:AE:7F:EB:80:E5:4B:A7:B7:61:3F X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.156.104.0/24 Signature Algorithm: sha256WithRSAEncryption 52:7d:2b:8d:fb:91:6a:fb:4a:18:73:05:4a:ac:32:82:65:30: 2e:d7:15:56:a2:78:16:7c:3e:81:13:0f:7f:0f:bb:75:27:ad: 1f:17:93:16:d8:e4:52:97:c7:a5:e1:4a:40:b2:92:ca:df:a3: 07:f1:01:74:25:6b:55:db:d6:7b:00:b4:8e:ae:37:94:58:62: aa:2f:52:38:43:26:51:53:76:ba:6a:56:37:52:c6:01:10:7a: a9:b9:47:9f:17:46:ef:d7:eb:4f:d5:9e:c6:b7:d8:a7:1a:7d: 19:ad:27:3a:0c:72:30:b7:89:6e:dc:ce:9c:ba:7e:24:5f:0c: 69:80:f3:b6:3f:8b:b1:c3:8d:ad:e3:b3:c7:ec:59:bb:d4:b1: ac:10:3f:dd:6c:3b:f6:54:9d:d6:e3:be:e9:eb:dc:99:49:da: 1b:7e:79:e7:6f:44:4c:23:81:f3:00:39:d5:43:c3:2b:53:b8: 7d:51:3d:3d:97:2a:64:83:0d:79:ff:3f:ba:b9:7b:db:b0:7e: b2:51:ea:a5:5a:e4:fd:52:7b:2b:cf:cf:fb:aa:61:11:44:b9: 49:bf:06:fb:81:d4:fb:f3:ed:02:87:bf:70:40:5e:15:c0:9f: 25:2e:62:db:04:27:e8:82:f8:c7:81:4d:d0:a7:af:32:9a:19: 96:fb:4a:ca -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUZqNH3zBsNh0BEWgcBPMQPALheE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjQxMDE0MTA0NTE2WhcNMjUxMDEzMTA1MDE2 WjAzMTEwLwYDVQQDEyg2OUFGMzk4NEE2MzkxMEEwOUY0Q0FFN0ZFQjgwRTU0QkE3 Qjc2MTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQs8n9hSViJC QpjvbblkOUuHwv45iQ9noc/5iNvA2GBnNTKk65xHshh0TQCdTb1OwEk55FTc0/ag O2JYsStoI8TyYTwsVaNcxGeXJpRQqhrwf2fKr27tYCOeTW0C/oXmJuhKeJ4N4DJ6 DIHu/bu0gnLCuA/OWSINhR7jtFjlqtp6jt6wixss5u3s6nF5oMEnLZW7S+ucglxK 9latwS1pmVFlEJSjbNs0YsfWHBdcIUnsUiTmgUJMmFB3Jg1RJleRXUNI6/B3XJFx f6u6ssuSB/YRncKilWdn8ce3d0ja/7VZk+yn0f8xf1xKZmqMy8RPoJ/nBvYmz4xm znYY4UwSHQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGmvOYSmORCgn0yuf+uA5Uun t2E/MB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC83LzMyMzMyZTMx MzUzNjJlMzEzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEABecaDANBgkqhkiG9w0BAQsFAAOCAQEAUn0rjfuRavtKGHMFSqwy gmUwLtcVVqJ4Fnw+gRMPfw+7dSetHxeTFtjkUpfHpeFKQLKSyt+jB/EBdCVrVdvW ewC0jq43lFhiqi9SOEMmUVN2umpWN1LGARB6qblHnxdG79frT9WexrfYpxp9Ga0n OgxyMLeJbtzOnLp+JF8MaYDztj+LscONreOzx+xZu9SxrBA/3Ww79lSd1uO+6evc mUnaG355529ETCOB8wA51UPDK1O4fVE9PZcqZIMNef8/url727B+slHqpVrk/VJ7 K8/P+6phEUS5Sb8G+4HU+/PtAoe/cEBeFcCfJS5i2wQn6IL4x4FN0KevMpoZlvtK yg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org