$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: 4Kg42UT2KA1Uw19ax5g12zUg01+UOhTDk3mx/mBJO+I= Subject key identifier: 0A:77:8D:35:68:86:60:F8:2B:D6:B6:D3:87:45:07:EC:1D:BD:AF:4B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858459368D018E6B56A56DE135720 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:d0:18:e6:b5:6a:56:de:13:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=34d065c6-d3f8-49f8-8954-4f3dd115dfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:00:30:17:09:4d:1e:f8:aa:07:df:85:e2: f0:ec:19:7f:8a:59:86:47:12:fc:05:bb:d3:63:ab: 6d:61:7f:44:d0:cc:c4:64:82:70:83:3e:53:e3:6e: 00:f1:be:6b:2d:e4:85:3a:ff:e3:b0:05:a7:74:93: 60:80:be:6d:1f:02:3f:43:bd:18:b0:ee:cb:ef:58: 77:70:d9:ab:e4:96:f3:85:44:94:cb:ae:62:42:50: ce:1c:14:8d:bb:f4:94:46:62:b2:87:0b:08:59:9e: 4f:7a:9a:ec:6f:40:98:28:92:cd:6f:98:f0:d0:f0: 96:22:07:70:e7:f3:e1:0a:9e:d6:23:89:30:8c:3a: 38:eb:07:f3:f1:d4:c1:68:04:94:72:64:e7:a4:f8: 1f:43:75:3e:62:10:eb:3f:be:c2:61:fe:61:e5:6c: db:55:38:1c:b4:a0:cf:1d:59:6e:03:9e:75:10:c8: 87:93:25:83:b5:cb:99:85:18:4b:21:fc:0c:e8:c6: 04:5c:c1:7a:f7:11:9c:bc:3c:6f:35:d2:8c:54:ae: 76:7e:0b:b7:d0:3f:f1:a9:a6:ad:a9:68:a3:75:86: da:97:c1:df:c5:ee:e7:45:c8:02:0e:4c:59:ec:4b: 24:a0:d6:3b:b2:eb:38:d3:92:fb:bb:62:19:10:9e: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:8D:35:68:86:60:F8:2B:D6:B6:D3:87:45:07:EC:1D:BD:AF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5c:89:8b:4a:a7:6e:1d:f6:65:38:60:ab:9c:40:c8:49:ea: 5e:58:c8:82:b2:1d:7b:a7:66:11:8e:5f:a2:ed:60:9e:f6:d7: 8e:a6:3c:98:1f:2e:f6:46:de:12:dc:2a:4e:1e:72:bf:b1:47: d2:4a:ec:b2:e7:59:39:0b:05:22:7f:bd:4d:bc:5a:54:87:e3: f4:88:71:b7:13:b0:0e:3d:f6:27:95:2d:bc:43:30:07:95:47: 7e:46:fd:72:85:0b:a2:53:02:78:86:dc:f0:d0:05:9f:bd:f0: 8e:f5:af:8c:8c:2a:26:81:af:0a:5a:17:7f:95:cd:99:f5:96: a1:de:f5:d1:94:be:d8:f9:d3:7e:b0:14:21:d6:ae:9a:f2:d6: aa:9f:79:df:48:06:c8:6a:f6:35:24:e3:6f:2c:c6:38:e2:09: 24:8d:98:c5:cf:b0:e0:01:d4:02:fa:2e:46:97:fb:62:b0:79: 30:30:a8:0a:85:10:a9:bc:6c:4b:96:be:69:4c:44:48:3d:39: d9:9c:76:c4:7b:ff:59:2a:df:51:c5:09:2e:f8:69:96:8f:a5: 6b:43:6b:d2:7d:82:c9:f7:e2:c8:3a:c2:cb:92:f2:1b:b0:33: bc:ee:87:a7:c5:e6:53:ef:86:ad:0e:bd:eb:20:01:bb:99:10: aa:4c:11:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaNAY5rVqVt4TVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk MzRkMDY1YzYtZDNmOC00OWY4LTg5NTQtNGYzZGQxMTVkZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZUAMBcJTR74qgffheLw7Bl/ilmGRxL8BbvT Y6ttYX9E0MzEZIJwgz5T424A8b5rLeSFOv/jsAWndJNggL5tHwI/Q70YsO7L71h3 cNmr5JbzhUSUy65iQlDOHBSNu/SURmKyhwsIWZ5Peprsb0CYKJLNb5jw0PCWIgdw 5/PhCp7WI4kwjDo46wfz8dTBaASUcmTnpPgfQ3U+YhDrP77CYf5h5WzbVTgctKDP HVluA551EMiHkyWDtcuZhRhLIfwM6MYEXMF69xGcvDxvNdKMVK52fgu30D/xqaat qWijdYbal8Hfxe7nRcgCDkxZ7EskoNY7sus405L7u2IZEJ6gRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3jTVohmD4K9a204dFB+wdva9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhciYtKp24d9mU4YKucQMhJ6l5YyIKyHXunZhGOX6LtYJ72146mPJgf LvZG3hLcKk4ecr+xR9JK7LLnWTkLBSJ/vU28WlSH4/SIcbcTsA499ieVLbxDMAeV R35G/XKFC6JTAniG3PDQBZ+98I71r4yMKiaBrwpaF3+VzZn1lqHe9dGUvtj5036w FCHWrpry1qqfed9IBshq9jUk428sxjjiCSSNmMXPsOAB1AL6LkaX+2KweTAwqAqF EKm8bEuWvmlMREg9OdmcdsR7/1kq31HFCS74aZaPpWtDa9J9gsn34sg6wsuS8huw M7zuh6fF5lPvhq0OvesgAbuZEKpMEZk= -----END CERTIFICATE-----Generated at Fri May 17 22:00:46 2024 by rpki-client on console-ams.rpki-client.org