$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: BvztyrrVw6y5gAQLQkGd5ZkBeGdRnch2xivdS3XZjZU= Subject key identifier: B4:3D:49:8E:C3:3D:B0:DA:57:67:04:51:6E:23:D3:D5:9F:67:B0:84 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285845DEC942F660AA034172E3C280 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Tue 14 May 2024 13:00:34 +0000 ROA not before: Tue 14 May 2024 13:00:34 +0000 ROA not after: Mon 12 Aug 2024 13:00:34 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:c9:42:f6:60:aa:03:41:72:e3:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 14 13:00:34 2024 GMT Not After : Aug 12 13:00:34 2024 GMT Subject: CN=a30430ab-f9cd-4725-a7ee-57b41a58ac74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:0c:22:f1:e6:6c:8c:3e:0a:c4:9b:f2:98: d0:c9:6f:de:41:39:e3:54:54:25:51:63:eb:9a:cf: 8e:c1:ab:92:79:60:15:8f:a0:99:81:bd:fa:20:e1: 06:e6:42:34:b1:01:5d:f3:ac:d3:e4:1c:bd:77:f0: b9:32:d7:f2:49:76:2b:18:c2:bd:8b:5b:4b:72:77: d9:01:a2:97:94:e6:04:f7:f3:47:cb:c0:22:3d:72: ff:28:4c:d6:9c:80:53:3b:26:d3:7f:e2:95:1e:de: 64:f2:53:b1:f6:94:94:f0:7d:5b:40:5b:cb:98:e0: 8a:c2:96:bc:be:c4:af:c3:ce:30:e5:f6:63:3a:73: 9d:53:ed:1f:48:18:fe:a8:8e:7c:56:f8:8d:b2:b8: f2:c6:7d:d8:dd:f9:e1:68:27:b9:4f:91:f5:3b:4f: 53:b7:b1:ee:05:0a:ff:1d:5f:3c:7d:86:6d:a6:76: e5:51:4b:d9:88:35:68:c0:d2:bb:03:2e:46:0b:e2: b8:ce:1f:6d:a8:c5:75:34:15:c9:7c:de:46:7a:af: 73:60:a7:2b:17:85:ef:ad:a7:eb:96:8c:70:12:30: 46:d2:d0:a6:9b:8e:a6:a6:06:28:8b:ad:ce:16:5c: 1c:2c:fe:27:62:2d:4b:72:b9:80:d3:4d:df:be:83: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:49:8E:C3:3D:B0:DA:57:67:04:51:6E:23:D3:D5:9F:67:B0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:77:6a:96:d8:ec:22:c2:81:31:88:2d:2f:98:fb:d9:9e:a3: 25:9e:79:1e:4b:68:3b:d8:82:14:1a:af:8d:c5:bb:c9:d4:0c: a4:80:4a:50:bd:bc:a4:3e:19:bf:36:d4:98:dc:6b:8d:d7:e0: 95:f7:5f:7d:00:1e:76:5d:7f:f5:85:4b:65:28:88:b0:b4:b4: ee:b2:a0:cf:a5:89:73:24:9a:0f:74:0a:79:4c:81:80:1d:64: a6:6e:e6:9e:39:18:e5:ec:2f:21:44:32:1a:da:3d:15:a2:57: 56:f6:c9:04:bb:74:41:c9:1e:ac:5c:d8:2b:0a:20:28:cd:b1: 5e:80:bd:c6:4d:dd:7b:1d:c0:34:92:85:ac:12:4f:75:81:03: 1f:50:c7:69:f1:29:0e:06:6c:91:d1:fe:53:83:81:d8:2c:ce: 9e:b5:ad:d4:5d:8f:ed:04:f0:9c:59:3a:f6:e9:f3:f7:1c:e1: 5d:96:e6:8a:9a:08:77:10:53:df:55:1d:12:02:9d:ca:1a:83: e4:c3:c5:1a:1e:b2:70:27:0c:72:52:b8:c1:d9:4f:af:8e:4c: 4a:75:d0:2f:e4:00:01:5a:d5:fa:79:e1:c0:4a:bb:2f:d0:fb: aa:e8:b1:c5:d2:b1:92:3b:7e:41:37:8e:a0:ee:78:88:a8:02: 30:14:b7:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyUL2YKoDQXLjwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk YTMwNDMwYWItZjljZC00NzI1LWE3ZWUtNTdiNDFhNThhYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnIMIvHmbIw+CsSb8pjQyW/eQTnjVFQlUWPr ms+OwauSeWAVj6CZgb36IOEG5kI0sQFd86zT5By9d/C5MtfySXYrGMK9i1tLcnfZ AaKXlOYE9/NHy8AiPXL/KEzWnIBTOybTf+KVHt5k8lOx9pSU8H1bQFvLmOCKwpa8 vsSvw84w5fZjOnOdU+0fSBj+qI58VviNsrjyxn3Y3fnhaCe5T5H1O09Tt7HuBQr/ HV88fYZtpnblUUvZiDVowNK7Ay5GC+K4zh9tqMV1NBXJfN5Geq9zYKcrF4Xvrafr loxwEjBG0tCmm46mpgYoi63OFlwcLP4nYi1LcrmA003fvoPM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ9SY7DPbDaV2cEUW4j09WfZ7CEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN3apbY7CLCgTGILS+Y+9meoyWeeR5LaDvYghQar43Fu8nUDKSASlC9 vKQ+Gb821Jjca43X4JX3X30AHnZdf/WFS2UoiLC0tO6yoM+liXMkmg90CnlMgYAd ZKZu5p45GOXsLyFEMhraPRWiV1b2yQS7dEHJHqxc2CsKICjNsV6AvcZN3XsdwDSS hawST3WBAx9Qx2nxKQ4GbJHR/lODgdgszp61rdRdj+0E8JxZOvbp8/cc4V2W5oqa CHcQU99VHRICncoag+TDxRoesnAnDHJSuMHZT6+OTEp10C/kAAFa1fp54cBKuy/Q +6roscXSsZI7fkE3jqDueIioAjAUtxc= -----END CERTIFICATE-----Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org