$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: SVWnYsfY0SC8Z3xWlz25a8tfAlMDLXNgys0Zk3gdZlM= Subject key identifier: 7F:86:15:0D:E3:4B:3E:EE:99:98:3E:39:C5:F7:BD:B0:19:4A:37:E9 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285845DEC942E8CF6186155905F780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Tue 14 May 2024 13:00:34 +0000 ROA not before: Tue 14 May 2024 13:00:34 +0000 ROA not after: Mon 12 Aug 2024 13:00:34 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:c9:42:e8:cf:61:86:15:59:05:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 14 13:00:34 2024 GMT Not After : Aug 12 13:00:34 2024 GMT Subject: CN=42a251c0-7144-472f-bb95-341236a3e13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:1c:4b:1b:9d:2d:a1:d1:17:60:a7:b9:58: 40:9b:2a:1b:7b:c0:66:d5:f0:a7:d4:6f:74:db:02: 81:cf:f4:4e:a2:8a:5f:fd:75:fe:88:b2:29:bf:4b: f2:ab:31:82:e1:2a:74:4f:b9:98:56:da:33:de:37: 0b:2a:5c:38:ea:1e:f3:e8:fa:30:47:5e:7a:5c:ac: d0:67:5d:58:df:ff:02:bb:52:fd:c5:d9:2f:12:66: 1f:77:65:dc:0f:9e:0d:cb:f0:f9:a1:5d:72:8a:b1: 1e:a7:0a:3b:53:a6:b9:25:6b:5f:9a:8e:b2:69:d7: 5e:57:9c:7a:87:53:ad:48:81:f0:80:83:de:4b:49: 08:4e:ba:ed:90:5c:2d:36:87:29:2a:cf:37:a9:f6: 36:2b:37:06:1f:bc:a8:de:2d:b6:fb:e5:6b:0b:ff: be:c7:9c:8f:74:5d:07:29:0e:7d:68:30:02:e9:3d: d5:bc:ee:bb:ef:6f:fb:a6:59:68:43:ef:0a:d6:4b: 5a:a1:42:0c:aa:06:67:08:88:1a:03:b9:22:df:48: dd:eb:c1:11:ab:cd:1a:b3:ae:24:d6:7a:77:24:cd: ab:db:ac:e3:74:d2:d1:5d:97:f7:06:19:b6:70:a4: f9:56:a8:69:6a:02:f0:e4:89:a6:51:d7:05:e0:2a: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:15:0D:E3:4B:3E:EE:99:98:3E:39:C5:F7:BD:B0:19:4A:37:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d8:8b:cf:29:ef:1d:7e:9c:b8:85:58:f5:c3:b6:b9:23:3e: d8:87:0a:9e:64:19:0f:04:2e:9a:b1:77:a3:4b:e0:fa:29:c2: 8a:14:a2:13:70:35:54:67:bc:7b:f6:8a:7f:5d:17:2e:7e:cd: 7f:1e:8b:b6:72:21:27:44:fd:c9:d6:20:51:08:98:87:9e:4a: 28:e1:b3:d0:a8:38:9f:31:39:dc:7e:d7:3d:96:0c:20:bc:02: fe:ba:71:a9:a8:66:e3:2e:d4:27:fc:ec:a2:60:1f:c9:ae:ee: e4:db:06:4e:80:ec:b1:7a:d7:65:d0:90:4d:cd:5a:e1:71:53: 09:72:17:5e:b9:e6:17:6c:dd:b2:ae:6c:ea:74:ba:34:87:3f: c3:9e:a9:1f:9f:37:da:ee:ab:52:40:0a:5e:95:8a:af:d3:0c: ea:aa:1b:7c:8a:87:6c:ca:82:e1:1b:21:35:60:42:d3:db:b4: a7:45:44:91:3f:1c:53:7c:43:c0:63:76:6e:cd:45:8a:7d:7d: 03:58:f7:0b:1b:24:82:a2:50:ed:40:eb:e4:d7:17:ae:f4:ab: df:eb:8f:0f:5d:90:51:61:73:14:1b:50:70:d6:c7:04:fc:25: c3:69:b3:1a:24:52:74:2c:c7:4a:a0:c2:7a:00:98:ef:96:09: e1:c6:e0:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyULoz2GGFVkF94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk NDJhMjUxYzAtNzE0NC00NzJmLWJiOTUtMzQxMjM2YTNlMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu0cSxudLaHRF2CnuVhAmyobe8Bm1fCn1G90 2wKBz/ROoopf/XX+iLIpv0vyqzGC4Sp0T7mYVtoz3jcLKlw46h7z6PowR156XKzQ Z11Y3/8Cu1L9xdkvEmYfd2XcD54Ny/D5oV1yirEepwo7U6a5JWtfmo6yaddeV5x6 h1OtSIHwgIPeS0kITrrtkFwtNocpKs83qfY2KzcGH7yo3i22++VrC/++x5yPdF0H KQ59aDAC6T3VvO6772/7plloQ+8K1ktaoUIMqgZnCIgaA7ki30jd68ERq80as64k 1np3JM2r26zjdNLRXZf3Bhm2cKT5VqhpagLw5ImmUdcF4Cow5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+GFQ3jSz7umZg+OcX3vbAZSjfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnYi88p7x1+nLiFWPXDtrkjPtiHCp5kGQ8ELpqxd6NL4PopwooUohNw NVRnvHv2in9dFy5+zX8ei7ZyISdE/cnWIFEImIeeSijhs9CoOJ8xOdx+1z2WDCC8 Av66camoZuMu1Cf87KJgH8mu7uTbBk6A7LF612XQkE3NWuFxUwlyF1655hds3bKu bOp0ujSHP8OeqR+fN9ruq1JACl6Viq/TDOqqG3yKh2zKguEbITVgQtPbtKdFRJE/ HFN8Q8Bjdm7NRYp9fQNY9wsbJIKiUO1A6+TXF670q9/rjw9dkFFhcxQbUHDWxwT8 JcNpsxokUnQsx0qgwnoAmO+WCeHG4E0= -----END CERTIFICATE-----Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org