$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: GPhalgbrNnMjOdMxFWmRuHntC1M287BW4VC1wCIBDw4= Subject key identifier: 3A:60:B0:EB:02:55:CB:B0:F9:FE:29:32:0D:E2:F5:50:BD:94:AF:52 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584547F139E6BDCBC4C336506E00 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Thu 21 Mar 2024 12:14:30 +0000 ROA not before: Thu 21 Mar 2024 12:14:30 +0000 ROA not after: Wed 19 Jun 2024 12:14:30 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:47:f1:39:e6:bd:cb:c4:c3:36:50:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Mar 21 12:14:30 2024 GMT Not After : Jun 19 12:14:30 2024 GMT Subject: CN=a8ead38b-979c-4a10-b211-ae3008aa17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:ef:f0:d4:42:d1:c7:03:c6:50:50:d4:98: 5f:ca:79:6c:8e:cc:9d:23:69:09:b0:d8:4c:ba:fb: 3b:08:fb:5a:3f:6e:5e:93:6a:af:1f:ff:1c:83:dc: ff:04:84:a8:76:43:83:6a:55:65:f2:b8:40:5d:d1: e2:08:b5:4c:3c:2a:e0:ac:be:6f:d0:7d:2a:65:5b: cb:c5:a3:75:ef:26:af:85:3e:40:ee:47:c8:70:a8: d9:ce:af:eb:aa:81:ed:02:ea:05:48:3a:85:13:41: d3:3f:cd:e1:64:c5:f6:2e:26:b9:3d:8f:b7:e5:21: a4:fd:0d:d5:f0:6b:f7:3a:82:0c:53:56:e1:b4:19: 4f:13:fd:7f:7a:f7:1e:10:54:ab:38:5a:35:fa:d7: 0f:38:18:f0:d0:bf:d8:7e:5c:3f:03:c3:3a:98:9e: 03:c0:e4:a5:4b:5a:54:b5:46:6c:7b:6b:6c:fc:3c: 10:55:37:6e:ab:ac:98:f7:99:a6:de:58:32:11:93: 53:05:8b:ac:a2:28:3e:e0:93:67:d3:19:c4:50:5d: b9:cc:29:60:82:43:a4:28:8c:13:07:14:b0:2e:c5: ec:b7:cf:2d:47:56:a7:e3:9a:d9:b0:82:aa:83:b3: 4b:ee:16:a1:9e:e8:98:4c:61:b6:d7:e0:ae:b4:d2: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:B0:EB:02:55:CB:B0:F9:FE:29:32:0D:E2:F5:50:BD:94:AF:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e4:d4:66:16:4f:e7:04:ca:36:7e:b6:09:0a:cc:a7:d7:63: c7:3d:cd:89:13:6e:20:10:fc:b8:a7:52:89:df:34:bc:d2:cd: 5d:15:e9:f4:b9:db:6b:c7:8f:d4:f1:5a:e6:4e:30:64:a6:e2: 6e:1f:fc:c9:f6:97:8c:97:29:c0:7b:c9:44:c3:94:81:a3:eb: f9:1b:0f:de:8f:65:d3:0c:64:aa:ce:32:d7:a3:f4:ec:14:d7: 54:d8:36:5a:23:f5:89:43:b9:8b:e6:bb:29:6c:04:d5:70:d6: 5e:c2:20:bd:11:d2:22:34:72:a4:36:b0:d7:6a:7e:32:31:95: 3d:6a:2f:d3:cd:f7:41:ab:54:66:c6:1d:f5:1b:a5:73:bd:68: 6f:89:78:9a:b1:64:cf:4a:41:25:42:39:3e:22:5b:cc:8d:a2: cf:53:56:7e:c2:af:e6:27:7f:1f:ee:20:c4:00:20:92:bc:bd: fb:69:7a:33:30:69:56:f2:92:f5:e8:2d:65:3e:61:56:c4:85: b8:7b:86:11:bc:b9:30:ad:c7:e8:c1:08:e3:6f:ac:42:07:c2: 7b:b2:e7:f9:ad:fc:27:f9:29:58:49:20:82:f6:90:d0:f9:50: cb:77:81:4e:98:b4:7a:6d:b8:1d:bc:b0:f9:f2:73:26:37:33: 62:b2:c5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVH8TnmvcvEwzZQbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI0MDMyMTEyMTQzMFoXDTI0MDYxOTEyMTQzMFowLzEtMCsGA1UEAxMk YThlYWQzOGItOTc5Yy00YTEwLWIyMTEtYWUzMDA4YWExN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bv8NRC0ccDxlBQ1JhfynlsjsydI2kJsNhM uvs7CPtaP25ek2qvH/8cg9z/BISodkODalVl8rhAXdHiCLVMPCrgrL5v0H0qZVvL xaN17yavhT5A7kfIcKjZzq/rqoHtAuoFSDqFE0HTP83hZMX2Lia5PY+35SGk/Q3V 8Gv3OoIMU1bhtBlPE/1/evceEFSrOFo1+tcPOBjw0L/Yflw/A8M6mJ4DwOSlS1pU tUZse2ts/DwQVTduq6yY95mm3lgyEZNTBYusoig+4JNn0xnEUF25zClggkOkKIwT BxSwLsXst88tR1an45rZsIKqg7NL7hahnuiYTGG21+CutNKfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpgsOsCVcuw+f4pMg3i9VC9lK9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrk1GYWT+cEyjZ+tgkKzKfXY8c9zYkTbiAQ/LinUonfNLzSzV0V6fS5 22vHj9TxWuZOMGSm4m4f/Mn2l4yXKcB7yUTDlIGj6/kbD96PZdMMZKrOMtej9OwU 11TYNloj9YlDuYvmuylsBNVw1l7CIL0R0iI0cqQ2sNdqfjIxlT1qL9PN90GrVGbG HfUbpXO9aG+JeJqxZM9KQSVCOT4iW8yNos9TVn7Cr+Ynfx/uIMQAIJK8vftpejMw aVbykvXoLWU+YVbEhbh7hhG8uTCtx+jBCONvrEIHwnuy5/mt/Cf5KVhJIIL2kND5 UMt3gU6YtHptuB28sPnycyY3M2Kyxag= -----END CERTIFICATE-----Generated at Wed May 22 01:56:47 2024 by rpki-client on console-fra.rpki-client.org