$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: GfKbaYoEgSiSJe/lYCJKgfwHKhzMxF0sA+wstRK28u0= Subject key identifier: 39:41:CF:87:7F:F2:63:C8:DE:76:1F:03:8F:13:D8:F2:BB:92:8C:48 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F43285847872122D1FF62CB807BC4D080 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:22:d1:ff:62:cb:80:7b:c4:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=a124fbdd-148c-4a07-96a6-b870dbb5df49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:75:b7:ad:6b:a2:81:d5:48:55:d7:5c:b5: 88:d4:22:8c:d5:fa:c3:28:73:95:d2:64:41:4c:a5: b1:62:1a:70:38:9b:15:28:33:a0:ed:24:4b:69:9e: d6:44:08:15:c9:db:82:12:ea:82:7c:50:5d:54:2d: 34:16:d5:42:35:32:89:3d:15:56:59:1c:9a:b0:09: 27:8e:f5:34:7e:c0:48:ca:92:a2:77:a5:4a:ff:78: d4:32:e2:3b:cf:7a:f3:bd:b5:9b:b4:f6:9e:f2:75: 93:45:17:a8:e2:33:a7:2f:44:29:54:05:42:46:2b: b6:35:f8:12:73:43:9e:96:79:12:d3:06:95:26:6f: b3:60:4a:8d:a0:11:23:e6:77:80:23:69:fb:8c:82: c2:03:ec:d5:ea:cc:5d:15:cd:89:fd:c6:f7:1b:a5: 08:bd:db:99:4c:0b:76:4c:c7:b5:b6:07:43:91:9e: 40:dc:d5:63:11:eb:87:39:a0:05:e8:b4:4c:e4:64: d2:b0:af:8d:13:01:8e:28:90:5f:cf:a1:27:0b:b7: 5a:7b:0a:e1:11:79:b5:dc:d8:a7:ef:f5:39:f0:e8: 97:81:47:34:4c:0d:0a:92:03:1d:cc:c5:90:d0:90: 22:c4:e9:d0:bb:76:90:9f:f0:8f:cf:47:54:77:94: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:CF:87:7F:F2:63:C8:DE:76:1F:03:8F:13:D8:F2:BB:92:8C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c5:6b:26:b2:b2:5e:fd:1e:8c:73:8d:96:2e:f9:3b:3d:09: 75:86:84:c5:51:8d:4e:a6:d5:16:28:fd:6f:83:f1:eb:17:1a: 37:7b:6c:32:ee:d5:83:48:a5:5b:b9:18:fd:36:2a:0f:2e:2b: da:dc:c3:cc:a4:b5:ab:26:af:7a:34:15:47:4e:62:dd:f2:d5: 5f:c5:6b:21:c4:38:c6:f0:5a:7d:a2:bf:c9:c3:fa:fa:6e:68: 89:bc:54:ff:90:de:eb:01:77:1a:ed:e8:9b:2e:31:9e:b3:ef: 27:51:9e:de:1c:3c:b4:93:b5:3a:2f:c7:5d:c3:4d:a9:f3:1f: df:57:c3:c3:9f:d8:29:df:8d:2b:50:c5:1f:f9:4c:29:08:7e: ff:b7:45:da:64:66:87:96:4c:f0:f4:ea:5a:a0:ea:3f:b1:c8: a5:bb:80:bd:ae:a9:b8:01:ff:af:f3:b9:3f:24:17:65:42:43: 31:ba:d0:03:e7:05:6d:44:30:26:10:3a:66:55:d9:ba:01:23: a8:b1:28:18:e5:8a:0e:23:66:12:d8:44:12:54:12:b7:7f:bb: 32:ed:ef:1b:4f:32:81:60:22:99:36:1e:39:da:41:a9:00:db: f6:7a:95:d3:3b:c6:ed:0c:44:84:27:03:29:ce:66:04:f2:8f: f1:ea:15:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISLR/2LLgHvE0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk YTEyNGZiZGQtMTQ4Yy00YTA3LTk2YTYtYjg3MGRiYjVkZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5x1t61rooHVSFXXXLWI1CKM1frDKHOV0mRB TKWxYhpwOJsVKDOg7SRLaZ7WRAgVyduCEuqCfFBdVC00FtVCNTKJPRVWWRyasAkn jvU0fsBIypKid6VK/3jUMuI7z3rzvbWbtPae8nWTRReo4jOnL0QpVAVCRiu2NfgS c0OelnkS0waVJm+zYEqNoBEj5neAI2n7jILCA+zV6sxdFc2J/cb3G6UIvduZTAt2 TMe1tgdDkZ5A3NVjEeuHOaAF6LRM5GTSsK+NEwGOKJBfz6EnC7daewrhEXm13Nin 7/U58OiXgUc0TA0KkgMdzMWQ0JAixOnQu3aQn/CPz0dUd5Ts/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlBz4d/8mPI3nYfA48T2PK7koxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbFayaysl79HoxzjZYu+Ts9CXWGhMVRjU6m1RYo/W+D8esXGjd7bDLu 1YNIpVu5GP02Kg8uK9rcw8yktasmr3o0FUdOYt3y1V/FayHEOMbwWn2iv8nD+vpu aIm8VP+Q3usBdxrt6JsuMZ6z7ydRnt4cPLSTtTovx13DTanzH99Xw8Of2CnfjStQ xR/5TCkIfv+3RdpkZoeWTPD06lqg6j+xyKW7gL2uqbgB/6/zuT8kF2VCQzG60APn BW1EMCYQOmZV2boBI6ixKBjlig4jZhLYRBJUErd/uzLt7xtPMoFgIpk2HjnaQakA 2/Z6ldM7xu0MRIQnAynOZgTyj/HqFW0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org