$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: uqZPXJQmx6dtsO9wlmyYqz0gArCy8K8wY2E0tA5T+Xo= Subject key identifier: 33:76:72:57:0D:12:39:62:84:F9:EE:7E:E2:A0:9C:9D:26:D8:E2:47 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F43285847872128F6A4D5065627B2DEC0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:28:f6:a4:d5:06:56:27:b2:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=b07d4607-b0da-4584-a13c-54668abbdc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:f8:c5:48:72:35:8a:da:ad:b7:47:f6:4f: 6e:5d:8a:2b:2b:16:91:6f:94:9a:e6:12:ba:09:a0: 44:38:be:a0:fe:9e:1b:3e:98:1f:dc:8a:aa:06:14: 77:5f:cb:49:fb:97:c0:15:c7:15:c9:c3:de:a0:d0: b1:f1:b4:f0:89:35:6b:97:5a:8a:ee:a6:66:66:43: 6f:a8:0b:1d:58:1b:42:fa:b5:33:35:a4:23:49:3b: 28:5d:ce:f5:5f:02:91:a0:5f:95:93:b5:9d:3a:d7: bd:de:fb:90:5e:ce:f0:b9:bf:50:e3:d5:18:1b:c7: cc:75:bc:e8:45:e6:e3:fb:02:32:e1:65:75:f2:a5: 24:bd:8d:fe:dd:db:14:86:cb:e3:86:9a:85:1f:e0: 2b:b2:fe:a7:cb:25:74:37:1c:3f:d5:7a:36:6b:07: e7:e8:86:9c:86:06:86:69:bf:31:e7:6d:19:92:b9: e1:71:79:f8:d7:99:05:03:09:f3:4f:8b:c9:da:3d: 0c:da:2c:c8:cf:98:5b:9e:44:4b:a4:41:13:60:cd: 27:24:08:ea:6d:0d:cb:d4:a7:ec:06:3b:c0:07:3d: be:bd:dd:4c:06:63:a3:0d:10:2f:3c:1d:29:a4:1f: df:55:1a:79:a6:82:ac:15:06:49:60:1a:d4:b7:53: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:72:57:0D:12:39:62:84:F9:EE:7E:E2:A0:9C:9D:26:D8:E2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2b:dc:b5:0f:0e:b1:14:4c:28:a8:80:e7:d2:3d:c0:db:e7: 91:82:04:a0:90:31:c5:a4:f7:89:a1:3a:cc:87:60:47:62:97: 45:16:93:ea:cc:ed:27:eb:b1:47:3b:8a:42:7f:63:39:33:ba: 51:dc:fe:43:48:ea:9f:95:65:c9:a8:e5:d2:f5:a3:4f:fa:0d: 85:92:e9:59:46:61:1d:61:63:88:aa:e7:c0:08:0b:55:62:d3: d6:da:37:9d:9c:a0:d0:9a:19:e1:93:2a:46:0e:34:b2:10:88: 88:44:ee:6f:bf:d1:8c:34:8c:6d:00:4b:c3:78:46:85:16:3f: e5:ab:99:fc:9d:b6:df:b7:3f:02:be:4d:f8:5a:c2:d0:69:00: 28:c3:25:7b:c2:47:a4:9e:4e:ca:d1:26:d5:b2:fd:2b:08:2e: 2a:d4:8d:72:45:18:e4:d6:ee:f5:0b:fd:1e:41:c6:98:cb:2b: 92:ff:50:76:b7:9b:6f:01:53:38:7e:7f:39:02:c7:04:d8:a3: 52:22:5c:ae:c2:e9:61:5b:2f:48:6d:df:3f:7d:45:51:0a:bd: 3b:d5:a2:2a:67:fd:f2:53:b8:70:ae:05:f4:3d:97:af:f8:5d: d9:df:13:54:6a:f8:73:95:88:9a:b6:ca:af:85:37:bb:9b:6b: 4d:48:fb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISj2pNUGViey3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk YjA3ZDQ2MDctYjBkYS00NTg0LWExM2MtNTQ2NjhhYmJkYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jP4xUhyNYrarbdH9k9uXYorKxaRb5Sa5hK6 CaBEOL6g/p4bPpgf3IqqBhR3X8tJ+5fAFccVycPeoNCx8bTwiTVrl1qK7qZmZkNv qAsdWBtC+rUzNaQjSTsoXc71XwKRoF+Vk7WdOte93vuQXs7wub9Q49UYG8fMdbzo Rebj+wIy4WV18qUkvY3+3dsUhsvjhpqFH+Arsv6nyyV0Nxw/1Xo2awfn6IachgaG ab8x520ZkrnhcXn415kFAwnzT4vJ2j0M2izIz5hbnkRLpEETYM0nJAjqbQ3L1Kfs BjvABz2+vd1MBmOjDRAvPB0ppB/fVRp5poKsFQZJYBrUt1PWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN2clcNEjlihPnufuKgnJ0m2OJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgr3LUPDrEUTCiogOfSPcDb55GCBKCQMcWk94mhOsyHYEdil0UWk+rM 7SfrsUc7ikJ/YzkzulHc/kNI6p+VZcmo5dL1o0/6DYWS6VlGYR1hY4iq58AIC1Vi 09baN52coNCaGeGTKkYONLIQiIhE7m+/0Yw0jG0AS8N4RoUWP+Wrmfydtt+3PwK+ TfhawtBpACjDJXvCR6SeTsrRJtWy/SsILirUjXJFGOTW7vUL/R5BxpjLK5L/UHa3 m28BUzh+fzkCxwTYo1IiXK7C6WFbL0ht3z99RVEKvTvVoipn/fJTuHCuBfQ9l6/4 XdnfE1Rq+HOViJq2yq+FN7uba01I+9E= -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:10 2024 by rpki-client on console-ams.rpki-client.org