$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa File: 020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa (raw, json) Hash identifier: Un6FgvLAqKi2cAQERjKA0nN2BQBE/KMSNByDfuz7b88= Subject key identifier: 50:2B:72:CA:D2:EA:7B:5D:69:B8:E1:6B:41:5A:BE:39:AB:A9:4B:4B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847E211295011572DC6D8DC7400 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa Signing time: Fri 15 Nov 2024 02:47:13 +0000 ROA not before: Fri 15 Nov 2024 02:47:13 +0000 ROA not after: Thu 13 Feb 2025 02:47:13 +0000 asID: 63199 IP address blocks: 148.153.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e2:11:29:50:11:57:2d:c6:d8:dc:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 15 02:47:13 2024 GMT Not After : Feb 13 02:47:13 2025 GMT Subject: CN=07a339ce-cabb-4dfb-8721-ef2730674ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:cd:b4:e0:a0:db:7a:de:c6:e0:2f:6c:44: 50:6b:af:38:84:52:f8:ac:fc:64:8c:3e:c9:fe:7a: 3d:ab:90:ce:53:05:73:74:7e:ed:53:a1:ba:b9:eb: 76:f8:bb:bf:2d:e1:cc:fb:e6:13:1d:e4:a6:96:55: 13:44:74:17:22:ab:96:58:ca:05:7a:98:e6:b6:55: ec:f5:4b:33:94:96:00:a1:d3:ff:10:d7:2e:8e:f6: 1e:e4:b8:2a:a8:c6:f0:27:eb:56:12:72:fc:6b:e4: 84:5d:c6:d6:15:22:89:cd:e2:1a:f9:c5:42:b7:15: 0e:52:e0:9d:0a:1c:63:e4:d4:b7:c4:5f:35:d6:62: 43:65:17:ef:56:81:5a:cb:2b:ed:a1:c4:b4:a9:ad: c5:9c:ba:d1:bf:ca:f1:f5:09:da:12:04:f4:c0:a0: fe:37:0d:97:a7:ed:e3:b6:82:35:ac:ea:b0:23:06: d1:0a:ba:f0:f9:ea:87:29:9f:ea:1b:bc:8d:e0:6a: be:04:1c:b2:6f:49:25:f1:3b:cf:e8:9d:68:d6:5e: 52:6f:13:b3:bb:44:35:ca:7d:95:d0:70:e5:62:b6: f9:0e:60:cc:e4:49:e8:ac:00:12:92:45:38:52:d1: 13:f1:e1:dd:c7:c6:07:12:b0:87:b3:f6:91:ef:49: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:72:CA:D2:EA:7B:5D:69:B8:E1:6B:41:5A:BE:39:AB:A9:4B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e2:50:a0:9d:2b:f8:47:34:c3:d6:25:6e:68:b6:f5:20:cd: e2:b0:c1:6f:1c:d6:5a:c9:8d:86:f6:5f:d9:dd:a5:2c:94:9e: 51:d8:6a:0d:83:57:89:b0:1f:d4:80:36:3c:d1:38:99:83:fb: ea:65:a5:bf:f6:2e:2e:58:94:34:1f:52:d6:be:66:b8:dd:e7: f0:08:be:45:4b:d5:33:ab:be:83:52:0d:ca:ed:09:d7:e0:3c: fb:32:d5:92:18:b0:54:b5:ce:a8:7f:aa:9a:49:c3:f9:f6:6c: af:68:a3:77:86:c1:6e:8d:88:31:6c:fd:48:6a:cc:59:ee:fd: 07:99:55:fe:6e:30:2d:b1:a1:7f:17:0f:50:7d:cb:53:2b:46: 3e:9d:dc:79:8f:23:0b:05:49:1d:d0:40:a4:87:1a:05:5c:17: d1:92:2e:23:e1:b3:34:74:83:6c:ba:f0:76:28:88:10:03:e9: 4a:41:f4:0b:8f:59:4f:4d:2f:71:f2:34:51:85:83:f5:66:07: cd:1a:5c:1e:b5:17:06:5f:ab:2b:52:f6:1c:70:7c:f8:d8:c2: 8e:42:1a:a3:ce:60:cd:db:49:e0:76:83:8a:8c:8a:36:28:12: 10:66:28:f3:0e:80:d2:dc:5e:0d:81:3c:e3:23:11:3d:c0:92: ed:3f:a7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfiESlQEVctxtjcdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTExNTAyNDcxM1oXDTI1MDIxMzAyNDcxM1owLzEtMCsGA1UEAxMk MDdhMzM5Y2UtY2FiYi00ZGZiLTg3MjEtZWYyNzMwNjc0Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzobNtOCg23rexuAvbERQa684hFL4rPxkjD7J /no9q5DOUwVzdH7tU6G6uet2+Lu/LeHM++YTHeSmllUTRHQXIquWWMoFepjmtlXs 9UszlJYAodP/ENcujvYe5LgqqMbwJ+tWEnL8a+SEXcbWFSKJzeIa+cVCtxUOUuCd Chxj5NS3xF811mJDZRfvVoFayyvtocS0qa3FnLrRv8rx9QnaEgT0wKD+Nw2Xp+3j toI1rOqwIwbRCrrw+eqHKZ/qG7yN4Gq+BByyb0kl8TvP6J1o1l5SbxOzu0Q1yn2V 0HDlYrb5DmDM5EnorAASkkU4UtET8eHdx8YHErCHs/aR70ntLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFArcsrS6ntdabjha0FavjmrqUtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDIwYjU5YTItYTlhYS0z OGNiLWJjMmItZDM3YzUyN2I0MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETiUKCdK/hHNMPWJW5otvUgzeKwwW8c1lrJjYb2X9ndpSyUnlHYag2D V4mwH9SANjzROJmD++plpb/2Li5YlDQfUta+Zrjd5/AIvkVL1TOrvoNSDcrtCdfg PPsy1ZIYsFS1zqh/qppJw/n2bK9oo3eGwW6NiDFs/UhqzFnu/QeZVf5uMC2xoX8X D1B9y1MrRj6d3HmPIwsFSR3QQKSHGgVcF9GSLiPhszR0g2y68HYoiBAD6UpB9AuP WU9NL3HyNFGFg/VmB80aXB61FwZfqytS9hxwfPjYwo5CGqPOYM3bSeB2g4qMijYo EhBmKPMOgNLcXg2BPOMjET3Aku0/p+A= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org