$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json) Hash identifier: /tPmmojStDoxz4jcuVLqoPJsIEIpql71Jsiw8p2/pVc= Subject key identifier: C0:8F:D4:7A:B5:63:5E:7B:2D:9C:41:29:4C:3D:84:FC:95:0A:9F:1C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847C1DF54326740CC3ED969421C Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 63199 IP address blocks: 148.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:54:32:67:40:cc:3e:d9:69:42:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=b39179f7-f52a-4e70-b15c-84c3c4e39b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:cb:38:6d:da:d6:8c:93:4e:f8:ce:80:9c: 32:35:f0:89:48:f7:e0:ea:df:cb:bf:51:76:5d:ea: e6:2a:69:da:84:bd:a1:38:11:22:7b:a0:ee:e1:0f: 1f:50:42:76:bb:91:84:a8:26:30:cd:57:a5:ad:f0: 0a:6c:e6:91:38:09:4a:4b:77:f9:f2:60:88:a1:ce: 25:93:1e:33:29:e5:07:ca:14:ec:9c:6c:be:a6:63: 03:5e:0a:78:13:11:82:c1:ed:2b:26:b8:ce:a2:fe: 42:92:3c:c2:21:96:1d:05:0c:02:57:85:d2:b6:af: ae:c4:ad:55:4c:f4:4b:99:9a:1f:8b:a2:d1:70:68: 5e:67:df:db:2b:a3:59:41:63:3a:c2:8a:16:53:22: 8a:24:e0:df:e8:e7:38:36:c6:21:1b:6f:f8:62:c3: b2:a9:60:08:96:17:2a:42:bf:ef:ad:0e:b4:a2:37: 14:fd:df:b4:f3:83:ce:aa:1d:cc:9a:0a:84:7d:cb: 2c:f6:f9:a0:82:9e:b8:7f:36:47:ce:eb:5a:07:72: cc:21:e5:2b:ea:7b:5b:c0:5e:6c:88:bd:d8:63:54: 65:eb:0e:fe:07:1b:df:6b:33:b5:da:30:3e:88:09: da:40:41:48:03:77:52:45:71:72:b1:f5:f4:55:c8: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8F:D4:7A:B5:63:5E:7B:2D:9C:41:29:4C:3D:84:FC:95:0A:9F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:97:f9:7a:86:2f:55:ef:1f:a6:10:8f:66:92:00:b0:d9:8b: 60:5a:d5:fa:7b:47:22:05:8a:0e:10:0b:3f:a8:b6:87:85:e7: 0f:ec:e1:a2:7b:e3:00:ab:64:0a:69:32:11:51:22:94:1c:07: 7e:8d:ec:81:d2:fd:f2:30:49:8e:71:f8:b3:d6:37:be:53:4d: 9d:71:3c:6b:e6:28:a0:ee:e6:dc:c5:8d:4d:69:22:6b:1b:e9: 52:79:77:96:69:e7:60:c7:b9:56:c4:02:9b:c7:15:b5:84:f6: 76:d9:66:fc:60:8d:cf:89:98:46:46:6c:50:f2:4a:fa:52:8a: 9f:78:f2:ec:6c:db:ce:9c:19:9a:4e:ce:0e:8c:fd:3a:66:e4: f0:e1:3f:ee:66:d8:19:f5:78:52:27:75:37:6b:bb:3c:09:73: 43:ae:15:df:88:ec:48:85:e3:81:86:1c:b1:9e:56:6e:80:ec: 3f:71:a9:59:af:5f:66:22:1c:47:36:67:6c:71:c9:b1:e1:65: df:49:9b:f2:ed:15:6a:7e:68:23:8c:9a:f1:46:3a:da:ed:3e: 91:b0:f6:4f:f6:3d:34:0a:06:9b:86:98:95:9e:41:71:ee:50: a1:39:d5:8c:00:71:14:13:32:2c:d6:a4:f6:b2:94:e2:90:78: 56:5e:bf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31QyZ0DMPtlpQhwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk YjM5MTc5ZjctZjUyYS00ZTcwLWIxNWMtODRjM2M0ZTM5YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IXLOG3a1oyTTvjOgJwyNfCJSPfg6t/Lv1F2 XermKmnahL2hOBEie6Du4Q8fUEJ2u5GEqCYwzVelrfAKbOaROAlKS3f58mCIoc4l kx4zKeUHyhTsnGy+pmMDXgp4ExGCwe0rJrjOov5CkjzCIZYdBQwCV4XStq+uxK1V TPRLmZofi6LRcGheZ9/bK6NZQWM6wooWUyKKJODf6Oc4NsYhG2/4YsOyqWAIlhcq Qr/vrQ60ojcU/d+084POqh3MmgqEfcss9vmggp64fzZHzutaB3LMIeUr6ntbwF5s iL3YY1Rl6w7+BxvfazO12jA+iAnaQEFIA3dSRXFysfX0VchBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCP1Hq1Y157LZxBKUw9hPyVCp8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMWViNmFjMjYtZGU4YS0z NTU4LTkzOWYtYTdkY2FjNWNiOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaX+XqGL1XvH6YQj2aSALDZi2Ba1fp7RyIFig4QCz+otoeF5w/s4aJ7 4wCrZAppMhFRIpQcB36N7IHS/fIwSY5x+LPWN75TTZ1xPGvmKKDu5tzFjU1pImsb 6VJ5d5Zp52DHuVbEApvHFbWE9nbZZvxgjc+JmEZGbFDySvpSip948uxs286cGZpO zg6M/Tpm5PDhP+5m2Bn1eFIndTdruzwJc0OuFd+I7EiF44GGHLGeVm6A7D9xqVmv X2YiHEc2Z2xxybHhZd9Jm/LtFWp+aCOMmvFGOtrtPpGw9k/2PTQKBpuGmJWeQXHu UKE51YwAcRQTMizWpPaylOKQeFZevz8= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org