$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa File: 243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json) Hash identifier: Vyk3cH3YZ1up7Uvip8BgXBSRtNhZzY/A4FFIiHm00Sw= Subject key identifier: 24:3F:9C:0D:4C:52:C0:AC:74:62:32:01:E4:D1:68:88:0B:05:F3:FE Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285845B21E23BABF3754E99D28DD40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 63199 IP address blocks: 148.153.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:23:ba:bf:37:54:e9:9d:28:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=ba39f2cc-887a-4d31-96f7-1bdbd61f86a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:9f:26:70:0f:fa:8e:dc:c6:64:14:21:44: 36:9d:0b:63:20:8c:2c:fd:fe:23:9a:cf:a0:0a:4e: 3b:04:86:a1:8f:b9:9e:f6:b8:84:e0:3a:0a:60:96: 0e:5e:fa:37:21:9b:bd:2c:83:76:37:c2:8b:2b:33: 2f:7d:bd:55:f0:68:dc:ac:18:1a:f2:5d:52:9b:6b: 44:ea:8c:2f:f1:29:0b:97:b3:d4:f9:b0:0a:27:5c: f2:ac:e0:8d:cf:4d:4c:f9:6b:59:2c:e2:ba:c3:28: 57:25:4b:df:e6:3a:3c:83:e7:e4:44:30:6a:4e:5e: b4:5d:87:18:30:97:bc:1d:95:bc:7e:96:e2:68:22: 62:1f:a7:bf:17:ab:97:94:9c:05:db:88:68:d8:aa: a5:38:3e:f6:67:a2:41:5a:b6:86:ef:c4:ab:6d:5c: 7b:2f:57:c4:b0:2f:41:6a:a4:7f:46:a6:4f:b6:5e: 11:09:06:ce:2d:78:9c:5a:f5:42:d1:85:43:46:bf: fb:78:bc:79:6c:bd:4c:34:e9:a3:b3:12:d4:bf:93: 94:06:ef:6f:bc:67:1a:a6:36:7b:0e:10:85:4c:e0: e0:19:9e:1b:fd:eb:d9:6f:cb:08:66:02:90:bc:16: ce:7a:56:01:e9:18:24:13:ae:f8:57:fe:b4:a0:41: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3F:9C:0D:4C:52:C0:AC:74:62:32:01:E4:D1:68:88:0B:05:F3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:22:a0:32:5d:d1:f6:f3:11:49:cb:57:e2:31:5e:63:1c:b8: 62:54:3a:fa:4c:75:66:db:0b:29:34:23:77:60:1e:72:ca:f0: 32:b6:d5:e3:5f:e1:8d:63:9f:3e:3c:f3:2e:11:be:c9:0e:a1: 93:00:7c:b7:4f:3f:78:c5:3e:86:3f:2d:34:89:1e:ab:43:c0: c3:f3:ea:bb:44:7c:01:89:92:0d:22:01:2b:e7:72:30:cc:86: dc:3e:d2:d7:d5:7b:3b:eb:8a:27:a1:4d:f2:45:4f:f2:b0:61: 06:9a:f1:c7:e2:98:2c:fe:64:3b:c5:0a:27:c7:61:ba:f1:ff: 0d:9a:47:0a:af:57:d3:01:a0:c9:fc:f8:c7:d3:3c:ed:0c:01: fe:72:05:58:d4:75:64:a5:ec:6c:bd:41:67:e1:78:4e:09:44: 09:c2:e3:32:55:95:6b:fb:1a:b9:47:ae:00:c4:e1:20:91:8f: 96:08:18:cf:12:8f:a8:32:a3:9d:8c:a5:ca:c5:12:80:d4:be: 2f:4a:1b:1f:37:96:5b:63:f0:38:24:b7:eb:2d:20:62:ce:e7: 4f:ea:04:3a:51:18:1a:4f:f0:b8:8f:17:fd:75:9e:9f:89:4b: 41:98:c0:25:f3:e4:7a:c2:d5:06:b9:1e:19:e8:d7:0f:35:31: f5:bf:24:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHiO6vzdU6Z0o3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk YmEzOWYyY2MtODg3YS00ZDMxLTk2ZjctMWJkYmQ2MWY4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQefJnAP+o7cxmQUIUQ2nQtjIIws/f4jms+g Ck47BIahj7me9riE4DoKYJYOXvo3IZu9LIN2N8KLKzMvfb1V8GjcrBga8l1Sm2tE 6owv8SkLl7PU+bAKJ1zyrOCNz01M+WtZLOK6wyhXJUvf5jo8g+fkRDBqTl60XYcY MJe8HZW8fpbiaCJiH6e/F6uXlJwF24ho2KqlOD72Z6JBWraG78SrbVx7L1fEsC9B aqR/RqZPtl4RCQbOLXicWvVC0YVDRr/7eLx5bL1MNOmjsxLUv5OUBu9vvGcapjZ7 DhCFTODgGZ4b/evZb8sIZgKQvBbOelYB6RgkE674V/60oEF74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ/nA1MUsCsdGIyAeTRaIgLBfP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjQzYWFmNDMtYzlkZi0z YTA4LWI5NjMtZjBlMzU4YmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8ioDJd0fbzEUnLV+IxXmMcuGJUOvpMdWbbCyk0I3dgHnLK8DK21eNf 4Y1jnz488y4RvskOoZMAfLdPP3jFPoY/LTSJHqtDwMPz6rtEfAGJkg0iASvncjDM htw+0tfVezvriiehTfJFT/KwYQaa8cfimCz+ZDvFCifHYbrx/w2aRwqvV9MBoMn8 +MfTPO0MAf5yBVjUdWSl7Gy9QWfheE4JRAnC4zJVlWv7GrlHrgDE4SCRj5YIGM8S j6gyo52MpcrFEoDUvi9KGx83lltj8Dgkt+stIGLO50/qBDpRGBpP8LiPF/11np+J S0GYwCXz5HrC1Qa5Hhno1w81MfW/JAI= -----END CERTIFICATE-----Generated at Sat May 18 15:59:49 2024 by rpki-client on console-ams.rpki-client.org