$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json) Hash identifier: N95QZx2INzcSq6MjJLsfxxsuaemSm6+koHjqjfspXUs= Subject key identifier: 76:FB:B9:E8:B6:50:B0:D1:6F:1A:C1:AE:D3:EB:1F:3C:10:76:97:A7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285845B21E23A741ADD9FB178E0880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 63199 IP address blocks: 148.153.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:23:a7:41:ad:d9:fb:17:8e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=8e5ae9e1-2f35-43ba-bd2d-531f6bbcb673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:b6:48:4c:af:8e:d2:9c:30:99:99:c0:e3: 1e:20:fe:82:1b:9c:90:49:b0:4f:62:98:2d:af:5f: b4:a1:9e:5c:00:f5:f7:b3:f5:e6:0a:32:24:5f:a7: 52:38:99:a0:23:34:ac:82:b4:b8:01:2d:7d:93:be: 18:a6:41:fd:5e:1b:ae:2d:a6:ee:d8:23:85:45:0a: d5:3b:7e:40:14:17:63:4e:d5:57:7c:25:3d:2f:c9: 38:4e:2a:f3:76:06:fb:b5:e1:19:12:20:55:ed:ac: 6a:a3:d6:a6:8a:09:a0:49:7b:62:48:a1:82:43:80: f0:08:31:1f:f2:5a:96:9a:2a:af:ea:b0:f3:8f:4b: 45:c2:85:1a:78:fb:73:13:7a:83:13:11:5f:22:95: e2:12:c9:2b:c3:1a:5c:fd:7f:4a:a2:15:d6:86:6c: ae:65:fd:46:93:62:79:b9:94:89:15:93:a8:93:d9: f4:d1:d2:4b:72:a5:20:93:55:e2:23:ae:a2:da:fe: f1:28:3a:ad:30:bb:ff:62:d8:f1:b7:cb:f3:4c:ee: 13:ea:fc:e3:04:e6:cb:dc:6f:bc:38:d6:1a:b2:55: 09:a4:65:16:84:e1:40:a7:b4:51:57:ae:c2:68:9b: ae:97:fd:21:95:51:25:7a:0d:52:7d:49:6d:1c:b6: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:B9:E8:B6:50:B0:D1:6F:1A:C1:AE:D3:EB:1F:3C:10:76:97:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f4:da:c9:50:db:0e:f6:88:d3:70:eb:6f:79:20:75:61:22: 05:87:b2:14:78:c1:f0:ae:32:cd:96:fc:86:2c:c2:40:a9:a1: 36:58:7b:15:3d:44:92:cc:85:8c:bb:f6:29:f0:54:ea:66:f0: 81:45:29:b4:7e:c2:dd:9d:42:f6:2a:dc:18:10:d9:02:fc:d5: 51:74:64:2b:ff:21:de:8c:cf:5a:a4:57:43:6c:5c:71:2a:b4: f8:39:b3:eb:d8:70:29:7e:f8:b6:be:37:87:57:25:90:e8:b9: 91:e9:b0:7f:21:5d:ee:48:52:f8:81:7c:84:86:ff:f0:a8:49: d5:0b:2f:8b:08:27:8e:5a:74:13:d8:c7:f6:30:eb:a7:16:e9: 06:fd:39:fb:8b:22:50:97:f6:bd:45:48:42:27:93:f8:ef:88: 56:b6:f4:ae:26:d3:00:70:01:1c:ba:6b:27:58:3b:15:85:cb: 4b:91:05:a4:5c:7d:e6:7e:07:3b:62:26:53:92:8b:b4:c1:03: bd:ba:89:4a:50:46:f2:56:2b:0d:6b:8a:95:76:2f:c3:fe:88: d6:91:69:3c:a7:7c:d6:80:a1:c2:f0:b6:3c:8e:f5:4d:b3:0e: 5f:12:63:7b:da:91:e0:a7:98:46:30:e7:82:59:c6:38:6a:74: ea:5a:99:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHiOnQa3Z+xeOCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk OGU1YWU5ZTEtMmYzNS00M2JhLWJkMmQtNTMxZjZiYmNiNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLi2SEyvjtKcMJmZwOMeIP6CG5yQSbBPYpgt r1+0oZ5cAPX3s/XmCjIkX6dSOJmgIzSsgrS4AS19k74YpkH9XhuuLabu2COFRQrV O35AFBdjTtVXfCU9L8k4Tirzdgb7teEZEiBV7axqo9amigmgSXtiSKGCQ4DwCDEf 8lqWmiqv6rDzj0tFwoUaePtzE3qDExFfIpXiEskrwxpc/X9KohXWhmyuZf1Gk2J5 uZSJFZOok9n00dJLcqUgk1XiI66i2v7xKDqtMLv/Ytjxt8vzTO4T6vzjBObL3G+8 ONYaslUJpGUWhOFAp7RRV67CaJuul/0hlVEleg1SfUltHLYC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb7uei2ULDRbxrBrtPrHzwQdpenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjUxYWFhMWQtNDk2Zi0z MGFlLThhZWEtZDc1YmY2MDIwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET02slQ2w72iNNw6295IHVhIgWHshR4wfCuMs2W/IYswkCpoTZYexU9 RJLMhYy79inwVOpm8IFFKbR+wt2dQvYq3BgQ2QL81VF0ZCv/Id6Mz1qkV0NsXHEq tPg5s+vYcCl++La+N4dXJZDouZHpsH8hXe5IUviBfISG//CoSdULL4sIJ45adBPY x/Yw66cW6Qb9OfuLIlCX9r1FSEInk/jviFa29K4m0wBwARy6aydYOxWFy0uRBaRc feZ+BztiJlOSi7TBA726iUpQRvJWKw1ripV2L8P+iNaRaTynfNaAocLwtjyO9U2z Dl8SY3vakeCnmEYw54JZxjhqdOpameQ= -----END CERTIFICATE-----Generated at Sun May 19 12:34:56 2024 by rpki-client on console-ams.rpki-client.org