$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json) Hash identifier: q2fAayScvN0Hk8acuIqBUgU4BdYOhzndTJFmwGxMBYA= Subject key identifier: 79:DE:47:EF:99:44:A2:E7:35:EF:FE:07:E3:84:DF:CD:19:F7:30:37 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858477230F3359959D8241E6D6200 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 63199 IP address blocks: 148.153.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f3:35:99:59:d8:24:1e:6d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=0be3ab3e-b3b7-4b67-b7de-8b270e3f89e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:76:58:9c:f6:84:49:17:d3:b6:a5:4f:07: 2a:2b:71:d2:23:c9:87:dc:43:7b:75:fa:55:24:d3: e2:22:d9:67:cb:30:2c:6c:8f:b7:6c:93:c4:06:bb: 8a:22:f5:99:2b:27:08:32:f6:e6:cf:9f:23:6b:af: ac:72:b1:0e:cd:c3:67:b6:4f:44:f7:2d:b5:24:e8: d0:77:09:9f:6b:8f:1f:6b:41:b1:ca:e1:f0:99:12: ab:59:49:2d:34:1f:b4:09:7c:d9:b5:4c:47:c0:6f: bb:1b:9b:8e:be:b2:26:99:3d:e3:2e:e2:d3:b2:7d: bd:1c:3a:b0:8e:57:fe:4d:b0:ea:88:5c:f5:d6:a5: 92:2a:ff:40:51:14:b4:c3:d9:a5:c4:27:2b:65:85: 06:8b:26:39:2e:1f:73:77:14:fe:31:95:7c:68:d3: 60:45:93:e7:f7:9b:61:2e:24:41:64:18:fa:c3:e5: fa:83:9c:54:7f:a7:d7:6a:43:d5:a7:39:26:dd:d9: 3b:fd:1d:c8:83:33:96:f7:bd:40:05:2d:13:53:b3: d7:31:a5:3d:05:41:7e:01:81:ff:b7:8b:6e:c3:42: 12:fc:b5:98:f4:73:76:83:8b:15:e7:f6:fb:23:78: 22:22:df:3a:67:1b:ef:d0:69:22:0a:8a:b0:2b:9f: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:47:EF:99:44:A2:E7:35:EF:FE:07:E3:84:DF:CD:19:F7:30:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a5:36:29:06:1c:e9:84:14:7c:20:dc:8c:f9:4b:1c:06:fb: 36:58:fc:7d:b7:15:80:39:3d:6b:a8:92:72:29:f0:14:e0:7f: ab:f6:74:71:a4:89:36:7b:4f:c1:20:6d:d3:d9:35:d3:f6:f9: d3:9b:57:c7:0b:99:b7:ef:c5:15:44:aa:7c:d3:46:77:d1:9f: 9c:06:e7:0c:0e:7e:5b:51:da:82:c2:ff:41:4f:8f:ed:33:fb: 35:7e:7e:f9:c8:c0:5f:82:04:ab:10:e7:bd:91:73:3f:30:5a: db:0f:2c:18:21:38:14:8b:c8:68:e8:3b:33:01:94:85:06:1a: 57:be:cc:6b:29:5a:2d:53:c9:51:30:4a:1f:6b:ad:04:28:ba: 51:70:53:e9:c3:b6:0c:be:74:09:85:7d:30:ef:20:51:5c:d3: 8f:33:47:eb:e8:ac:4a:27:50:3a:f3:28:c2:09:2f:91:32:17: ba:43:54:66:ae:bb:8d:c4:f1:e7:c3:da:43:da:04:78:43:91: 63:51:88:b7:55:76:a4:0f:26:5b:60:c0:f7:48:fa:61:8f:46: 9b:c8:1c:99:b7:a6:e9:26:42:ef:88:9c:4d:d8:85:65:9e:a8: c8:7a:ec:85:11:b2:7d:ec:08:08:2c:4f:04:a8:97:93:ba:a6: 36:a1:a9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPM1mVnYJB5tYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk MGJlM2FiM2UtYjNiNy00YjY3LWI3ZGUtOGIyNzBlM2Y4OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+F2WJz2hEkX07alTwcqK3HSI8mH3EN7dfpV JNPiItlnyzAsbI+3bJPEBruKIvWZKycIMvbmz58ja6+scrEOzcNntk9E9y21JOjQ dwmfa48fa0GxyuHwmRKrWUktNB+0CXzZtUxHwG+7G5uOvrImmT3jLuLTsn29HDqw jlf+TbDqiFz11qWSKv9AURS0w9mlxCcrZYUGiyY5Lh9zdxT+MZV8aNNgRZPn95th LiRBZBj6w+X6g5xUf6fXakPVpzkm3dk7/R3IgzOW971ABS0TU7PXMaU9BUF+AYH/ t4tuw0IS/LWY9HN2g4sV5/b7I3giIt86Zxvv0GkiCoqwK59MWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHneR++ZRKLnNe/+B+OE380Z9zA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjUxYWFhMWQtNDk2Zi0z MGFlLThhZWEtZDc1YmY2MDIwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEalNikGHOmEFHwg3Iz5SxwG+zZY/H23FYA5PWuoknIp8BTgf6v2dHGk iTZ7T8EgbdPZNdP2+dObV8cLmbfvxRVEqnzTRnfRn5wG5wwOfltR2oLC/0FPj+0z +zV+fvnIwF+CBKsQ572Rcz8wWtsPLBghOBSLyGjoOzMBlIUGGle+zGspWi1TyVEw Sh9rrQQoulFwU+nDtgy+dAmFfTDvIFFc048zR+vorEonUDrzKMIJL5EyF7pDVGau u43E8efD2kPaBHhDkWNRiLdVdqQPJltgwPdI+mGPRpvIHJm3pukmQu+InE3YhWWe qMh67IURsn3sCAgsTwSol5O6pjahqU0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org