$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: haqA7i53P2WwMZTHx0AvtPsBtZxL71mcZkLawkXdujU= Subject key identifier: 46:9E:90:44:DB:3B:B0:C9:C9:C5:94:E5:E3:66:00:87:F3:C4:EA:1C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847E78F5DC81735D580A9255E40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:5d:c8:17:35:d5:80:a9:25:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=be3e5879-0d85-42a8-8644-cfdc77560de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:c1:ea:d5:99:7c:43:d3:09:ce:2f:8a:5c: f7:b2:99:91:cd:ee:e2:02:06:bd:be:43:b8:83:71: d6:98:9c:e6:32:9b:ae:f0:b4:f6:10:4a:f5:8a:88: cf:7c:c6:04:a5:2b:9e:e6:9c:66:46:4d:10:6f:37: fa:90:5d:4c:78:2b:09:40:0c:4c:d5:d1:7e:e1:01: 4a:bb:51:79:b1:ee:9d:52:66:72:87:76:03:58:0d: 7a:7b:b8:04:70:d4:f9:eb:e8:32:e9:7b:30:ff:9d: 61:dd:cc:5f:8e:bc:1c:5e:71:ba:44:63:48:b1:f5: 61:13:d8:d0:0d:42:4a:2b:fc:ad:14:3d:d0:da:81: 81:4c:76:46:52:65:f0:6d:a8:be:50:97:03:b9:b8: 8b:34:d1:76:49:29:49:a1:2a:cc:c8:55:ee:d2:6c: 8a:d3:9a:73:44:e1:11:b9:3b:b8:70:27:9c:34:b8: 06:74:05:de:aa:ab:c9:ab:73:57:58:e0:b7:1d:18: bf:60:a8:11:c2:bd:a6:f7:e5:46:6e:bd:8b:03:64: 09:10:e4:cb:22:f7:f6:b4:9d:4b:9e:0e:84:1d:89: 91:90:e2:8b:87:f9:a3:42:53:26:de:3f:94:30:6b: f3:9f:83:0a:dc:db:12:2e:5b:70:51:74:9e:79:03: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9E:90:44:DB:3B:B0:C9:C9:C5:94:E5:E3:66:00:87:F3:C4:EA:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c4:c2:5a:e7:ae:10:65:e6:f6:a9:2b:27:ed:7f:da:a1:de: aa:6d:c8:dd:07:58:5c:3f:4e:37:35:fa:42:03:ef:60:13:83: c6:52:22:8f:22:a4:c7:45:af:79:7e:b8:cb:f5:14:c1:f4:97: 0d:e7:84:77:80:0e:00:43:bf:4a:6d:76:3b:64:4f:bc:74:17: 2f:02:ba:a5:b7:92:02:4e:ba:4c:09:78:62:ca:09:6c:79:42: 5a:eb:03:d1:04:4a:1c:2d:29:0d:24:1a:a9:1f:7b:b8:7f:c8: f4:08:ef:d3:81:a2:c8:ca:15:83:e1:3b:d1:15:ce:ea:a3:a2: 74:03:de:7c:42:d0:bb:aa:8f:64:d0:90:0e:c8:02:c6:94:85: b5:e3:b3:55:4a:97:10:0c:d7:b2:8f:4e:1f:78:20:52:fc:e7: ab:d0:14:b8:8d:8c:f8:cd:1c:fb:d7:5e:54:04:0a:7f:a3:3c: b4:4e:f2:39:0c:4f:04:49:a8:3c:39:1e:3d:e0:ab:45:1d:71: 87:de:c7:da:d3:40:30:a9:44:51:c1:1d:28:40:a8:e9:87:0e: 29:d8:47:72:e1:1f:a2:24:18:24:3c:88:de:99:89:ab:4e:d2: e0:ef:76:76:99:ad:61:a9:f1:1a:0d:0d:5c:52:0b:52:74:a8: f6:a8:36:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj13IFzXVgKklXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk YmUzZTU4NzktMGQ4NS00MmE4LTg2NDQtY2ZkYzc3NTYwZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdHB6tWZfEPTCc4vilz3spmRze7iAga9vkO4 g3HWmJzmMpuu8LT2EEr1iojPfMYEpSue5pxmRk0Qbzf6kF1MeCsJQAxM1dF+4QFK u1F5se6dUmZyh3YDWA16e7gEcNT56+gy6Xsw/51h3cxfjrwcXnG6RGNIsfVhE9jQ DUJKK/ytFD3Q2oGBTHZGUmXwbai+UJcDubiLNNF2SSlJoSrMyFXu0myK05pzROER uTu4cCecNLgGdAXeqqvJq3NXWOC3HRi/YKgRwr2m9+VGbr2LA2QJEOTLIvf2tJ1L ng6EHYmRkOKLh/mjQlMm3j+UMGvzn4MK3NsSLltwUXSeeQN0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaekETbO7DJycWU5eNmAIfzxOocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXEwlrnrhBl5vapKyftf9qh3qptyN0HWFw/Tjc1+kID72ATg8ZSIo8i pMdFr3l+uMv1FMH0lw3nhHeADgBDv0ptdjtkT7x0Fy8CuqW3kgJOukwJeGLKCWx5 QlrrA9EEShwtKQ0kGqkfe7h/yPQI79OBosjKFYPhO9EVzuqjonQD3nxC0Luqj2TQ kA7IAsaUhbXjs1VKlxAM17KPTh94IFL856vQFLiNjPjNHPvXXlQECn+jPLRO8jkM TwRJqDw5Hj3gq0UdcYfex9rTQDCpRFHBHShAqOmHDinYR3LhH6IkGCQ8iN6ZiatO 0uDvdnaZrWGp8RoNDVxSC1J0qPaoNhA= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org