$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: 2FKQnZP1+xjqx4AmeGiPXczaTuUlxFJWMbfD5xQd6HI= Subject key identifier: 41:CC:2B:C2:55:CE:5F:B2:67:3E:9D:7F:1C:F8:CD:A5:9C:D0:E3:22 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584546A2B0EAF8F51D494CE64E00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Thu 21 Mar 2024 01:00:25 +0000 ROA not before: Thu 21 Mar 2024 01:00:25 +0000 ROA not after: Wed 19 Jun 2024 01:00:25 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:a2:b0:ea:f8:f5:1d:49:4c:e6:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 21 01:00:25 2024 GMT Not After : Jun 19 01:00:25 2024 GMT Subject: CN=ec01f573-05a6-4381-88c0-63520fa017c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:10:0f:71:0d:f1:99:67:f4:43:14:55:43: 2a:37:5c:bf:33:a9:f8:30:12:c2:01:20:2a:34:de: 74:26:cd:de:ec:da:4a:5c:55:30:c0:b9:8b:37:19: dc:63:52:a9:90:9b:50:d6:a8:a9:ea:de:77:d6:5d: 63:3f:9d:39:7b:f9:f2:2c:58:28:a3:cf:a8:09:9c: 70:74:4c:03:63:70:3a:12:61:89:94:01:d6:cb:93: 61:ba:5e:66:ea:b1:e2:35:f5:a8:ea:c2:d0:1d:6d: f1:31:30:ee:13:9f:43:51:39:e9:85:9d:2e:a8:51: 3e:2e:0e:30:0f:0e:e5:55:f6:af:44:03:e8:d4:be: 53:32:45:60:82:e9:6f:ee:ec:aa:e9:ee:28:0b:30: 59:7e:50:02:b5:b3:30:c4:ff:6b:d5:8a:d1:cc:d5: d5:2d:6a:b9:16:e0:2c:6b:d0:ed:7d:fa:f6:b8:f0: a1:f3:9b:53:cf:32:8b:cd:59:12:77:1f:6b:9b:0b: 57:ee:56:e6:cc:8a:f7:6c:b2:81:e1:03:03:a2:1f: 4e:f9:44:99:f5:44:0b:51:4f:91:5b:1a:83:bc:75: 72:23:b8:d8:42:0b:60:1e:3d:75:19:5e:e4:43:54: cf:af:af:e7:21:db:2b:a3:33:ff:cf:12:a6:e9:d1: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CC:2B:C2:55:CE:5F:B2:67:3E:9D:7F:1C:F8:CD:A5:9C:D0:E3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:72:db:58:8a:0f:84:5b:07:77:5f:26:d9:fe:ba:24:d7:a9: 81:fb:0d:01:a4:51:30:ed:89:85:ac:27:6e:11:02:e0:2f:6b: 91:d5:89:97:f7:f8:b6:06:78:75:97:66:74:c0:e0:9d:84:37: 63:16:9e:49:23:e9:b7:ea:65:46:9c:97:76:34:70:d7:55:4c: e8:65:be:0a:10:eb:ca:c1:79:da:5c:d9:af:d0:6f:d2:1f:0d: ef:36:a3:41:9e:5b:e5:98:b0:48:01:b3:7e:46:ea:ec:bd:cf: 4c:43:0a:e2:c6:f2:d8:c0:56:90:ff:9e:3b:51:da:15:9a:45: 6a:ce:30:be:64:de:36:a9:21:67:51:f4:fd:b4:af:c6:ce:a3: bf:2c:a7:70:b6:57:bd:1d:91:17:90:d5:f0:63:3a:56:26:e4: 2a:68:d8:96:ce:54:47:b1:69:b4:04:96:78:4b:5d:86:35:50: 5c:1e:1d:86:b7:a6:c6:6a:8c:4c:b9:56:9c:f2:f2:47:9f:0f: dd:ea:8e:18:3c:84:5c:a1:94:e8:87:1b:a9:d9:d3:8a:cd:c0: 3d:24:83:6a:df:0b:9c:fc:58:f3:9e:75:b5:72:63:1b:c3:e0: 1f:ff:bd:96:5e:c9:2e:23:41:4f:12:52:87:45:03:af:9d:6c: 98:16:08:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGorDq+PUdSUzmTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDMyMTAxMDAyNVoXDTI0MDYxOTAxMDAyNVowLzEtMCsGA1UEAxMk ZWMwMWY1NzMtMDVhNi00MzgxLTg4YzAtNjM1MjBmYTAxN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhwQD3EN8Zln9EMUVUMqN1y/M6n4MBLCASAq NN50Js3e7NpKXFUwwLmLNxncY1KpkJtQ1qip6t531l1jP505e/nyLFgoo8+oCZxw dEwDY3A6EmGJlAHWy5Nhul5m6rHiNfWo6sLQHW3xMTDuE59DUTnphZ0uqFE+Lg4w Dw7lVfavRAPo1L5TMkVggulv7uyq6e4oCzBZflACtbMwxP9r1YrRzNXVLWq5FuAs a9Dtffr2uPCh85tTzzKLzVkSdx9rmwtX7lbmzIr3bLKB4QMDoh9O+USZ9UQLUU+R WxqDvHVyI7jYQgtgHj11GV7kQ1TPr6/nIdsrozP/zxKm6dEjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHMK8JVzl+yZz6dfxz4zaWc0OMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINy21iKD4RbB3dfJtn+uiTXqYH7DQGkUTDtiYWsJ24RAuAva5HViZf3 +LYGeHWXZnTA4J2EN2MWnkkj6bfqZUacl3Y0cNdVTOhlvgoQ68rBedpc2a/Qb9If De82o0GeW+WYsEgBs35G6uy9z0xDCuLG8tjAVpD/njtR2hWaRWrOML5k3japIWdR 9P20r8bOo78sp3C2V70dkReQ1fBjOlYm5Cpo2JbOVEexabQElnhLXYY1UFweHYa3 psZqjEy5Vpzy8kefD93qjhg8hFyhlOiHG6nZ04rNwD0kg2rfC5z8WPOedbVyYxvD 4B//vZZeyS4jQU8SUodFA6+dbJgWCG0= -----END CERTIFICATE-----Generated at Sat May 18 15:26:59 2024 by rpki-client on console-fra.rpki-client.org