$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa File: 2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa (raw, json) Hash identifier: bNvdzmSd6oN6fft4ONQreNWoVIQGSmoDC+78dcT6SSo= Subject key identifier: 5B:41:FA:EC:F7:51:E5:B6:00:B2:A1:BA:AC:49:DC:35:D0:74:9D:87 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847600B8F4EFDFF12D88A69C480 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:8f:4e:fd:ff:12:d8:8a:69:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=7d61566b-97a5-4188-b339-883a1c9514b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:44:59:e2:ec:69:44:1a:0d:1f:35:0a:f8: 1c:ef:e9:03:9a:57:28:f4:23:6f:b1:b1:0a:ad:b6: a2:7c:f6:67:f7:3e:02:66:89:9d:4f:c6:6d:8d:57: 16:1d:bd:eb:f6:33:3d:90:f2:e9:28:1f:ef:68:05: b5:22:87:2b:db:d4:b6:6d:57:a4:6d:15:54:e7:7b: 5f:91:ef:c7:04:93:79:10:c7:a6:8d:1a:26:5e:39: 0b:7e:c6:4c:28:e3:c4:68:aa:e7:b5:5a:b7:47:b2: 96:eb:5e:89:a5:a8:d0:6c:8b:29:22:f2:5a:fa:34: c4:20:0b:b5:e4:99:19:26:1e:b6:b3:89:a8:59:e2: 0d:5c:47:21:a5:c0:3c:9c:32:f1:b2:79:33:4c:5b: f1:13:9e:d9:00:15:32:e8:7e:c4:0e:75:48:e0:d7: f8:ee:f6:98:36:41:32:ed:d5:9b:2d:5a:9b:fa:ab: d3:c5:bf:8d:8d:9b:3c:c3:7e:73:e1:ab:3f:78:4a: 1e:97:4e:a9:12:9b:77:3e:c1:c5:71:46:66:15:1e: 11:4b:a6:de:17:42:a1:62:b2:1f:e3:f6:a5:5b:8e: af:30:87:52:9a:3a:27:56:60:41:af:9e:52:10:fd: a2:41:a4:92:d0:7a:be:66:1a:62:9c:0f:61:a3:18: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:41:FA:EC:F7:51:E5:B6:00:B2:A1:BA:AC:49:DC:35:D0:74:9D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:89:fa:0a:c5:46:ec:8a:35:76:38:97:ac:f3:c6:e6:2d: 45:e9:ed:a0:10:a7:32:ca:31:92:c3:56:5f:54:79:56:48:99: f5:a2:db:f1:18:62:81:88:ba:3b:3c:08:02:58:cd:d4:be:3e: 4c:fc:9c:0f:b5:37:78:c6:da:e4:dd:9b:54:a7:a7:0e:4f:1d: c1:06:99:56:62:95:ab:07:2a:03:76:c0:f8:03:a9:57:84:64: cc:3e:9e:18:9b:13:76:90:22:e7:ea:ed:ae:d4:75:09:f3:cb: 7d:0f:b1:8b:5d:92:be:74:93:d9:39:ce:57:99:a0:5e:5c:54: 42:56:cc:e5:37:44:e1:bb:09:1a:8f:09:d2:79:08:fe:9e:a3: 5e:ed:08:d0:27:b6:46:55:00:3d:6e:29:ee:30:25:a4:1f:6f: 76:79:fc:e3:87:7b:82:8f:38:c3:70:86:3d:4e:19:a8:c7:0b: c6:5a:3b:a0:a4:90:d6:60:3b:88:d7:0d:d1:62:53:ac:59:47: 27:fc:58:e4:83:f2:c0:a0:e5:0a:40:7e:fc:f8:55:08:1e:33: b5:23:7e:cc:6b:b1:af:41:f2:e0:27:49:2c:0d:f2:99:e9:a1: ab:97:1a:9f:9b:14:b0:9b:d0:6c:7f:82:28:ab:cb:53:fe:88: 18:e5:68:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC49O/f8S2IppxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2Q2MTU2NmItOTdhNS00MTg4LWIzMzktODgzYTFjOTUxNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhNEWeLsaUQaDR81Cvgc7+kDmlco9CNvsbEK rbaifPZn9z4CZomdT8ZtjVcWHb3r9jM9kPLpKB/vaAW1Iocr29S2bVekbRVU53tf ke/HBJN5EMemjRomXjkLfsZMKOPEaKrntVq3R7KW616JpajQbIspIvJa+jTEIAu1 5JkZJh62s4moWeINXEchpcA8nDLxsnkzTFvxE57ZABUy6H7EDnVI4Nf47vaYNkEy 7dWbLVqb+qvTxb+NjZs8w35z4as/eEoel06pEpt3PsHFcUZmFR4RS6beF0KhYrIf 4/alW46vMIdSmjonVmBBr55SEP2iQaSS0Hq+ZhpinA9hoxhwKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtB+uz3UeW2ALKhuqxJ3DXQdJ2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmZkMzBiNmQtNjJhNi0z NDc2LTk4Y2MtZjE1YTUwYmQ1MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8rifoKxUbsijV2OJes88bmLUXp7aAQpzLKMZLDVl9UeVZImfWi2/EY YoGIujs8CAJYzdS+Pkz8nA+1N3jG2uTdm1Snpw5PHcEGmVZilasHKgN2wPgDqVeE ZMw+nhibE3aQIufq7a7UdQnzy30PsYtdkr50k9k5zleZoF5cVEJWzOU3ROG7CRqP CdJ5CP6eo17tCNAntkZVAD1uKe4wJaQfb3Z5/OOHe4KPOMNwhj1OGajHC8ZaO6Ck kNZgO4jXDdFiU6xZRyf8WOSD8sCg5QpAfvz4VQgeM7Ujfsxrsa9B8uAnSSwN8pnp oauXGp+bFLCb0Gx/giiry1P+iBjlaOk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org