$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json) Hash identifier: nh49lruukZ7frLHqLr6wPRmeGwog770gq2SxlRCXyrY= Subject key identifier: 88:AD:BF:EE:62:2B:5F:81:A9:6E:24:2B:38:8D:A1:52:2A:C7:90:5F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584722A074F3943527CCF9FB4600 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa Signing time: Sat 07 Sep 2024 13:00:41 +0000 ROA not before: Sat 07 Sep 2024 13:00:41 +0000 ROA not after: Fri 06 Dec 2024 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:22:a0:74:f3:94:35:27:cc:f9:fb:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 7 13:00:41 2024 GMT Not After : Dec 6 14:00:41 2024 GMT Subject: CN=1ecc9b83-30e8-4e29-9109-5ab2fd23398d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f3:a8:42:ad:d0:96:13:50:01:59:e8:1a:e6: 7f:37:7a:26:0a:5b:b3:fa:d9:a9:99:34:0a:6f:70: 09:66:cb:1f:ad:81:7e:01:d4:7c:64:26:73:a7:7f: da:86:5e:5b:c5:cb:3c:7d:48:93:cd:ef:9c:3b:9a: ad:42:e8:d5:22:39:f9:d9:16:ec:7b:11:8b:82:7e: 11:91:78:12:e5:84:cc:37:b3:74:cd:51:13:c5:d8: 09:dd:31:53:31:9b:c1:79:cd:91:44:d1:57:2d:30: 17:fd:80:4e:1d:aa:84:1e:2a:05:f4:52:0a:8f:d5: ca:22:be:97:87:1e:77:db:39:70:86:b3:41:70:4c: 82:94:44:5e:97:20:92:78:d4:9e:f4:cf:2d:d6:ba: 72:a5:c9:6e:ac:6e:41:21:9d:c6:94:8e:65:fe:18: 85:f0:10:6f:c5:05:59:df:a7:d4:36:cf:4c:fa:03: b7:28:27:a4:42:42:32:69:b3:9c:32:9f:ce:1c:da: d8:74:b9:78:6a:fb:3d:14:32:ff:ad:d3:df:a7:12: d3:fd:77:c1:c6:aa:83:ef:e8:06:f5:11:df:c4:c6: af:5d:85:1f:d6:dc:92:d5:1e:f8:0a:ae:d0:27:9e: 24:30:31:f6:f2:76:f2:47:a2:a4:d0:15:17:bc:e4: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:BF:EE:62:2B:5F:81:A9:6E:24:2B:38:8D:A1:52:2A:C7:90:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:24:95:74:4b:d1:5b:28:69:da:b1:c7:b3:49:bb:ce:8e:10: 18:00:71:3b:dd:35:44:87:1c:25:c4:88:7a:ee:4b:7f:cf:7b: fb:89:bd:68:12:75:4b:1d:93:06:62:81:70:dc:fe:f3:06:ac: 5d:f2:c4:9c:3b:e2:f0:33:ca:21:bb:c4:bc:63:6d:d9:c8:38: 9f:8c:74:0c:4b:4e:0f:bf:31:07:14:c2:a8:b4:f9:e6:59:cf: be:23:a5:7f:88:ba:f0:d6:cb:23:3b:27:1e:49:67:ee:f4:e6: 76:96:e8:44:ac:02:7c:b1:6f:55:e8:3e:40:28:db:d4:a5:fd: fb:6c:6b:b2:07:55:35:9d:34:30:72:1a:df:1d:58:3b:48:3a: f2:52:c3:72:88:b8:1f:32:c4:bb:51:ef:7f:ad:99:a5:35:38: 58:c5:0c:df:1e:62:07:13:0e:2f:59:ae:61:2c:fa:1a:35:d0: 74:26:ca:29:04:ac:03:98:8d:fa:7e:c5:52:93:64:99:cd:58: b8:e5:67:3d:b2:83:58:58:68:98:5a:9a:8c:71:51:54:b6:de: 5e:e3:cc:ad:48:d6:72:6a:9f:a5:9b:f7:b9:44:55:8b:2e:6c: 68:c0:19:28:0f:90:50:25:cf:77:f0:98:27:b1:c5:46:7d:91: 24:c4:67:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioHTzlDUnzPn7RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MWVjYzliODMtMzBlOC00ZTI5LTkxMDktNWFiMmZkMjMzOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPOoQq3QlhNQAVnoGuZ/N3omCluz+tmpmTQK b3AJZssfrYF+AdR8ZCZzp3/ahl5bxcs8fUiTze+cO5qtQujVIjn52RbsexGLgn4R kXgS5YTMN7N0zVETxdgJ3TFTMZvBec2RRNFXLTAX/YBOHaqEHioF9FIKj9XKIr6X hx532zlwhrNBcEyClERelyCSeNSe9M8t1rpypclurG5BIZ3GlI5l/hiF8BBvxQVZ 36fUNs9M+gO3KCekQkIyabOcMp/OHNrYdLl4avs9FDL/rdPfpxLT/XfBxqqD7+gG 9RHfxMavXYUf1tyS1R74Cq7QJ54kMDH28nbyR6Kk0BUXvORoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIitv+5iK1+BqW4kKziNoVIqx5BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDhkYzEwMGUtOGQ3ZS0z ZDMwLTkwYzItNjMzNGYyNzY0Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcklXRL0Vsoadqxx7NJu86OEBgAcTvdNUSHHCXEiHruS3/Pe/uJvWgS dUsdkwZigXDc/vMGrF3yxJw74vAzyiG7xLxjbdnIOJ+MdAxLTg+/MQcUwqi0+eZZ z74jpX+IuvDWyyM7Jx5JZ+705naW6ESsAnyxb1XoPkAo29Sl/ftsa7IHVTWdNDBy Gt8dWDtIOvJSw3KIuB8yxLtR73+tmaU1OFjFDN8eYgcTDi9ZrmEs+ho10HQmyikE rAOYjfp+xVKTZJnNWLjlZz2yg1hYaJhamoxxUVS23l7jzK1I1nJqn6Wb97lEVYsu bGjAGSgPkFAlz3fwmCexxUZ9kSTEZ4Q= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org