$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa File: 7714cc44-3890-3c14-9f5c-e99518c1af61.roa (raw, json) Hash identifier: HjysSg18OuXxR33vZW0t2nVolcr26e+5+FAkFl4otfk= Subject key identifier: B5:18:85:5D:F8:9C:98:4A:6D:0E:99:92:96:8B:E1:52:09:1A:6D:98 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584518B04A89FCC5132370BBA860 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa Signing time: Mon 04 Mar 2024 14:00:33 +0000 ROA not before: Mon 04 Mar 2024 14:00:33 +0000 ROA not after: Sun 02 Jun 2024 13:00:33 +0000 asID: 63199 IP address blocks: 148.153.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:18:b0:4a:89:fc:c5:13:23:70:bb:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 4 14:00:33 2024 GMT Not After : Jun 2 13:00:33 2024 GMT Subject: CN=92c8e365-6fe7-4ddf-a022-3b317e7522db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:35:a3:69:67:f2:d7:ac:77:c2:51:0d:17: 03:10:ab:a6:f9:35:b6:c6:9c:3e:3c:4d:33:b0:19: f4:c2:84:f9:bd:d5:aa:cd:64:77:cd:71:1e:e5:5e: 97:63:f7:18:e3:8f:65:0b:47:ab:7f:7e:bf:8c:0e: 82:64:09:07:fc:d5:e6:01:f5:e2:c7:19:5c:53:50: ec:09:23:75:6e:14:8b:78:5d:87:d0:fd:8e:4d:73: e6:28:71:fe:71:2b:38:d4:81:d5:31:b6:8b:24:c5: 7a:96:3f:5b:30:37:f7:71:45:98:87:d9:7f:5f:8e: 72:3d:12:81:11:a8:da:de:e8:fc:d9:e9:8d:e3:2b: 02:52:3a:96:5d:9d:66:db:21:1e:e2:6d:e1:dd:aa: 72:31:3d:63:76:eb:54:03:f8:b9:cf:4f:94:79:1e: 01:ba:24:d9:08:61:36:be:35:26:4d:df:c2:75:d7: a3:53:27:de:a4:6f:d8:ad:2a:17:c5:3c:60:0e:f6: 9d:07:3d:69:97:ec:2a:c5:41:aa:93:0e:5f:a6:f8: 30:45:8e:56:48:23:a6:db:18:e2:7c:69:f0:a3:bf: 89:81:91:a5:93:20:90:bd:f1:6b:1e:53:89:39:ef: 17:d0:33:33:ff:98:ac:aa:9a:97:91:3c:24:29:bc: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:85:5D:F8:9C:98:4A:6D:0E:99:92:96:8B:E1:52:09:1A:6D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f3:84:cd:13:43:e5:b3:36:bf:6f:96:1c:6a:ad:58:41:cb: c9:95:4a:0c:5d:5f:ae:bc:22:37:7b:95:28:8f:79:d9:d3:96: 3f:08:0c:83:05:07:4f:06:1d:12:11:17:12:16:d1:2b:9a:5b: 1f:34:67:12:2a:59:aa:d2:08:38:01:e7:32:ab:13:d3:1c:92: b7:e6:a3:b2:da:bf:2f:51:c6:53:b2:c9:14:ff:96:c0:5e:ac: 7b:5c:5f:e3:07:90:fe:e4:3f:69:da:43:04:0a:16:2b:0b:ef: 94:ce:47:87:87:67:b9:05:62:4b:73:4b:97:d6:2e:dc:4b:73: 88:e4:da:75:90:ad:8a:33:e8:58:29:db:f0:8c:08:1d:4c:19: 93:77:c2:ce:2b:2c:df:f9:4d:dd:06:1d:7c:ca:a3:23:45:ea: 59:62:ee:eb:12:69:fd:72:ce:24:c8:43:bf:0a:a8:48:81:34: ef:5b:56:de:e6:e6:4f:bd:b2:48:7f:27:23:31:53:e0:c7:01: 9a:9b:4e:47:3d:43:b6:66:69:2c:68:48:d1:3a:41:8e:48:bf: 0d:69:09:da:30:e5:08:d3:b1:ea:39:12:c8:88:c8:74:ca:37: 24:dd:27:56:2c:82:84:2f:86:34:85:d6:95:ae:ff:46:cd:82: 94:ce:28:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUYsEqJ/MUTI3C7qGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk OTJjOGUzNjUtNmZlNy00ZGRmLWEwMjItM2IzMTdlNzUyMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFE1o2ln8tesd8JRDRcDEKum+TW2xpw+PE0z sBn0woT5vdWqzWR3zXEe5V6XY/cY449lC0erf36/jA6CZAkH/NXmAfXixxlcU1Ds CSN1bhSLeF2H0P2OTXPmKHH+cSs41IHVMbaLJMV6lj9bMDf3cUWYh9l/X45yPRKB Eaja3uj82emN4ysCUjqWXZ1m2yEe4m3h3apyMT1jdutUA/i5z0+UeR4BuiTZCGE2 vjUmTd/CddejUyfepG/YrSoXxTxgDvadBz1pl+wqxUGqkw5fpvgwRY5WSCOm2xji fGnwo7+JgZGlkyCQvfFrHlOJOe8X0DMz/5isqpqXkTwkKbxfvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUYhV34nJhKbQ6ZkpaL4VIJGm2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzcxNGNjNDQtMzg5MC0z YzE0LTlmNWMtZTk5NTE4YzFhZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzzhM0TQ+WzNr9vlhxqrVhBy8mVSgxdX668Ijd7lSiPednTlj8IDIMF B08GHRIRFxIW0SuaWx80ZxIqWarSCDgB5zKrE9Mckrfmo7Lavy9RxlOyyRT/lsBe rHtcX+MHkP7kP2naQwQKFisL75TOR4eHZ7kFYktzS5fWLtxLc4jk2nWQrYoz6Fgp 2/CMCB1MGZN3ws4rLN/5Td0GHXzKoyNF6lli7usSaf1yziTIQ78KqEiBNO9bVt7m 5k+9skh/JyMxU+DHAZqbTkc9Q7ZmaSxoSNE6QY5Ivw1pCdow5QjTseo5EsiIyHTK NyTdJ1YsgoQvhjSF1pWu/0bNgpTOKD8= -----END CERTIFICATE-----Generated at Sat May 18 15:26:59 2024 by rpki-client on console-fra.rpki-client.org