$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa File: 854f0b13-0526-3986-a284-6ca1d255b066.roa (raw, json) Hash identifier: wwpsX2eR1zfPB+Irsf6GiX4NnCWPP6KAUphAijdS8IM= Subject key identifier: 86:4D:B1:94:32:A1:B5:08:20:7C:CB:E3:63:98:DF:AB:CB:C4:BD:D8 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584754E0E99A1730342926963D00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:e9:9a:17:30:34:29:26:96:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=7668a7ef-d661-46f6-be5d-8e449f7493ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:39:b3:80:b6:90:e2:c4:d0:e9:d6:3b:05: 89:a0:61:68:40:d4:e1:c7:41:a8:43:ac:16:28:5c: b3:83:f6:f8:a4:91:ac:c6:36:59:3b:49:bc:f3:43: ba:06:8a:2d:c9:15:80:0a:f4:49:9f:2c:98:fd:e3: 6a:c1:79:53:85:69:a5:03:1e:20:42:19:35:d7:5a: cf:fb:67:0f:7c:bb:85:b7:30:44:20:6a:82:83:02: c0:6f:fd:3f:81:3e:a9:e8:e5:26:80:c6:1f:1a:4b: 5a:94:83:72:ed:7a:dc:75:6f:3d:d2:f7:e4:f2:ee: 0a:01:29:08:ae:21:25:c7:58:bb:58:ed:80:de:7e: 5a:12:4f:2f:d1:76:bf:54:ef:ea:84:dd:45:6e:00: e7:f7:23:6b:12:2d:68:96:2e:60:26:2a:86:8e:fb: e0:4c:5b:c3:20:19:db:b0:57:ab:aa:ce:a0:5e:25: 49:f5:34:04:d1:de:b0:df:e5:5f:f7:14:ce:41:02: 7a:da:b3:a4:e4:8c:d6:a7:c3:54:5a:35:e2:ec:0e: c9:47:5e:59:61:85:50:8a:7e:5d:83:a9:72:6b:d1: ac:b7:d2:11:7f:a8:6d:63:e0:c7:30:16:7e:18:b2: f2:23:ed:99:40:fc:21:5c:20:29:d1:6e:ca:df:40: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:B1:94:32:A1:B5:08:20:7C:CB:E3:63:98:DF:AB:CB:C4:BD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a1:05:98:b7:ed:b6:93:e5:51:9b:b8:67:15:26:76:d3:f7: 93:39:2b:03:73:fa:22:eb:5d:8f:9f:fc:24:18:e6:4f:c4:d9: 19:87:3a:ce:c3:4f:bd:31:d7:b0:56:5f:f1:f2:3f:fb:a7:ca: 29:39:f8:0a:cc:34:7d:a2:b9:2c:d0:61:04:88:a6:a6:43:4f: c9:55:62:12:4b:04:8b:6e:8f:2f:25:a4:bb:4c:7c:d0:a9:aa: e6:db:6d:2a:00:c1:18:7f:b5:01:06:d5:89:36:75:82:c9:8c: c9:3e:2a:23:aa:4d:41:bd:c1:56:52:5d:21:f7:bc:9c:32:40: b6:34:41:93:ae:7f:f5:f1:38:d1:ed:53:49:64:53:c3:57:7d: 71:99:2e:fc:ed:67:18:4b:2a:1c:6d:37:de:3e:f6:da:cf:97: c2:97:75:c6:9a:d9:ff:64:31:39:d0:1d:68:d5:ba:df:3b:be: 56:70:20:61:28:2d:b0:df:19:96:63:23:5e:e4:53:a9:83:00: 02:33:f6:ba:91:a1:d5:b2:3d:8a:de:14:6b:bc:85:27:0e:b7: aa:d1:ac:a9:42:f9:e8:4d:45:e1:3d:8c:7c:8e:1d:f4:3d:af: 14:76:df:d8:b5:6d:e4:de:20:90:31:b4:69:f9:8d:20:1c:8a: 39:d7:ef:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4OmaFzA0KSaWPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzY2OGE3ZWYtZDY2MS00NmY2LWJlNWQtOGU0NDlmNzQ5M2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PU5s4C2kOLE0OnWOwWJoGFoQNThx0GoQ6wW KFyzg/b4pJGsxjZZO0m880O6BootyRWACvRJnyyY/eNqwXlThWmlAx4gQhk111rP +2cPfLuFtzBEIGqCgwLAb/0/gT6p6OUmgMYfGktalINy7XrcdW890vfk8u4KASkI riElx1i7WO2A3n5aEk8v0Xa/VO/qhN1FbgDn9yNrEi1oli5gJiqGjvvgTFvDIBnb sFerqs6gXiVJ9TQE0d6w3+Vf9xTOQQJ62rOk5IzWp8NUWjXi7A7JR15ZYYVQin5d g6lya9Gst9IRf6htY+DHMBZ+GLLyI+2ZQPwhXCAp0W7K30BvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZNsZQyobUIIHzL42OY36vLxL3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODU0ZjBiMTMtMDUyNi0z OTg2LWEyODQtNmNhMWQyNTViMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2hBZi37baT5VGbuGcVJnbT95M5KwNz+iLrXY+f/CQY5k/E2RmHOs7D T70x17BWX/HyP/unyik5+ArMNH2iuSzQYQSIpqZDT8lVYhJLBItujy8lpLtMfNCp qubbbSoAwRh/tQEG1Yk2dYLJjMk+KiOqTUG9wVZSXSH3vJwyQLY0QZOuf/XxONHt U0lkU8NXfXGZLvztZxhLKhxtN94+9trPl8KXdcaa2f9kMTnQHWjVut87vlZwIGEo LbDfGZZjI17kU6mDAAIz9rqRodWyPYreFGu8hScOt6rRrKlC+ehNReE9jHyOHfQ9 rxR239i1beTeIJAxtGn5jSAcijnX71w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org