$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: dhZkpXBeNpejbCEubWtUZ2nx7dINfPOvcM1a5h+DLFI= Subject key identifier: FF:2A:AD:EE:DF:51:0C:FF:B2:F7:F8:18:BE:54:A9:7B:52:13:BC:20 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847E2180D390CFAEC8D2D733980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Fri 15 Nov 2024 03:01:06 +0000 ROA not before: Fri 15 Nov 2024 03:01:06 +0000 ROA not after: Thu 13 Feb 2025 03:01:06 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e2:18:0d:39:0c:fa:ec:8d:2d:73:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 15 03:01:06 2024 GMT Not After : Feb 13 03:01:06 2025 GMT Subject: CN=71dff298-861b-4447-ba6f-8c3a7b6f628f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:84:94:28:9d:1a:77:51:0a:20:16:5b:cb: 57:84:19:97:ec:78:41:52:28:0e:2e:ba:bb:65:2d: 9f:ab:0b:73:f1:61:41:8a:d3:3d:90:75:65:99:d4: d0:cb:5c:2a:58:46:43:e0:0f:e0:bb:6e:bd:1d:10: 09:eb:eb:88:74:d9:44:c3:68:17:a9:2e:85:0e:26: 4f:81:8f:a7:70:7f:a4:da:0d:4f:2e:a5:d6:1d:05: 79:29:93:fb:72:71:dd:1b:c6:b7:af:97:3b:a2:37: 52:3c:a8:87:c1:96:fb:04:e0:c0:f7:72:16:5b:6f: 36:5b:01:4a:e4:1f:1c:be:7b:53:d8:4b:c2:75:61: 10:f8:dc:9a:ab:e4:fc:be:0d:8d:f6:83:28:e3:14: 12:b1:8c:31:52:ed:f9:6d:a2:6d:62:da:11:0d:46: 2d:72:f3:e1:a0:ee:2a:36:ba:0c:6f:70:62:f9:12: 1b:3d:71:5e:db:19:e1:76:b5:08:30:28:75:ab:1e: 98:d9:cb:0a:ba:48:5f:03:3c:4f:05:08:a2:a6:1f: 1b:5b:12:37:68:57:dc:0d:2c:fb:3e:5e:dd:50:1f: 28:56:25:53:8c:f9:fc:f2:c1:70:c1:af:ca:1e:74: 66:56:d4:54:9d:99:ce:7f:db:bd:6e:bb:12:2f:1f: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:AD:EE:DF:51:0C:FF:B2:F7:F8:18:BE:54:A9:7B:52:13:BC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b3:37:47:95:a4:1c:77:0b:a2:9a:b0:97:69:60:66:bd:45: 0a:8f:63:2c:b9:4a:8c:f7:47:58:61:28:4e:34:e0:12:54:ea: 92:9a:57:3d:0f:0c:c7:e8:89:a9:eb:3f:65:36:9d:dc:3f:2a: 09:ee:10:b0:60:af:3e:6d:f7:a9:57:0f:e4:94:ac:5e:a7:10: 0e:ea:59:a7:b9:2f:36:bf:02:5a:ce:9f:87:f4:8e:00:fd:89: 2e:65:92:41:64:46:13:81:2f:88:6c:eb:fc:29:4b:45:e9:98: 62:89:3d:b8:67:80:f7:9f:58:3e:f4:8b:ff:d6:4a:f7:b1:9e: 0d:07:17:64:00:5d:1f:4a:15:0e:21:b8:ea:25:f7:ab:3b:88: 7f:e3:b7:0e:d0:56:77:7b:d1:f2:0c:3a:33:85:79:7e:60:da: 00:5e:52:81:80:ae:6b:2a:21:ec:fd:56:d5:d6:80:95:d7:c0: 53:41:4c:db:01:83:88:42:5e:cd:e8:8f:d8:63:37:1a:16:0e: 4c:1f:f3:f0:81:58:ba:f8:e0:60:d5:0a:2d:29:96:19:8d:36: 29:2a:37:d1:5c:00:3a:25:fb:f3:40:c5:77:1c:76:d4:0e:c4: 0d:b3:77:e6:c0:d5:64:0a:69:c8:29:7c:70:e3:c2:66:90:e1: 2b:1a:3b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfiGA05DPrsjS1zOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTExNTAzMDEwNloXDTI1MDIxMzAzMDEwNlowLzEtMCsGA1UEAxMk NzFkZmYyOTgtODYxYi00NDQ3LWJhNmYtOGMzYTdiNmY2MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3OElCidGndRCiAWW8tXhBmX7HhBUigOLrq7 ZS2fqwtz8WFBitM9kHVlmdTQy1wqWEZD4A/gu269HRAJ6+uIdNlEw2gXqS6FDiZP gY+ncH+k2g1PLqXWHQV5KZP7cnHdG8a3r5c7ojdSPKiHwZb7BODA93IWW282WwFK 5B8cvntT2EvCdWEQ+Nyaq+T8vg2N9oMo4xQSsYwxUu35baJtYtoRDUYtcvPhoO4q NroMb3Bi+RIbPXFe2xnhdrUIMCh1qx6Y2csKukhfAzxPBQiiph8bWxI3aFfcDSz7 Pl7dUB8oViVTjPn88sFwwa/KHnRmVtRUnZnOf9u9brsSLx90jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8qre7fUQz/svf4GL5UqXtSE7wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2zN0eVpBx3C6KasJdpYGa9RQqPYyy5Soz3R1hhKE404BJU6pKaVz0P DMfoianrP2U2ndw/KgnuELBgrz5t96lXD+SUrF6nEA7qWae5Lza/AlrOn4f0jgD9 iS5lkkFkRhOBL4hs6/wpS0XpmGKJPbhngPefWD70i//WSvexng0HF2QAXR9KFQ4h uOol96s7iH/jtw7QVnd70fIMOjOFeX5g2gBeUoGArmsqIez9VtXWgJXXwFNBTNsB g4hCXs3oj9hjNxoWDkwf8/CBWLr44GDVCi0plhmNNikqN9FcADol+/NAxXccdtQO xA2zd+bA1WQKacgpfHDjwmaQ4SsaO3U= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org