$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: J3wWNz7DZ/IC/uiwTNaYgM/71CZk4RHnT+8XeMzKAO8= Subject key identifier: D1:71:DB:09:49:98:96:7A:D0:57:71:BA:E5:26:C7:B6:5B:F8:C4:4E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847EAD8FF0FED232CD036A17380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Mon 18 Nov 2024 06:16:19 +0000 ROA not before: Mon 18 Nov 2024 06:16:19 +0000 ROA not after: Sun 16 Feb 2025 06:16:19 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:d8:ff:0f:ed:23:2c:d0:36:a1:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 18 06:16:19 2024 GMT Not After : Feb 16 06:16:19 2025 GMT Subject: CN=7a812ec0-e2b6-475d-a6ec-4d0965ddd376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:d6:46:f4:8c:c9:bb:a6:a0:b6:76:a6:90: 12:34:aa:66:d6:2c:71:12:cf:20:c9:0f:8f:bb:66: 21:a1:5f:f8:4e:ff:9c:6c:ca:80:32:fa:09:b8:c1: 9e:4b:6f:f9:f2:61:ae:4f:04:5a:bc:c4:c6:82:b6: 9e:33:47:71:49:9f:38:83:ea:1b:31:9f:78:9d:ce: 6b:ab:ff:01:07:c5:56:b7:68:ee:24:cd:db:bb:9d: 24:e1:d2:9c:d9:72:52:f3:1e:c1:6b:81:10:be:e1: 2a:1f:01:51:db:6f:5f:65:5f:03:af:2f:05:15:35: 8a:6d:66:b0:1d:44:9f:d8:99:2e:d0:3b:cb:51:bd: 04:dd:ba:5f:ff:94:0c:1d:4b:8b:2b:7b:44:31:7e: 3f:78:bc:4d:4e:0c:b1:e3:97:8a:4e:62:a5:66:51: 7b:ea:c5:c8:fd:08:e9:11:d1:b9:fc:2e:4e:9b:fc: c0:32:5e:a2:94:56:7c:aa:71:87:ae:68:3f:d1:9e: 50:40:ac:81:33:aa:d2:87:50:b3:f0:1a:41:19:eb: 2e:3b:fa:cb:cb:32:2b:18:0f:68:a7:e9:e3:08:28: dc:63:05:29:21:52:06:8c:21:11:7b:b6:65:6e:13: df:05:85:d8:2b:b9:f3:b7:de:f9:f3:98:6a:70:95: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:71:DB:09:49:98:96:7A:D0:57:71:BA:E5:26:C7:B6:5B:F8:C4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:82:5c:ee:62:4a:59:a9:2c:9e:fd:63:f4:42:9e:a9:ea:61: d8:db:45:3c:aa:11:e0:fe:3b:80:fb:6d:d8:19:22:87:0c:20: 2d:e8:30:a9:ee:8c:35:7b:bf:8a:d2:60:15:9f:79:e0:ef:20: 38:97:35:ed:8a:a2:55:e7:13:72:a3:e9:a1:85:ba:34:71:60: ef:41:fe:83:47:fb:bf:28:23:73:8b:78:c1:cd:d6:1f:dc:e7: df:5a:a1:da:98:45:2a:7e:8d:49:10:57:bb:fd:85:38:b7:79: b2:63:a6:1b:6b:d1:70:18:4a:d6:68:f2:ac:71:88:e3:23:38: 86:2e:56:d7:11:d0:18:5a:d8:78:f5:80:96:98:1a:c0:39:34: 40:0b:9c:f0:aa:6c:d8:d4:dc:da:bf:1d:97:93:4a:49:83:78: a8:ea:fb:78:e2:e8:12:21:fb:32:2f:3b:5d:42:c9:1d:1c:e6: f6:4c:b9:89:49:f3:60:16:67:db:e3:be:8d:d2:2c:da:99:8a: b8:d7:15:ce:61:9b:de:ad:82:8f:27:ae:9a:3c:1e:68:86:06: cb:b3:ae:5b:cf:85:6a:5b:05:93:1d:3d:5d:fd:c5:3d:dc:b4: 30:95:d6:9f:b0:54:e7:d2:32:31:7e:5e:57:71:41:15:9e:17: e5:a1:ce:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfq2P8P7SMs0Dahc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTExODA2MTYxOVoXDTI1MDIxNjA2MTYxOVowLzEtMCsGA1UEAxMk N2E4MTJlYzAtZTJiNi00NzVkLWE2ZWMtNGQwOTY1ZGRkMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja3WRvSMybumoLZ2ppASNKpm1ixxEs8gyQ+P u2YhoV/4Tv+cbMqAMvoJuMGeS2/58mGuTwRavMTGgraeM0dxSZ84g+obMZ94nc5r q/8BB8VWt2juJM3bu50k4dKc2XJS8x7Ba4EQvuEqHwFR229fZV8Dry8FFTWKbWaw HUSf2Jku0DvLUb0E3bpf/5QMHUuLK3tEMX4/eLxNTgyx45eKTmKlZlF76sXI/Qjp EdG5/C5Om/zAMl6ilFZ8qnGHrmg/0Z5QQKyBM6rSh1Cz8BpBGesuO/rLyzIrGA9o p+njCCjcYwUpIVIGjCERe7ZlbhPfBYXYK7nzt97585hqcJWsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFx2wlJmJZ60FdxuuUmx7Zb+MROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWCXO5iSlmpLJ79Y/RCnqnqYdjbRTyqEeD+O4D7bdgZIocMIC3oMKnu jDV7v4rSYBWfeeDvIDiXNe2KolXnE3Kj6aGFujRxYO9B/oNH+78oI3OLeMHN1h/c 599aodqYRSp+jUkQV7v9hTi3ebJjphtr0XAYStZo8qxxiOMjOIYuVtcR0Bha2Hj1 gJaYGsA5NEALnPCqbNjU3Nq/HZeTSkmDeKjq+3ji6BIh+zIvO11CyR0c5vZMuYlJ 82AWZ9vjvo3SLNqZirjXFc5hm96tgo8nrpo8HmiGBsuzrlvPhWpbBZMdPV39xT3c tDCV1p+wVOfSMjF+XldxQRWeF+WhzpY= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:46 2024 by rpki-client on console-fra.rpki-client.org