$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: /0jKocvRZHoOoC82x3WjuonAk7BWcAiNH5lmiqYSTVQ= Subject key identifier: 50:14:D8:53:07:2A:1A:EB:4B:48:5E:8B:45:02:C1:FB:50:B4:D0:42 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858479D76B89133B98D1118174D00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b8:91:33:b9:8d:11:18:17:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=fcf54275-3a04-46f6-a081-ffd13484f019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:48:2f:35:19:ea:98:cd:21:24:20:c5:3f: 84:4f:92:d6:94:26:bb:e0:d3:98:b5:86:0d:73:f3: 4e:c3:e2:c5:21:2d:e6:50:02:d6:48:4d:cf:cf:c3: 11:88:03:ee:ec:71:f4:fe:69:8d:bc:81:a7:e9:68: 53:2f:c4:7a:59:dc:a3:ca:05:d3:9c:4f:55:b7:03: a4:93:77:f4:d7:a5:84:7e:e2:93:89:ad:f6:eb:7f: 44:c4:34:57:40:cf:f9:89:ce:9f:45:66:76:c9:d3: d9:cc:62:ee:54:7e:b5:ca:fa:8d:3d:ef:da:e0:bc: 59:f7:78:84:f4:d5:b9:63:80:e3:5c:5a:d2:7e:e4: 24:93:c3:21:e3:29:b7:cc:a8:c4:25:68:58:e1:07: 64:4c:88:fe:5d:ee:be:2d:c6:3b:c3:b4:6c:86:42: 98:5b:59:25:19:c9:81:41:2c:12:4a:4f:32:c6:ec: b2:41:df:d3:0d:77:97:f6:cb:e1:ac:af:09:36:50: 33:1e:35:40:8b:bc:62:4d:de:3b:3f:9f:c3:58:21: cb:ba:23:13:14:b3:f3:8d:08:f6:b6:65:2f:92:53: bd:2d:42:db:dd:6e:88:80:80:2e:d3:e2:f6:a2:1b: df:c2:dc:aa:89:5e:a8:ac:a6:43:e1:26:8d:a1:7e: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:D8:53:07:2A:1A:EB:4B:48:5E:8B:45:02:C1:FB:50:B4:D0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:df:d9:92:82:71:63:99:58:90:2c:b9:5e:cd:30:e0:3e:6c: 6b:82:c1:c0:77:86:20:59:fe:f0:55:83:1b:06:fc:6f:f5:3c: 0d:0b:8b:f4:43:35:c3:21:4e:d3:35:24:e7:38:54:b3:13:d4: da:d6:8c:0f:9b:c6:3f:3b:63:d8:1b:db:ab:da:26:42:91:7b: 43:85:30:71:7f:89:bb:ec:3d:44:b7:44:0c:f8:35:d2:34:01: 67:57:2e:15:2f:dc:41:40:0a:1a:31:fd:dc:74:60:2f:6b:44: 76:4e:92:50:73:bb:92:03:78:8b:3d:16:32:98:1d:c0:9f:ee: 69:83:f7:b9:c6:8a:80:b1:de:9f:f6:d1:06:b0:2e:ac:84:fa: 81:f6:29:be:ce:51:d0:aa:f3:e3:36:ce:55:c3:2a:40:42:0e: aa:be:28:88:b0:68:3c:84:4d:a6:6f:7b:3e:b7:e9:a5:00:47: e1:17:3f:d8:64:4d:99:56:57:e7:d5:15:d6:1b:5a:91:29:ed: a0:5b:c3:ab:26:77:75:40:b7:74:dc:09:15:dc:4f:19:7e:7e: 99:10:ce:e6:77:12:16:25:3b:b9:af:11:69:69:30:64:c8:66: fb:ec:cc:f1:77:a8:94:b3:40:3d:c1:49:e2:ce:87:56:58:e5: 9d:14:ad:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddriRM7mNERgXTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmNmNTQyNzUtM2EwNC00NmY2LWEwODEtZmZkMTM0ODRmMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3JILzUZ6pjNISQgxT+ET5LWlCa74NOYtYYN c/NOw+LFIS3mUALWSE3Pz8MRiAPu7HH0/mmNvIGn6WhTL8R6WdyjygXTnE9VtwOk k3f016WEfuKTia32639ExDRXQM/5ic6fRWZ2ydPZzGLuVH61yvqNPe/a4LxZ93iE 9NW5Y4DjXFrSfuQkk8Mh4ym3zKjEJWhY4QdkTIj+Xe6+LcY7w7RshkKYW1klGcmB QSwSSk8yxuyyQd/TDXeX9svhrK8JNlAzHjVAi7xiTd47P5/DWCHLuiMTFLPzjQj2 tmUvklO9LULb3W6IgIAu0+L2ohvfwtyqiV6orKZD4SaNoX6vYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAU2FMHKhrrS0hei0UCwftQtNBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbf2ZKCcWOZWJAsuV7NMOA+bGuCwcB3hiBZ/vBVgxsG/G/1PA0Li/RD NcMhTtM1JOc4VLMT1NrWjA+bxj87Y9gb26vaJkKRe0OFMHF/ibvsPUS3RAz4NdI0 AWdXLhUv3EFAChox/dx0YC9rRHZOklBzu5IDeIs9FjKYHcCf7mmD97nGioCx3p/2 0QawLqyE+oH2Kb7OUdCq8+M2zlXDKkBCDqq+KIiwaDyETaZvez636aUAR+EXP9hk TZlWV+fVFdYbWpEp7aBbw6smd3VAt3TcCRXcTxl+fpkQzuZ3EhYlO7mvEWlpMGTI ZvvszPF3qJSzQD3BSeLOh1ZY5Z0UrYo= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org