$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa File: acdfc857-b60f-31a5-a03d-714b58be33d7.roa (raw, json) Hash identifier: nAxytTohZIbBwzSFnO87eWr7zzDGWMSRrCeyNKuyS4U= Subject key identifier: 4A:A2:D4:2A:35:DF:DB:18:93:31:B4:E4:A1:0A:30:1C:62:68:30:4B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847F41F9EB3808201A0258F3060 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa Signing time: Thu 21 Nov 2024 14:00:51 +0000 ROA not before: Thu 21 Nov 2024 14:00:51 +0000 ROA not after: Wed 19 Feb 2025 14:00:51 +0000 asID: 63199 IP address blocks: 148.153.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:1f:9e:b3:80:82:01:a0:25:8f:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 21 14:00:51 2024 GMT Not After : Feb 19 14:00:51 2025 GMT Subject: CN=f7317d2a-9106-4ae5-b216-1b2a072af418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:60:89:03:4f:6a:07:98:53:ec:eb:25:6f: b7:dc:43:08:45:ae:83:1e:75:27:8a:53:0d:93:c3: f8:a0:be:a4:e2:6a:a6:79:0d:25:a3:8f:e1:2d:e1: 67:4e:36:9b:19:8b:64:c4:f8:65:36:10:bd:be:94: 26:4b:03:84:d1:99:f4:26:82:68:64:a7:42:27:e7: c5:e0:ce:63:74:0d:11:9f:c7:26:29:98:87:53:cf: 8d:38:da:4d:1f:44:14:bd:8b:30:fe:2a:c5:fe:80: 49:00:ea:36:be:c4:18:11:ee:5d:5e:f5:bc:f6:a4: 3e:0e:87:63:7a:97:c2:a8:52:f5:40:e7:8b:40:d0: 2d:d8:a4:67:e7:fb:eb:53:38:3f:50:f8:9c:a4:ba: 02:ab:fe:3e:ce:1e:20:35:9b:11:d0:06:42:bb:c4: f8:70:d7:09:59:77:ef:08:0f:99:cc:73:a0:48:dd: 27:05:16:92:4f:98:71:ca:37:58:12:eb:69:1a:fd: 78:ce:69:08:f6:af:48:f6:43:ea:b1:23:da:c8:09: ba:7b:92:e3:c1:4f:9c:f9:ad:5b:1b:53:0b:32:09: 06:4c:bf:36:27:81:e2:f1:3b:79:45:93:58:06:46: 9a:ae:f3:b0:b6:e2:a3:71:ed:9b:2a:52:df:fc:d7: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:D4:2A:35:DF:DB:18:93:31:B4:E4:A1:0A:30:1C:62:68:30:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2b:f1:2a:f9:a4:31:19:b1:b3:30:65:f5:c0:bc:7e:37:52: 7b:c9:1e:10:5e:07:19:20:59:c7:99:6d:0e:11:81:b0:d6:87: f9:85:7a:73:9e:59:c5:1e:ff:15:c2:34:46:82:38:2d:90:a6: 11:94:28:f9:61:d9:05:eb:27:66:b8:39:3b:77:07:d1:4d:11: 18:bf:ed:ce:9d:38:98:78:b0:cc:53:6a:59:23:df:28:ed:47: 02:e9:12:20:42:d8:52:45:6b:7e:bf:34:0d:31:74:9e:c7:47: 1d:60:c2:a6:52:8c:1d:d6:c3:3c:d9:a2:c9:19:6b:e2:6f:d8: c0:f3:28:80:bd:70:29:e3:39:ec:b9:72:c9:c4:c8:63:3b:51: 12:2d:cd:20:98:8c:56:2b:dd:7e:7f:07:31:31:0d:26:b9:0e: 6e:a0:61:01:5c:69:82:42:f0:1e:31:c6:f9:62:95:86:cd:99: fc:cf:1d:d1:b0:a2:9b:bc:da:de:ac:a3:f4:64:b7:30:f7:01: ac:76:e0:39:1b:7c:b6:d3:9a:9a:c9:f0:83:29:f1:d8:3b:dc: 2d:b3:b9:48:ee:af:21:89:d3:d8:f9:e8:6d:d8:5c:a1:cf:b1: 45:44:20:ec:37:e4:22:b3:44:b0:75:06:fa:11:c8:8d:5f:ca: 81:e0:30:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf0H56zgIIBoCWPMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTEyMTE0MDA1MVoXDTI1MDIxOTE0MDA1MVowLzEtMCsGA1UEAxMk ZjczMTdkMmEtOTEwNi00YWU1LWIyMTYtMWIyYTA3MmFmNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J5giQNPageYU+zrJW+33EMIRa6DHnUnilMN k8P4oL6k4mqmeQ0lo4/hLeFnTjabGYtkxPhlNhC9vpQmSwOE0Zn0JoJoZKdCJ+fF 4M5jdA0Rn8cmKZiHU8+NONpNH0QUvYsw/irF/oBJAOo2vsQYEe5dXvW89qQ+Dodj epfCqFL1QOeLQNAt2KRn5/vrUzg/UPicpLoCq/4+zh4gNZsR0AZCu8T4cNcJWXfv CA+ZzHOgSN0nBRaST5hxyjdYEutpGv14zmkI9q9I9kPqsSPayAm6e5LjwU+c+a1b G1MLMgkGTL82J4Hi8Tt5RZNYBkaarvOwtuKjce2bKlLf/NcatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqi1Co139sYkzG05KEKMBxiaDBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWNkZmM4NTctYjYwZi0z MWE1LWEwM2QtNzE0YjU4YmUzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUr8Sr5pDEZsbMwZfXAvH43UnvJHhBeBxkgWceZbQ4RgbDWh/mFenOe WcUe/xXCNEaCOC2QphGUKPlh2QXrJ2a4OTt3B9FNERi/7c6dOJh4sMxTalkj3yjt RwLpEiBC2FJFa36/NA0xdJ7HRx1gwqZSjB3WwzzZoskZa+Jv2MDzKIC9cCnjOey5 csnEyGM7URItzSCYjFYr3X5/BzExDSa5Dm6gYQFcaYJC8B4xxvlilYbNmfzPHdGw opu82t6so/RktzD3Aax24DkbfLbTmprJ8IMp8dg73C2zuUjuryGJ09j56G3YXKHP sUVEIOw35CKzRLB1BvoRyI1fyoHgMIQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org