$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json) Hash identifier: JNYj9UVDsXzYFEQGPggUez9zW86TJdSvuC62KYtaJco= Subject key identifier: 42:D4:74:56:A8:86:AA:9D:AB:22:D0:95:94:A4:BB:9C:E1:40:69:C5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285847B696BF2C72CCDE06F34D31C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 63199 IP address blocks: 148.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:bf:2c:72:cc:de:06:f3:4d:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=805159fc-f368-4899-9762-cea1052ed45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:f1:23:b5:c5:ac:4c:4d:8d:07:78:39:7c: b4:7e:20:7a:82:62:b4:a6:45:55:e8:3d:7f:ba:e5: 8c:3a:4d:6a:03:90:c4:6d:33:49:c4:c4:a9:cc:7c: 42:fd:2f:b9:fb:fc:d9:2e:38:e0:14:f1:60:25:39: b1:fe:59:b4:a6:03:40:ab:09:f3:36:fb:9a:78:42: 9c:b6:27:65:53:a8:17:13:29:11:b3:b0:5e:01:10: 0d:1e:98:cd:52:b4:8c:1f:be:ec:65:9d:17:b2:69: 04:ee:c0:f4:14:f4:c5:f5:7f:74:80:a2:6c:f3:59: 6d:4e:4d:f5:1d:a5:6e:af:12:fc:b2:97:ef:0d:60: bd:98:c2:7a:90:a2:78:82:64:fb:a3:cc:80:11:97: 4b:3b:20:0f:f9:68:62:6d:37:73:8a:33:49:72:64: f4:48:2b:28:0a:12:4b:7f:4e:c4:c9:cc:ab:0d:47: f9:30:8c:03:90:88:5f:91:72:71:69:c6:95:83:60: eb:43:51:88:b2:a7:6d:86:34:87:eb:86:24:b6:4c: 54:fa:ba:e2:c2:24:8b:49:35:09:81:16:42:8e:33: 58:ab:d0:84:31:0a:13:b7:76:cb:5b:a2:fe:74:ef: f9:2c:6d:ee:29:fc:13:d2:a2:0e:9b:5a:55:ce:af: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:74:56:A8:86:AA:9D:AB:22:D0:95:94:A4:BB:9C:E1:40:69:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:23:9d:0b:6d:be:63:d4:ab:7c:66:c3:0f:15:5d:d0:f8:d9: 14:b4:e7:be:25:18:5a:e7:86:83:2c:32:a2:30:c1:ea:81:fd: 66:35:b9:bc:3b:95:56:fa:c8:8c:73:ea:6f:c8:50:ba:80:63: b0:9d:49:88:6c:dc:51:b9:95:82:15:1d:de:d2:9f:1d:10:1f: e0:e6:4c:8f:17:a5:14:2b:1b:97:8f:c6:fc:69:1e:16:34:fb: ca:3d:8e:17:c6:a4:e7:88:87:1d:97:96:01:eb:a1:d5:47:80: c6:54:e1:01:0e:71:e9:ca:3b:5b:4d:98:15:2a:9e:fc:84:1d: 2b:35:bb:8e:ce:9e:cc:7d:6d:a6:8c:4d:36:6e:1a:8c:5e:75: a6:37:70:7a:e4:79:99:45:5b:2d:a9:bc:97:80:fd:e1:c9:44: a3:c4:ba:8c:c9:b7:66:0e:c3:ba:bd:37:28:49:88:36:e0:e7: 73:b6:7e:3b:0d:a8:a6:8a:40:2f:62:02:e3:e3:65:7c:ed:bb: 22:d2:af:8f:3c:e5:48:59:cd:6e:6b:cc:0f:b6:1e:72:e1:a7: 9f:87:a3:ec:6d:c5:79:37:79:06:33:6c:96:2e:2e:f6:d4:03: fc:b3:ad:20:3d:04:a4:d8:e1:85:fd:b3:0a:59:8d:1c:79:ba: 85:8d:d5:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lr8scszeBvNNMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk ODA1MTU5ZmMtZjM2OC00ODk5LTk3NjItY2VhMTA1MmVkNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkHxI7XFrExNjQd4OXy0fiB6gmK0pkVV6D1/ uuWMOk1qA5DEbTNJxMSpzHxC/S+5+/zZLjjgFPFgJTmx/lm0pgNAqwnzNvuaeEKc tidlU6gXEykRs7BeARANHpjNUrSMH77sZZ0XsmkE7sD0FPTF9X90gKJs81ltTk31 HaVurxL8spfvDWC9mMJ6kKJ4gmT7o8yAEZdLOyAP+WhibTdzijNJcmT0SCsoChJL f07EycyrDUf5MIwDkIhfkXJxacaVg2DrQ1GIsqdthjSH64YktkxU+rriwiSLSTUJ gRZCjjNYq9CEMQoTt3bLW6L+dO/5LG3uKfwT0qIOm1pVzq8bZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELUdFaohqqdqyLQlZSku5zhQGnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIjnQttvmPUq3xmww8VXdD42RS0574lGFrnhoMsMqIwweqB/WY1ubw7 lVb6yIxz6m/IULqAY7CdSYhs3FG5lYIVHd7Snx0QH+DmTI8XpRQrG5ePxvxpHhY0 +8o9jhfGpOeIhx2XlgHrodVHgMZU4QEOcenKO1tNmBUqnvyEHSs1u47Onsx9baaM TTZuGoxedaY3cHrkeZlFWy2pvJeA/eHJRKPEuozJt2YOw7q9NyhJiDbg53O2fjsN qKaKQC9iAuPjZXztuyLSr4885UhZzW5rzA+2HnLhp5+Ho+xtxXk3eQYzbJYuLvbU A/yzrSA9BKTY4YX9swpZjRx5uoWN1fQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org