$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa File: 853db1af-0c14-3537-afa6-b2429c1a8793.roa (raw, json) Hash identifier: BoTWcFfax67Mx1y+J5BcnGKGrhX9xn4qeoDIFcuGAKg= Subject key identifier: 45:95:03:36:CE:0D:EE:4C:31:FD:02:EC:BC:C2:59:DE:7A:91:38:04 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F432858451982E82A4A502172016D3580 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa Signing time: Mon 04 Mar 2024 21:05:03 +0000 ROA not before: Mon 04 Mar 2024 21:05:03 +0000 ROA not after: Sun 02 Jun 2024 20:05:03 +0000 asID: 3738 IP address blocks: 192.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:19:82:e8:2a:4a:50:21:72:01:6d:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 4 21:05:03 2024 GMT Not After : Jun 2 20:05:03 2024 GMT Subject: CN=b3e3ce5f-8449-4937-af54-7d85b7216a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:73:5e:94:0f:fe:ef:ce:00:a9:29:17:b9: de:1e:4e:73:89:53:03:5c:90:3c:7f:f5:74:35:7c: b8:a1:df:df:f9:20:8d:de:2c:89:63:30:02:4b:96: 04:0d:c6:e0:d4:a9:e5:73:e6:bc:2a:de:82:fc:1b: 89:f2:6f:b5:a3:5c:35:3e:39:43:d1:e8:64:1f:d0: c9:60:84:36:72:84:09:50:94:99:1b:ce:7c:a3:e2: bc:ec:b0:2d:83:3f:9f:cf:67:0e:66:ad:5f:75:a0: e1:aa:f1:b6:1d:fe:d6:4a:38:be:5f:b2:17:33:40: f6:79:c2:d1:fe:94:92:f4:f5:d6:46:09:4e:83:5d: c0:72:24:0b:05:5e:9d:18:af:d2:e1:07:e9:58:7e: 41:a6:06:d9:cc:7b:cb:89:93:c9:84:99:07:f9:27: 7d:78:93:c7:8b:7e:65:54:92:0e:bd:d8:d3:09:84: 1a:a2:2d:25:57:fa:3b:35:07:b1:91:08:28:a5:87: 55:b5:c2:19:c3:4a:ef:92:c4:c5:88:b2:a8:8b:f6: 59:ed:34:6d:08:7f:da:94:43:69:94:7c:39:ae:b3: 96:b0:23:bc:de:25:14:81:21:b7:1e:b8:ed:b6:f7: 73:55:ca:40:a7:11:9e:b0:58:5d:d9:06:3e:f1:d4: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:95:03:36:CE:0D:EE:4C:31:FD:02:EC:BC:C2:59:DE:7A:91:38:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6d:cd:a5:1e:ee:e0:40:0f:9e:05:19:f1:42:fc:60:5f:cc: 64:d1:52:80:d2:42:86:8a:a7:e6:f3:92:e6:17:54:0e:a1:38: 0a:9a:5a:62:52:16:5a:23:e2:1b:23:92:d4:67:d6:c9:f4:91: a8:57:a8:10:e8:5c:06:5b:24:7c:bf:39:8d:02:a9:82:29:1a: 0b:0b:ba:a9:2e:e4:57:64:62:20:e3:33:6e:e0:d7:e4:44:48: 8b:cd:a5:bc:21:ec:98:6a:70:d9:7f:39:11:de:bd:c6:db:c7: 7f:8d:99:91:c1:37:60:2e:0c:ba:4f:11:29:a5:a1:4d:fa:ae: 38:22:18:3a:e2:12:a7:e9:f6:74:43:7b:bb:8e:e9:78:16:97: c3:4f:52:61:ec:31:3d:81:e9:b8:2a:90:0a:35:6b:da:89:14: 15:66:72:82:b9:b4:0b:50:f0:93:62:16:d1:2b:89:de:7c:4a: cb:63:ac:ee:b8:9b:8b:88:b7:65:ea:96:b1:f1:6f:08:24:68: f5:26:0a:cc:22:a7:27:44:ec:64:41:bd:c4:f4:41:22:f1:f8: e8:0e:9b:73:8e:24:72:78:45:fd:ca:3f:33:f1:76:6a:6a:b5: 7f:e6:5d:42:40:4f:39:6c:69:5e:5f:93:01:13:60:f6:6f:e6: 8d:6b:5a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUZgugqSlAhcgFtNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MDMwNDIxMDUwM1oXDTI0MDYwMjIwMDUwM1owLzEtMCsGA1UEAxMk YjNlM2NlNWYtODQ0OS00OTM3LWFmNTQtN2Q4NWI3MjE2YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvdzXpQP/u/OAKkpF7neHk5ziVMDXJA8f/V0 NXy4od/f+SCN3iyJYzACS5YEDcbg1Knlc+a8Kt6C/BuJ8m+1o1w1PjlD0ehkH9DJ YIQ2coQJUJSZG858o+K87LAtgz+fz2cOZq1fdaDhqvG2Hf7WSji+X7IXM0D2ecLR /pSS9PXWRglOg13AciQLBV6dGK/S4QfpWH5BpgbZzHvLiZPJhJkH+Sd9eJPHi35l VJIOvdjTCYQaoi0lV/o7NQexkQgopYdVtcIZw0rvksTFiLKoi/ZZ7TRtCH/alENp lHw5rrOWsCO83iUUgSG3HrjttvdzVcpApxGesFhd2QY+8dTcDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWVAzbODe5MMf0C7LzCWd56kTgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODUzZGIxYWYtMGMxNC0z NTM3LWFmYTYtYjI0MjljMWE4NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNtzaUe7uBAD54FGfFC/GBfzGTRUoDSQoaKp+bzkuYXVA6hOAqaWmJS Floj4hsjktRn1sn0kahXqBDoXAZbJHy/OY0CqYIpGgsLuqku5FdkYiDjM27g1+RE SIvNpbwh7JhqcNl/ORHevcbbx3+NmZHBN2AuDLpPESmloU36rjgiGDriEqfp9nRD e7uO6XgWl8NPUmHsMT2B6bgqkAo1a9qJFBVmcoK5tAtQ8JNiFtErid58SstjrO64 m4uIt2XqlrHxbwgkaPUmCswipydE7GRBvcT0QSLx+OgOm3OOJHJ4Rf3KPzPxdmpq tX/mXUJATzlsaV5fkwETYPZv5o1rWl8= -----END CERTIFICATE-----Generated at Wed May 22 14:50:30 2024 by rpki-client on console-fra.rpki-client.org