$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa File: 30a47725-29f4-31fa-88b6-51de560106ef.roa (raw, json) Hash identifier: niCPEUKZ/3OvwF2e/kGrPl5I+fuCMJ5WT29URtRkrA4= Subject key identifier: 06:85:11:E9:81:90:E7:D4:95:7A:1F:41:FE:C7:F5:36:B9:CA:04:C7 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584774FBA12D151A8DB338A3F580 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 396905 IP address blocks: 149.19.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:a1:2d:15:1a:8d:b3:38:a3:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=3b997c6e-db90-4540-a413-4a271b212b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:53:5d:b3:31:b2:38:6b:73:ca:fa:06:19: 4a:0e:65:d8:7f:fc:f9:9f:79:fe:06:b4:a9:d9:cb: 6f:82:92:cb:d0:49:1a:c0:5d:ac:16:f7:d4:18:a2: 82:bd:18:41:22:7f:1f:d2:76:a6:00:de:fe:e1:40: 84:ac:fe:56:25:f9:49:60:b1:cc:c3:b0:11:37:7d: 2d:18:35:7b:f8:61:ac:35:f6:e8:e3:a3:4a:49:6c: 2a:c7:62:ed:0c:3a:38:fe:55:79:fa:4a:bb:34:21: 04:43:1c:3c:49:76:8e:76:cd:d8:38:2f:57:9a:17: 85:7d:87:5f:2c:c5:3a:d5:4a:ca:04:1b:84:1a:4b: 3f:24:23:da:50:71:82:89:7a:55:2f:a8:e4:54:5c: 53:76:ea:15:75:bb:c9:28:f1:ed:69:ed:6d:84:cd: 52:e8:31:7e:af:06:13:c5:4f:2e:99:a4:19:fc:31: 01:7c:c1:14:ee:bb:0f:c6:e9:d4:90:cc:02:56:97: c3:9a:30:48:bc:7c:37:9b:3e:6e:f1:1b:1e:bb:2d: ab:ed:8b:3e:76:e1:1d:41:2b:3e:d2:e0:ed:2e:e7: 22:45:e3:10:90:a0:f7:07:dd:b9:66:7f:b8:27:f7: fe:2b:44:4c:ec:b7:40:bc:4f:e3:08:b9:0b:24:2a: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:85:11:E9:81:90:E7:D4:95:7A:1F:41:FE:C7:F5:36:B9:CA:04:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/30a47725-29f4-31fa-88b6-51de560106ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 149.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1e:3c:84:86:89:19:d4:4c:fd:09:03:80:92:60:b4:4b:90: 4b:86:7b:d7:66:8f:9b:a8:bf:65:2f:41:ad:46:da:6d:c0:42: 7c:f9:5a:cd:ee:cf:7f:88:35:eb:eb:a5:5d:4e:49:c3:ae:ec: dd:86:f5:7b:91:2c:b9:25:dd:6f:b8:50:27:47:f3:4d:da:b9: 5c:a3:30:29:ed:85:e9:0f:fa:0d:b5:65:f8:ac:2f:8d:fe:cc: d8:ee:e9:3c:95:1a:a8:e1:d3:4a:fa:c5:3a:71:73:1d:f3:d1: 57:b1:43:c6:52:70:b0:4b:00:6c:49:5f:93:8b:71:e6:9f:aa: 3f:36:e0:18:ac:60:06:80:40:88:d3:1c:24:48:25:63:2e:46: aa:70:43:c5:48:76:04:17:0c:e3:86:64:ef:f6:76:15:06:cd: 3f:b3:e6:cb:75:51:08:b9:76:42:d1:6e:53:5b:37:c7:25:12: 42:8c:c6:07:ca:f1:33:8e:da:ed:07:96:5b:44:9f:cc:2d:31: 31:30:b3:d3:fc:09:29:23:90:9e:9f:b8:49:d0:0a:b4:8d:a7: 2d:7b:02:01:03:38:f1:d2:89:ca:b3:aa:6b:b2:df:f0:43:48: 0a:8b:21:0b:c5:5c:0a:f1:fd:fd:38:d3:e7:d9:0d:3f:03:0a: c8:5b:bd:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6EtFRqNszij9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk M2I5OTdjNmUtZGI5MC00NTQwLWE0MTMtNGEyNzFiMjEyYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggBTXbMxsjhrc8r6BhlKDmXYf/z5n3n+BrSp 2ctvgpLL0EkawF2sFvfUGKKCvRhBIn8f0namAN7+4UCErP5WJflJYLHMw7ARN30t GDV7+GGsNfbo46NKSWwqx2LtDDo4/lV5+kq7NCEEQxw8SXaOds3YOC9XmheFfYdf LMU61UrKBBuEGks/JCPaUHGCiXpVL6jkVFxTduoVdbvJKPHtae1thM1S6DF+rwYT xU8umaQZ/DEBfMEU7rsPxunUkMwCVpfDmjBIvHw3mz5u8Rseuy2r7Ys+duEdQSs+ 0uDtLuciReMQkKD3B925Zn+4J/f+K0RM7LdAvE/jCLkLJCo0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaFEemBkOfUlXofQf7H9Ta5ygTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMzBhNDc3MjUtMjlmNC0z MWZhLTg4YjYtNTFkZTU2MDEwNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElRPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoePISGiRnUTP0JA4CSYLRLkEuGe9dmj5uov2UvQa1G2m3AQnz5Ws3u z3+INevrpV1OScOu7N2G9XuRLLkl3W+4UCdH803auVyjMCnthekP+g21ZfisL43+ zNju6TyVGqjh00r6xTpxcx3z0VexQ8ZScLBLAGxJX5OLceafqj824BisYAaAQIjT HCRIJWMuRqpwQ8VIdgQXDOOGZO/2dhUGzT+z5st1UQi5dkLRblNbN8clEkKMxgfK 8TOO2u0HlltEn8wtMTEws9P8CSkjkJ6fuEnQCrSNpy17AgEDOPHSicqzqmuy3/BD SAqLIQvFXArx/f040+fZDT8DCshbvTE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:23 2024 by rpki-client on console-ams.rpki-client.org