$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa File: 6abb2881-e10f-32ba-af2c-d3463416a224.roa (raw, json) Hash identifier: Q6kBBw7PsJtg6mWOWip8pGZi5G3nKX8+Sbp1T0pJf4M= Subject key identifier: 3E:EC:D5:FC:D0:35:E5:94:35:D1:E6:BD:61:28:0A:BB:6B:13:AB:17 Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Certificate serial: 010D0C9F43285847E169E26C36380099AB709B24 Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa Signing time: Thu 14 Nov 2024 21:10:10 +0000 ROA not before: Thu 14 Nov 2024 21:10:10 +0000 ROA not after: Wed 12 Feb 2025 21:10:10 +0000 asID: 399970 IP address blocks: 149.112.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:69:e2:6c:36:38:00:99:ab:70:9b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Validity Not Before: Nov 14 21:10:10 2024 GMT Not After : Feb 12 21:10:10 2025 GMT Subject: CN=f2556160-eeff-4b21-b3a0-ad54909fbc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:02:e9:cb:d1:4f:71:e8:48:b7:32:f4:3b: 99:d1:1d:a8:86:39:e9:59:0b:56:64:9d:c9:b6:82: 8d:9a:ce:d9:87:14:e2:df:d7:d7:38:42:3e:4f:43: 45:61:1e:7c:9b:5d:e2:86:78:65:97:f8:af:5b:fa: 37:50:f4:20:8f:48:d0:71:91:5e:43:b0:ec:a0:7a: e8:b6:e3:0d:c2:91:ea:a1:64:f0:2e:c8:25:6a:4a: c5:9a:7c:b1:c3:f8:05:36:a1:cb:08:71:46:5f:36: 01:3a:6d:e9:ab:82:91:0a:a3:07:0c:cf:5b:c7:8f: 68:64:40:30:d9:fc:f3:79:b3:44:48:be:53:34:33: 79:c0:63:15:01:6f:29:cf:31:b4:4c:0b:55:b9:e1: 4f:b0:02:51:d0:81:cd:cf:85:7f:4c:23:24:52:2c: 36:08:ce:d7:05:67:5f:12:af:71:e8:a5:4b:e6:54: cc:55:36:70:9d:9d:a2:d3:87:bb:1d:5c:c4:a6:19: 55:4a:90:8d:b2:24:25:e5:67:12:1d:75:eb:d0:79: d2:03:3a:31:30:f8:1e:19:af:fc:f0:c0:6a:15:80: ad:ca:ce:67:53:23:65:49:64:9a:88:c2:c8:4b:ff: c5:a2:2a:2a:b8:a1:b3:70:0f:65:44:ed:70:b2:d7: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EC:D5:FC:D0:35:E5:94:35:D1:E6:BD:61:28:0A:BB:6B:13:AB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6abb2881-e10f-32ba-af2c-d3463416a224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl X509v3 Authority Key Identifier: keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer sbgp-ipAddrBlock: critical IPv4: 149.112.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f8:c8:12:f0:75:48:64:a2:7b:26:c2:44:e3:14:39:c3:92: 11:06:7d:74:e6:70:a2:15:f7:a6:f7:5c:3c:80:54:cf:78:91: 16:6c:f4:26:7c:27:b6:96:42:13:bf:22:0b:f5:11:96:54:30: 32:3d:7d:a2:a5:93:45:48:76:ed:8d:de:15:32:67:7d:17:6e: 54:5d:45:b9:c8:cc:65:e8:68:12:4c:b8:4a:55:ee:c6:f2:32: 9d:4d:ae:a5:c6:0c:89:ea:a9:18:34:04:46:c0:48:ad:12:70: 54:a7:a8:33:32:75:67:94:84:0e:96:ef:91:71:2c:e4:1c:45: fb:2f:75:42:ff:64:e6:c5:0d:7c:e4:b7:c2:e4:c4:3c:07:0c: 95:7b:6e:00:c7:be:96:b5:fe:c9:7b:d7:d2:cf:fb:76:92:d9: f6:bd:6d:01:22:5b:37:7d:db:a6:2c:43:a4:6f:c4:0f:d0:19: cb:4c:11:81:ff:e5:93:76:ed:3d:ea:bb:16:03:3a:cc:0a:62: c3:58:e8:4c:ee:66:bd:70:e7:eb:f9:df:9b:5b:ca:29:98:e0: 1f:11:da:40:ad:e2:60:1a:f1:9e:6a:e9:3f:34:3c:4a:56:7f: 91:78:83:c4:f3:8a:52:94:95:30:ba:26:bb:f6:a2:b5:a1:ce: 4e:b6:a4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfhaeJsNjgAmatwmyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3 M2JjMB4XDTI0MTExNDIxMTAxMFoXDTI1MDIxMjIxMTAxMFowLzEtMCsGA1UEAxMk ZjI1NTYxNjAtZWVmZi00YjIxLWIzYTAtYWQ1NDkwOWZiYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8sC6cvRT3HoSLcy9DuZ0R2ohjnpWQtWZJ3J toKNms7ZhxTi39fXOEI+T0NFYR58m13ihnhll/ivW/o3UPQgj0jQcZFeQ7DsoHro tuMNwpHqoWTwLsglakrFmnyxw/gFNqHLCHFGXzYBOm3pq4KRCqMHDM9bx49oZEAw 2fzzebNESL5TNDN5wGMVAW8pzzG0TAtVueFPsAJR0IHNz4V/TCMkUiw2CM7XBWdf Eq9x6KVL5lTMVTZwnZ2i04e7HVzEphlVSpCNsiQl5WcSHXXr0HnSAzoxMPgeGa/8 8MBqFYCtys5nUyNlSWSaiMLIS//FoioquKGzcA9lRO1wstdSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7s1fzQNeWUNdHmvWEoCrtrE6sXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNmFiYjI4ODEtZTEwZi0z MmJhLWFmMmMtZDM0NjM0MTZhMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl ZmYyMDczYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX4yBLwdUhkonsmwkTjFDnDkhEGfXTmcKIV96b3XDyAVM94kRZs9CZ8 J7aWQhO/Igv1EZZUMDI9faKlk0VIdu2N3hUyZ30XblRdRbnIzGXoaBJMuEpV7sby Mp1NrqXGDInqqRg0BEbASK0ScFSnqDMydWeUhA6W75FxLOQcRfsvdUL/ZObFDXzk t8LkxDwHDJV7bgDHvpa1/sl719LP+3aS2fa9bQEiWzd926YsQ6RvxA/QGctMEYH/ 5ZN27T3quxYDOswKYsNY6EzuZr1w5+v535tbyimY4B8R2kCt4mAa8Z5q6T80PEpW f5F4g8TzilKUlTC6Jrv2orWhzk62pIQ= -----END CERTIFICATE-----Generated at Sun Nov 24 15:26:23 2024 by rpki-client on console-fra.rpki-client.org