$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa File: 0da288e2-8c4b-3f48-8630-d0e217b213f8.roa (raw, json) Hash identifier: Oqpmq+pam+MPGI+8O5G7j22pbWAsluxWpNW/69lWfy0= Subject key identifier: B3:CC:DE:7A:82:5C:1B:01:15:22:48:13:EB:FD:76:9D:45:7A:99:7B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B96172FB0EA66F18CC13AE00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:72:fb:0e:a6:6f:18:cc:13:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=a2876bd3-d233-4b8c-9eed-7a8d8e86b562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:8f:49:cb:3b:b8:95:37:bc:70:4e:fa:f2: 1b:37:d7:21:2a:66:83:cc:bc:9f:30:58:c1:db:7b: d3:6f:d4:f6:ea:fe:7e:09:92:b2:30:74:26:93:f9: d7:be:c8:02:08:0f:fe:b2:f5:e6:61:28:9b:34:d3: 42:ea:92:44:21:cd:64:ea:ce:bb:b3:2d:67:87:85: f4:5a:e2:af:64:5d:81:da:62:fd:b4:dd:da:33:93: fa:27:6f:18:34:7d:8b:e0:81:83:10:69:d5:65:88: 11:b9:f8:84:93:12:a4:43:a8:f6:4f:2c:c3:d8:3c: ee:fd:9a:4e:8e:a0:a6:68:1c:5a:18:d8:62:ce:c3: fc:97:bf:3b:d4:4b:c0:1d:11:d4:3f:85:7a:4f:63: 21:4d:d9:b8:d0:79:18:f7:8c:fc:97:ab:8f:66:b0: 07:7c:56:88:83:f3:e6:93:36:3e:55:05:38:ce:f3: 08:85:76:44:25:d3:b1:54:d7:0d:21:4f:dd:c0:5c: df:1e:27:12:9c:3e:61:f3:73:f4:53:3f:63:c3:11: 3e:d7:00:5d:ee:70:39:4a:3d:1f:73:8e:95:17:7a: 77:bb:68:33:82:ca:37:f7:dc:fb:72:57:fc:2d:b1: e8:24:7d:6c:82:bc:96:e1:ce:65:74:4d:a6:65:88: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:DE:7A:82:5C:1B:01:15:22:48:13:EB:FD:76:9D:45:7A:99:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:02:e2:6a:5c:fd:50:45:68:a5:f2:bd:c9:be:99:b6:07:19: 39:fd:66:72:5a:3d:d0:56:f9:d7:bb:ee:0d:79:71:f1:a8:3e: f4:bf:78:11:0e:c8:fe:4c:f0:b6:ca:42:a5:ad:ad:1a:55:57: a5:d3:50:05:ca:89:65:49:9b:d2:7c:95:3e:b6:32:80:f2:06: f0:a9:1f:43:c4:3a:a9:28:94:b2:bf:20:5a:96:83:5c:51:51: 0b:b0:cc:6e:03:a0:39:dc:de:c5:dd:e1:20:61:cd:2d:7e:cc: dc:46:bc:99:2c:d3:39:04:e6:72:42:9c:a9:d0:19:f5:a4:cd: bf:a5:73:fa:bb:24:14:8a:43:6a:86:6b:c7:9c:ca:6d:5a:eb: c0:4e:9f:2c:1f:df:7d:0d:a7:f4:83:d4:f8:30:fc:2d:b6:28: 40:d7:65:b8:ff:94:85:7e:ce:0f:06:b3:a3:48:2c:03:64:c2: f1:09:6a:9e:d5:4a:28:de:19:52:89:a3:c3:3c:20:e2:18:0f: 5c:01:3a:c2:0c:95:9c:3e:9b:7b:2d:e7:d4:66:08:ec:7e:39: b2:cf:e1:ab:83:d9:9d:24:d7:84:a0:b2:02:37:19:b7:35:cd: c9:26:7e:c2:a5:5b:da:4d:cf:1e:9f:84:42:f9:01:2e:88:7a: 64:cd:60:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXL7DqZvGMwTrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk YTI4NzZiZDMtZDIzMy00YjhjLTllZWQtN2E4ZDhlODZiNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OqPScs7uJU3vHBO+vIbN9chKmaDzLyfMFjB 23vTb9T26v5+CZKyMHQmk/nXvsgCCA/+svXmYSibNNNC6pJEIc1k6s67sy1nh4X0 WuKvZF2B2mL9tN3aM5P6J28YNH2L4IGDEGnVZYgRufiEkxKkQ6j2TyzD2Dzu/ZpO jqCmaBxaGNhizsP8l7871EvAHRHUP4V6T2MhTdm40HkY94z8l6uPZrAHfFaIg/Pm kzY+VQU4zvMIhXZEJdOxVNcNIU/dwFzfHicSnD5h83P0Uz9jwxE+1wBd7nA5Sj0f c46VF3p3u2gzgso399z7clf8LbHoJH1sgryW4c5ldE2mZYgmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPM3nqCXBsBFSJIE+v9dp1Fepl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGRhMjg4ZTItOGM0Yi0z ZjQ4LTg2MzAtZDBlMjE3YjIxM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcC4mpc/VBFaKXyvcm+mbYHGTn9ZnJaPdBW+de77g15cfGoPvS/eBEO yP5M8LbKQqWtrRpVV6XTUAXKiWVJm9J8lT62MoDyBvCpH0PEOqkolLK/IFqWg1xR UQuwzG4DoDnc3sXd4SBhzS1+zNxGvJks0zkE5nJCnKnQGfWkzb+lc/q7JBSKQ2qG a8ecym1a68BOnywf330Np/SD1Pgw/C22KEDXZbj/lIV+zg8Gs6NILANkwvEJap7V SijeGVKJo8M8IOIYD1wBOsIMlZw+m3st59RmCOx+ObLP4auD2Z0k14SgsgI3Gbc1 zckmfsKlW9pNzx6fhEL5AS6IemTNYIk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org