$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa File: 401073da-de78-3d31-84e4-3349facc1d23.roa (raw, json) Hash identifier: Q8Aos/UCFaLZeTCExyW0pc9wg0I891RXDIdaqv8tLaE= Subject key identifier: 96:B2:D5:87:FD:72:C3:BA:1B:37:35:9D:A1:57:F0:F5:43:5F:CE:1A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B9616D2AF65F084640F8AB90 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:6d:2a:f6:5f:08:46:40:f8:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=f9bceb81-3120-447a-8c5b-5b9ba089ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:98:a6:8b:10:8c:80:78:1d:2e:d8:c9:90: e3:66:72:e3:14:5d:73:12:70:53:71:4e:ea:b5:2f: 06:a9:bb:19:39:fd:cc:cd:02:d7:7d:21:a1:e5:a6: 8d:8d:c3:2b:75:4d:2b:da:df:94:3b:4c:ba:9f:3d: 9f:b2:10:ee:00:ee:cf:19:c9:63:60:4c:12:be:7d: ef:2e:e8:4d:34:f8:b5:16:14:e4:63:3e:14:77:58: e9:21:7d:ca:e1:53:30:f0:3b:34:cd:4a:f8:70:48: e3:a4:f7:1e:f9:84:26:1e:d4:fc:a3:f4:e0:2f:22: a7:bb:ca:27:c6:e5:9e:da:ae:6d:a9:c1:68:63:ff: 8f:f1:3b:13:53:d9:18:da:50:72:35:84:19:c7:74: 3a:c6:63:60:81:34:e2:36:5a:2e:22:34:7b:13:0c: a2:15:bd:e5:9e:cc:a9:1f:95:e8:b8:1b:8a:5d:01: bc:55:b9:35:4d:15:72:67:d6:f8:5d:4a:14:59:ef: 0b:1a:35:24:82:d3:85:28:db:d0:f6:08:a2:03:83: 54:2e:c3:15:5a:80:67:0a:16:72:33:fe:00:2f:6a: f1:13:a1:17:7b:04:ad:d8:32:59:ee:31:1f:d9:b6: c0:29:12:db:05:26:41:72:0c:7a:cb:37:5d:2e:ed: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:D5:87:FD:72:C3:BA:1B:37:35:9D:A1:57:F0:F5:43:5F:CE:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ff:15:5c:71:3e:88:fa:09:69:55:02:27:2c:fd:ff:71:45: 57:50:26:8a:50:d6:b2:3e:06:b9:f9:8e:71:e9:6e:df:cb:19: 78:4e:9d:9c:7c:de:36:84:7c:6d:bc:31:15:d9:0f:e4:af:ab: 70:89:99:89:4a:8d:52:af:63:a7:2d:6b:35:fc:9a:64:14:7f: 93:c1:a6:bd:a2:87:66:f8:69:2d:d2:57:68:4e:2b:0d:7c:6e: b0:6a:89:b3:36:25:82:76:90:42:8b:d6:6a:9c:cd:b3:db:0e: 8c:25:e3:46:65:55:c3:54:0e:7f:78:b4:79:24:e8:61:ce:3c: 06:af:b3:d6:6e:63:db:99:76:56:69:5f:4a:39:21:24:39:72: cd:48:88:76:1e:df:35:b7:9c:8f:88:6e:c5:09:76:ed:88:c7: 24:91:65:ed:df:da:02:25:98:5c:a3:b9:e4:37:d4:19:b8:0d: af:49:04:01:35:1e:b7:f7:6b:24:2d:b4:de:46:f0:7b:c2:be: d0:99:d0:07:24:e4:d1:3a:c9:88:e8:23:10:49:ea:b3:63:72: 4a:eb:ec:af:a3:08:98:47:cc:ff:ff:48:5a:c1:d7:a5:13:ab: d9:37:43:4f:50:03:93:8b:d7:5c:70:56:02:79:ab:0e:cb:f6: 0a:33:81:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YW0q9l8IRkD4q5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjliY2ViODEtMzEyMC00NDdhLThjNWItNWI5YmEwODliYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IiYposQjIB4HS7YyZDjZnLjFF1zEnBTcU7q tS8GqbsZOf3MzQLXfSGh5aaNjcMrdU0r2t+UO0y6nz2fshDuAO7PGcljYEwSvn3v LuhNNPi1FhTkYz4Ud1jpIX3K4VMw8Ds0zUr4cEjjpPce+YQmHtT8o/TgLyKnu8on xuWe2q5tqcFoY/+P8TsTU9kY2lByNYQZx3Q6xmNggTTiNlouIjR7EwyiFb3lnsyp H5XouBuKXQG8Vbk1TRVyZ9b4XUoUWe8LGjUkgtOFKNvQ9giiA4NULsMVWoBnChZy M/4AL2rxE6EXewSt2DJZ7jEf2bbAKRLbBSZBcgx6yzddLu1d0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJay1Yf9csO6Gzc1naFX8PVDX84aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNDAxMDczZGEtZGU3OC0z ZDMxLTg0ZTQtMzM0OWZhY2MxZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH/FVxxPoj6CWlVAics/f9xRVdQJopQ1rI+Brn5jnHpbt/LGXhOnZx8 3jaEfG28MRXZD+Svq3CJmYlKjVKvY6ctazX8mmQUf5PBpr2ih2b4aS3SV2hOKw18 brBqibM2JYJ2kEKL1mqczbPbDowl40ZlVcNUDn94tHkk6GHOPAavs9ZuY9uZdlZp X0o5ISQ5cs1IiHYe3zW3nI+IbsUJdu2IxySRZe3f2gIlmFyjueQ31Bm4Da9JBAE1 Hrf3ayQttN5G8HvCvtCZ0Ack5NE6yYjoIxBJ6rNjckrr7K+jCJhHzP//SFrB16UT q9k3Q09QA5OL11xwVgJ5qw7L9gozgek= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org