$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa File: 4e648413-26b2-3336-a1ab-8879a3f0b013.roa (raw, json) Hash identifier: d/pgRaKmzepfgYjMg5c02obXtduJsFt1TFakTHXkaZY= Subject key identifier: 2D:64:F0:1D:CA:B5:05:2D:6C:8A:6D:35:C2:03:5C:F0:A0:03:97:FB Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285845280AF28C3F63D04F6AA45480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa Signing time: Sun 10 Mar 2024 02:00:25 +0000 ROA not before: Sun 10 Mar 2024 02:00:25 +0000 ROA not after: Sat 08 Jun 2024 01:00:25 +0000 asID: 203724 IP address blocks: 161.69.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:28:0a:f2:8c:3f:63:d0:4f:6a:a4:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 10 02:00:25 2024 GMT Not After : Jun 8 01:00:25 2024 GMT Subject: CN=b6638f99-f95a-42a5-9b8b-a6a8fa6dcf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:77:56:dc:d5:50:f9:2b:59:61:73:79:2c: 99:fd:95:fa:90:94:02:e0:55:0e:95:e5:5e:94:ac: 7b:2b:52:57:fc:b0:1c:a6:68:f1:71:03:06:5a:ef: 8c:cf:2b:ae:53:a6:00:7b:04:aa:19:d9:ff:e8:d9: 90:17:fd:40:33:ec:ea:11:55:70:51:10:97:0b:5b: f7:45:08:e2:7e:ab:90:14:25:10:ec:15:18:cb:f9: 57:4c:8f:f6:04:21:91:d3:32:1a:b5:05:4b:7b:b0: c2:62:35:db:72:2a:d4:54:a8:4b:4c:91:2a:c9:af: 64:4d:50:33:71:01:da:cd:0e:1d:39:c3:7f:d2:65: 4a:29:ad:8e:aa:eb:6c:32:5a:2e:f4:3a:eb:3c:ad: 91:9b:ba:d4:5e:56:50:8b:b8:7f:f9:a6:61:d6:e8: a4:37:17:43:bf:54:b6:bd:de:9b:98:7a:ee:c7:f5: bf:2b:85:aa:3a:07:9c:e0:60:7c:d8:eb:da:12:ee: 80:c9:0e:0b:96:45:db:3c:02:81:68:59:69:57:fa: 4f:66:dc:3a:95:86:58:a8:bb:c9:41:0e:d1:d0:4d: 7f:f5:d0:3b:d8:d2:2a:27:0e:c1:2f:f7:a1:9c:c9: e1:e2:1d:a5:ec:be:25:4c:01:0f:84:f8:2f:ce:17: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:F0:1D:CA:B5:05:2D:6C:8A:6D:35:C2:03:5C:F0:A0:03:97:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e6:4e:05:62:b4:e7:13:6e:69:a5:29:18:2f:34:3b:45:6f: b4:84:49:d6:c4:45:42:4e:9e:71:bd:19:24:21:f0:3a:53:7b: 78:05:e6:7f:5e:60:05:13:f5:22:64:54:89:05:4d:1f:d7:4b: e2:3e:56:38:b1:f6:b9:07:05:36:f7:89:21:8a:32:3a:74:44: db:55:e3:c0:b9:52:27:db:ee:03:1e:52:49:b6:11:cc:bd:c8: 15:41:c9:42:df:a0:3b:fa:25:88:72:aa:c4:cd:c1:e9:65:cd: d0:00:16:cb:d2:e3:0c:6d:76:c8:99:b8:49:de:7e:89:a1:39: 84:cd:a9:b5:a7:ee:bf:d6:07:7a:1a:d6:b0:54:db:f4:b1:be: 54:ae:22:78:62:bf:b2:6b:f7:ba:6a:b9:76:42:61:49:e0:62: a3:0b:eb:a1:b8:f5:58:79:fa:d2:15:aa:29:04:32:da:c8:06: fb:b9:26:01:ee:50:f1:d1:0d:36:5d:05:f8:e4:ea:f1:be:ef: a2:8c:9b:9e:a2:e0:90:e2:f7:6a:ee:f1:71:61:bf:7c:cf:fe: 3e:ab:95:54:9e:78:a9:5b:87:6d:9d:a0:aa:b3:5e:ff:cf:1b: bb:e3:3d:4b:91:81:5c:5b:9f:b8:9e:00:9d:85:11:d0:76:26: 07:47:6d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvKMP2PQT2qkVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk YjY2MzhmOTktZjk1YS00MmE1LTliOGItYTZhOGZhNmRjZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoJ3VtzVUPkrWWFzeSyZ/ZX6kJQC4FUOleVe lKx7K1JX/LAcpmjxcQMGWu+MzyuuU6YAewSqGdn/6NmQF/1AM+zqEVVwURCXC1v3 RQjifquQFCUQ7BUYy/lXTI/2BCGR0zIatQVLe7DCYjXbcirUVKhLTJEqya9kTVAz cQHazQ4dOcN/0mVKKa2OqutsMlou9DrrPK2Rm7rUXlZQi7h/+aZh1uikNxdDv1S2 vd6bmHrux/W/K4WqOgec4GB82OvaEu6AyQ4LlkXbPAKBaFlpV/pPZtw6lYZYqLvJ QQ7R0E1/9dA72NIqJw7BL/ehnMnh4h2l7L4lTAEPhPgvzheJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1k8B3KtQUtbIptNcIDXPCgA5f7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGU2NDg0MTMtMjZiMi0z MzM2LWExYWItODg3OWEzZjBiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfmTgVitOcTbmmlKRgvNDtFb7SESdbERUJOnnG9GSQh8DpTe3gF5n9e YAUT9SJkVIkFTR/XS+I+Vjix9rkHBTb3iSGKMjp0RNtV48C5Uifb7gMeUkm2Ecy9 yBVByULfoDv6JYhyqsTNwellzdAAFsvS4wxtdsiZuEnefomhOYTNqbWn7r/WB3oa 1rBU2/SxvlSuInhiv7Jr97pquXZCYUngYqML66G49Vh5+tIVqikEMtrIBvu5JgHu UPHRDTZdBfjk6vG+76KMm56i4JDi92ru8XFhv3zP/j6rlVSeeKlbh22doKqzXv/P G7vjPUuRgVxbn7ieAJ2FEdB2JgdHbSM= -----END CERTIFICATE-----Generated at Sun Apr 28 17:11:06 2024 by rpki-client on console-ams.rpki-client.org