$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa File: 5af02877-cfb6-3e11-ab01-56751afb3817.roa (raw, json) Hash identifier: QY7pnwxn624qhf2toyKdOWX6zJ182gzH75eDtp0o+1Y= Subject key identifier: D6:57:1C:16:2D:1D:75:9B:D2:68:CD:E0:AB:7B:14:BB:EE:E6:16:21 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B9616EC21A66013C082CB940 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 161.69.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:6e:c2:1a:66:01:3c:08:2c:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=cdb60556-89ce-4960-b9b8-4ded536c7b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:e3:4c:aa:ea:c5:0a:0f:0f:3b:57:5b:74: 91:21:1c:31:b8:be:29:ae:80:5c:2a:56:20:ef:1f: aa:23:35:f8:ed:f2:49:d4:20:99:3a:89:22:fc:d9: 1f:8d:eb:27:02:fd:06:32:11:ed:d9:3f:55:34:1d: 85:3b:3d:59:2f:5a:e4:f0:3e:e0:e2:b2:4b:32:c5: 02:49:36:93:cd:80:67:38:a9:5d:68:2f:0b:e8:21: e6:7e:ab:65:89:db:f2:99:ed:0a:72:6d:80:40:56: 8e:23:6f:f7:03:d3:39:f5:a1:a2:d1:2c:05:15:4c: fb:35:8d:6f:48:5f:58:0e:c0:c9:60:54:ea:33:b0: 39:ee:ed:bb:77:7e:29:00:8a:6e:5a:c8:f9:80:d8: b5:bb:0d:91:f4:9b:eb:ad:b4:b9:53:2d:ae:4d:48: 29:11:a6:ca:d3:e8:af:06:2d:f6:f1:25:42:00:64: c5:91:3a:6f:51:38:07:d0:be:e7:2d:c0:d1:51:6d: ea:26:67:32:62:a7:cc:5c:94:44:fc:7a:58:8b:14: eb:0b:cb:6e:d1:f4:9e:d5:ad:93:f2:29:9a:a5:1e: b1:d5:38:4f:8d:a2:8e:9b:7d:7c:98:92:7b:3d:9e: 56:a5:d6:b4:38:fa:8e:83:dd:14:a0:e5:22:c3:ae: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:1C:16:2D:1D:75:9B:D2:68:CD:E0:AB:7B:14:BB:EE:E6:16:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:77:75:3f:6e:18:36:f6:97:8a:fe:60:f6:50:7f:5a:26:48: 4f:2c:9b:d9:da:b6:07:51:6c:18:41:e3:2e:b9:7b:0f:f8:92: f6:22:a7:18:63:1a:c5:7a:88:92:c5:5a:a0:89:2d:50:6a:57: 61:79:ab:29:ec:94:ca:98:d5:34:48:b3:e9:8e:82:36:ed:79: 39:01:c2:71:3c:4b:09:c0:d3:28:0d:0d:92:8f:d3:8f:f4:28: 87:13:98:02:5e:8e:ed:f6:48:7c:46:e9:a4:b6:52:84:1b:29: 91:98:ec:6b:32:2f:38:f5:2b:6d:c7:b3:a3:da:97:f1:d2:d5: 8f:a4:76:28:a3:91:fa:33:5f:f5:dd:ce:ea:52:54:f9:b7:e5: 81:cf:ec:e0:9b:ac:e2:e6:5c:fe:68:7d:5e:0f:eb:02:63:e3: 9c:b8:ca:5a:05:58:dc:8f:80:dd:20:ac:b6:a3:40:51:4c:22: b5:db:80:69:33:2b:e2:d6:2a:9c:30:25:c2:83:f2:c1:4c:68: 89:12:36:2f:08:17:95:93:72:4a:e9:9c:7a:ba:fe:be:3e:b0: 26:19:38:9b:79:f5:26:a1:b6:6e:07:56:c0:54:b0:fb:c2:7c: b0:32:ea:3b:fa:b4:55:ec:b4:92:b0:07:c5:45:cb:98:fb:d4: a6:76:48:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YW7CGmYBPAgsuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2RiNjA1NTYtODljZS00OTYwLWI5YjgtNGRlZDUzNmM3YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqfjTKrqxQoPDztXW3SRIRwxuL4proBcKlYg 7x+qIzX47fJJ1CCZOoki/NkfjesnAv0GMhHt2T9VNB2FOz1ZL1rk8D7g4rJLMsUC STaTzYBnOKldaC8L6CHmfqtlidvyme0Kcm2AQFaOI2/3A9M59aGi0SwFFUz7NY1v SF9YDsDJYFTqM7A57u27d34pAIpuWsj5gNi1uw2R9JvrrbS5Uy2uTUgpEabK0+iv Bi328SVCAGTFkTpvUTgH0L7nLcDRUW3qJmcyYqfMXJRE/HpYixTrC8tu0fSe1a2T 8imapR6x1ThPjaKOm318mJJ7PZ5Wpda0OPqOg90UoOUiw64m7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZXHBYtHXWb0mjN4Kt7FLvu5hYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNWFmMDI4NzctY2ZiNi0z ZTExLWFiMDEtNTY3NTFhZmIzODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB3dT9uGDb2l4r+YPZQf1omSE8sm9natgdRbBhB4y65ew/4kvYipxhj GsV6iJLFWqCJLVBqV2F5qynslMqY1TRIs+mOgjbteTkBwnE8SwnA0ygNDZKP04/0 KIcTmAJeju32SHxG6aS2UoQbKZGY7GsyLzj1K23Hs6Pal/HS1Y+kdiijkfozX/Xd zupSVPm35YHP7OCbrOLmXP5ofV4P6wJj45y4yloFWNyPgN0grLajQFFMIrXbgGkz K+LWKpwwJcKD8sFMaIkSNi8IF5WTckrpnHq6/r4+sCYZOJt59Sahtm4HVsBUsPvC fLAy6jv6tFXstJKwB8VFy5j71KZ2SDs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org