$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa File: 614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa (raw, json) Hash identifier: hIKA1xIXDXKzAqjJja7AMdFKKQn/Dg3Pi/lCSgw0j0o= Subject key identifier: 45:1D:66:28:75:5C:8F:48:38:8A:12:86:FD:3B:15:A7:EB:8C:C9:29 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B96172AA442F64986BD725C0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 14618 IP address blocks: 161.69.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:72:aa:44:2f:64:98:6b:d7:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=fd0c8034-f9fa-4313-b528-7a6036d54bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:20:12:0d:a8:44:de:d6:68:99:17:b4:d5: 7c:5a:05:12:99:e4:0e:7f:da:c9:18:30:0e:8d:77: 5c:95:72:66:85:f5:f6:15:b4:a9:db:68:eb:16:55: 15:72:6c:dd:b8:0e:48:5e:77:4c:97:16:1f:2a:ce: d0:a2:91:b4:32:22:aa:9f:a3:88:e7:28:76:f2:b5: 04:1b:7e:85:49:d2:b6:74:00:2d:31:22:a8:45:ff: 6c:47:b7:af:84:00:97:3d:97:53:b1:2a:1c:c4:eb: ee:d6:18:ef:1b:fa:28:ea:c3:5e:22:bb:20:db:b0: 55:98:6f:5e:45:c9:5c:9a:4d:6f:3e:2d:8a:21:f3: 20:23:9a:3c:fc:c3:9b:4f:5d:30:27:06:b3:21:1d: 19:f2:0f:cf:82:5c:f5:fb:19:7e:40:63:66:23:fc: a5:e1:e7:36:5b:99:7d:e1:55:41:ef:f0:d2:31:06: 7c:2f:cd:89:5f:63:c6:0f:73:4f:53:e2:2b:71:af: 5c:d3:88:21:49:b3:b4:f3:b4:57:2e:6d:81:11:44: 33:99:01:b8:36:03:8a:08:91:00:91:06:ed:95:de: 78:8e:f5:2e:a6:af:da:fc:e4:cb:55:47:38:fe:62: 0a:7a:e4:1b:41:93:1d:ca:d8:a7:b6:93:fc:c5:67: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:66:28:75:5C:8F:48:38:8A:12:86:FD:3B:15:A7:EB:8C:C9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:66:48:db:46:d4:66:6a:60:1b:90:65:e3:ac:95:be:d0:02: ba:88:b5:9d:d8:50:48:9c:a5:f1:f6:b7:0a:4e:0d:b7:78:4b: 89:23:7d:f2:ce:98:73:b1:75:1a:97:05:0b:b2:82:55:c0:e6: a9:e8:bd:83:16:75:31:d2:30:44:37:96:06:70:e7:ef:84:fe: c9:6b:89:68:6d:40:73:84:ab:83:44:b4:1b:7a:57:69:9b:5c: 5f:20:d5:58:b2:46:b1:4b:18:de:c9:33:84:f3:be:e5:42:46: 07:84:1a:fc:be:3c:8a:4f:ed:17:02:a7:19:3f:8a:2a:84:81: af:ee:15:a7:a4:69:13:09:46:7c:33:04:32:f7:4f:3b:5a:14: f5:13:1b:9d:09:92:76:21:35:d1:32:ed:06:2f:de:75:b2:e5: 37:fa:0d:8b:8e:f0:4d:2e:11:e1:fd:d5:c1:c7:18:e7:95:26: 79:59:35:3c:3f:bd:53:d2:44:89:cb:2b:13:56:2b:12:a0:25: e5:c0:4b:83:22:27:8a:97:b2:56:7d:24:67:46:e7:e4:9a:d2: d3:52:04:14:85:10:f9:19:5c:dd:6c:02:bb:49:ef:df:be:08: dc:05:9f:f6:53:e9:3f:27:9e:ec:f3:21:e6:02:ea:db:4e:30: 28:b3:3a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXKqRC9kmGvXJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmQwYzgwMzQtZjlmYS00MzEzLWI1MjgtN2E2MDM2ZDU0YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4scgEg2oRN7WaJkXtNV8WgUSmeQOf9rJGDAO jXdclXJmhfX2FbSp22jrFlUVcmzduA5IXndMlxYfKs7QopG0MiKqn6OI5yh28rUE G36FSdK2dAAtMSKoRf9sR7evhACXPZdTsSocxOvu1hjvG/oo6sNeIrsg27BVmG9e Rclcmk1vPi2KIfMgI5o8/MObT10wJwazIR0Z8g/Pglz1+xl+QGNmI/yl4ec2W5l9 4VVB7/DSMQZ8L82JX2PGD3NPU+Irca9c04ghSbO087RXLm2BEUQzmQG4NgOKCJEA kQbtld54jvUupq/a/OTLVUc4/mIKeuQbQZMdytintpP8xWcBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUdZih1XI9IOIoShv07FafrjMkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjE0MDc3ZmEtOTA0Mi0z MmE3LWE0ZjktMTQyYWM1YmJlOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBmSNtG1GZqYBuQZeOslb7QArqItZ3YUEicpfH2twpODbd4S4kjffLO mHOxdRqXBQuyglXA5qnovYMWdTHSMEQ3lgZw5++E/slriWhtQHOEq4NEtBt6V2mb XF8g1ViyRrFLGN7JM4TzvuVCRgeEGvy+PIpP7RcCpxk/iiqEga/uFaekaRMJRnwz BDL3TztaFPUTG50JknYhNdEy7QYv3nWy5Tf6DYuO8E0uEeH91cHHGOeVJnlZNTw/ vVPSRInLKxNWKxKgJeXAS4MiJ4qXslZ9JGdG5+Sa0tNSBBSFEPkZXN1sArtJ79++ CNwFn/ZT6T8nnuzzIeYC6ttOMCizOng= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org