$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa File: 71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa (raw, json) Hash identifier: AJV3PHqNlbOmj9rtOMNpcqx6YiRMAKBOA2jjLBJkios= Subject key identifier: E5:4B:A1:EF:8A:AF:42:33:54:98:44:A3:07:21:77:FD:ED:7C:0D:CE Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B961732BD34D50B64BD9EA60 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 161.69.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:73:2b:d3:4d:50:b6:4b:d9:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=73269f75-f936-4b90-a3df-534ade3dcadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:ce:79:1b:d4:1c:97:56:2e:7c:18:20:c4: 9d:4d:3b:11:ac:73:64:c1:cf:fe:53:6d:16:f9:80: b0:36:49:f0:d7:f0:ac:19:62:2c:a8:2f:d8:4d:e8: 76:7b:ab:db:97:4d:c4:57:97:27:81:67:fc:9d:a4: 12:c2:f9:3e:a0:99:0a:c1:be:87:0a:42:01:e6:b2: 63:44:c3:6b:5e:20:55:25:4f:8e:06:42:ec:b9:17: e1:99:f6:82:25:ca:06:84:c5:af:78:ef:04:9b:88: 2d:e3:5f:30:fa:fc:3e:50:41:76:74:59:df:0e:66: cc:78:79:b6:3b:2e:ca:bc:25:53:33:a7:50:56:ef: d1:fd:55:c3:e5:ba:8b:09:d4:29:fa:00:7d:4e:ec: 0f:fe:d4:70:64:01:31:a6:1c:5d:ac:60:7d:7c:b5: 04:85:06:bb:98:99:da:6e:e2:af:36:35:4f:26:31: 43:1e:9e:89:ec:bd:29:7c:56:ac:30:66:ec:ec:31: 6d:32:42:20:dd:48:d0:07:74:f3:94:68:a8:be:7c: ec:9f:65:dc:9b:44:22:63:bd:55:d1:41:2e:ce:33: 30:1b:d2:21:68:d2:26:79:4e:64:b0:e3:d6:59:29: 24:b6:83:52:4b:71:da:19:69:92:d3:3f:da:d6:95: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:A1:EF:8A:AF:42:33:54:98:44:A3:07:21:77:FD:ED:7C:0D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:22:96:6b:58:ef:54:0b:fc:8d:f0:00:04:3e:94:e2:02:d1: c2:73:fe:66:fc:b7:0f:f9:62:bf:38:38:42:73:10:ff:48:90: 7f:b3:03:43:17:48:25:a1:74:48:a3:d2:54:d1:f1:11:4e:7e: 0f:c7:88:d2:4c:71:86:e5:f6:1f:1a:e3:3e:8b:32:9d:9f:f6: b2:16:e1:d5:af:6c:5d:10:71:5f:2e:34:9e:fa:47:fc:f0:2e: 52:31:6a:41:97:5d:22:cb:8f:25:54:64:3b:76:38:57:52:d4: d8:07:b6:1f:d6:28:9f:58:40:22:40:fd:78:c4:4f:98:88:78: 52:ff:51:33:df:ed:37:71:7f:71:0b:b0:da:8d:21:2d:01:89: 3a:89:39:e2:61:42:82:24:91:c7:cc:2c:90:ac:79:64:db:0e: af:a9:60:f8:e5:ba:ed:e5:52:3a:22:36:7d:34:5e:ae:6e:48: 4f:e2:21:42:1e:ce:ec:43:c9:f4:d8:1d:68:f0:87:f0:2e:ed: a4:0c:c1:b5:14:c0:98:eb:ac:cd:d1:74:5e:e2:d4:cf:2f:c5: 4e:7f:f4:14:e9:c9:0c:a5:6a:7f:89:fc:62:f5:ad:63:2b:b8: e7:01:6e:1a:87:96:7f:b3:0d:1e:ff:eb:47:5c:16:6b:34:1b: 44:9b:ff:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXMr001QtkvZ6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NzMyNjlmNzUtZjkzNi00YjkwLWEzZGYtNTM0YWRlM2RjYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonrOeRvUHJdWLnwYIMSdTTsRrHNkwc/+U20W +YCwNknw1/CsGWIsqC/YTeh2e6vbl03EV5cngWf8naQSwvk+oJkKwb6HCkIB5rJj RMNrXiBVJU+OBkLsuRfhmfaCJcoGhMWveO8Em4gt418w+vw+UEF2dFnfDmbMeHm2 Oy7KvCVTM6dQVu/R/VXD5bqLCdQp+gB9TuwP/tRwZAExphxdrGB9fLUEhQa7mJna buKvNjVPJjFDHp6J7L0pfFasMGbs7DFtMkIg3UjQB3TzlGiovnzsn2Xcm0QiY71V 0UEuzjMwG9IhaNImeU5ksOPWWSkktoNSS3HaGWmS0z/a1pWo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVLoe+Kr0IzVJhEowchd/3tfA3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzFkYmVmOTctY2ZlNC0z MmVmLWI4YmEtOTFmN2EzMWUxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAilmtY71QL/I3wAAQ+lOIC0cJz/mb8tw/5Yr84OEJzEP9IkH+zA0MX SCWhdEij0lTR8RFOfg/HiNJMcYbl9h8a4z6LMp2f9rIW4dWvbF0QcV8uNJ76R/zw LlIxakGXXSLLjyVUZDt2OFdS1NgHth/WKJ9YQCJA/XjET5iIeFL/UTPf7Tdxf3EL sNqNIS0BiTqJOeJhQoIkkcfMLJCseWTbDq+pYPjluu3lUjoiNn00Xq5uSE/iIUIe zuxDyfTYHWjwh/Au7aQMwbUUwJjrrM3RdF7i1M8vxU5/9BTpyQylan+J/GL1rWMr uOcBbhqHln+zDR7/60dcFms0G0Sb/3k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org