$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa File: aae72d5b-9be8-3703-913c-329e57bf9b39.roa (raw, json) Hash identifier: NxjMUjP6lyLF0Rj+kpzft8XeP+qH4NnCJF38IwvwU+Y= Subject key identifier: BD:52:EC:18:B0:0F:86:EC:32:0C:14:4D:E6:F0:0D:FD:CB:B7:6B:0B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B96174430C5509C4BFB57E00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:74:43:0c:55:09:c4:bf:b5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=a33e13ca-5a5f-48b4-9f06-5c82b72daa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:30:71:01:f0:f2:a3:30:99:0b:a7:45:74: 60:57:74:ac:ee:c2:36:f2:3b:2e:df:b1:6e:ec:f5: ad:d5:e3:e3:a1:90:48:12:17:bb:11:c0:12:b7:12: 2f:2d:33:73:08:09:bf:3c:b2:8e:22:fc:c7:28:a6: d6:f4:b8:a5:7a:e8:95:83:52:0a:a7:85:c5:d6:87: 07:8b:43:1e:8d:19:13:8b:6f:9c:4c:b6:1e:20:6f: 0b:9d:9a:b9:13:68:dc:0e:63:f8:08:77:de:f2:4a: 26:ca:12:43:0e:76:6d:61:1c:82:15:10:f2:d6:80: 58:d8:30:17:8a:e2:07:00:19:9e:df:c4:54:90:2b: cb:8d:aa:a3:62:90:72:e6:04:f5:b7:7d:73:50:ec: 25:45:13:46:ba:97:37:1f:1d:95:98:61:ad:d2:4e: 02:a6:90:9b:73:65:07:3d:19:ac:9d:58:bf:61:be: 90:65:ac:ae:57:54:68:49:ae:0b:6a:e3:06:55:b1: 4a:38:a1:9d:ea:61:e7:e3:5e:21:17:e6:6e:a0:8c: 29:2d:7d:15:4e:06:a1:35:d8:82:83:d8:82:a3:0d: 17:b2:3d:25:40:25:ce:9b:b6:a6:9f:1d:56:76:9e: e3:26:06:a2:f4:eb:e0:42:be:ce:e9:21:70:cd:c7: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:EC:18:B0:0F:86:EC:32:0C:14:4D:E6:F0:0D:FD:CB:B7:6B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e9:9c:29:98:4d:0b:ed:71:b2:fa:79:55:b4:b8:e9:f6:c1: f7:47:25:f4:14:33:c8:cc:15:4e:dd:72:1c:67:d9:ae:38:e4: 00:77:15:3f:d7:5b:8e:49:33:79:a9:dd:41:26:0d:da:9e:39: 41:a1:d9:32:6d:80:15:dd:e9:68:a9:75:4a:4f:8a:20:13:34: 1e:3a:6f:4d:98:74:40:73:4e:bc:f2:5b:77:58:af:94:49:39: 28:1a:8a:c9:64:60:d0:11:84:19:be:d7:91:ad:23:d3:b3:a8: f4:64:b0:ea:aa:a0:21:53:2e:34:e5:96:42:33:77:53:9e:31: 31:a8:bc:c7:3f:0e:db:90:38:70:30:2b:14:76:d8:6d:1d:75: e8:d5:2f:5e:98:88:a6:50:f0:bf:f6:66:e1:20:e5:df:16:e5: 0d:09:c4:26:0f:52:00:08:8a:5d:e6:c9:46:7f:d2:01:dd:a0: 47:68:0e:c6:ec:22:17:4c:31:22:91:0f:cd:1a:a5:38:cb:13: 29:95:31:93:db:bf:0c:b4:16:f9:b8:50:11:83:dd:3c:fa:17: 2f:50:48:62:4b:9b:9a:b8:bb:35:23:5b:f1:39:27:a3:d4:5b: e2:a4:a8:1a:ca:f0:86:73:68:a0:0b:ea:69:76:0b:03:94:a0: 9d:9d:18:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXRDDFUJxL+1fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk YTMzZTEzY2EtNWE1Zi00OGI0LTlmMDYtNWM4MmI3MmRhYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0wcQHw8qMwmQunRXRgV3Ss7sI28jsu37Fu 7PWt1ePjoZBIEhe7EcAStxIvLTNzCAm/PLKOIvzHKKbW9LileuiVg1IKp4XF1ocH i0MejRkTi2+cTLYeIG8LnZq5E2jcDmP4CHfe8komyhJDDnZtYRyCFRDy1oBY2DAX iuIHABme38RUkCvLjaqjYpBy5gT1t31zUOwlRRNGupc3Hx2VmGGt0k4CppCbc2UH PRmsnVi/Yb6QZayuV1RoSa4LauMGVbFKOKGd6mHn414hF+ZuoIwpLX0VTgahNdiC g9iCow0Xsj0lQCXOm7amnx1Wdp7jJgai9OvgQr7O6SFwzcfUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1S7BiwD4bsMgwUTebwDf3Lt2sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWFlNzJkNWItOWJlOC0z NzAzLTkxM2MtMzI5ZTU3YmY5YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTpnCmYTQvtcbL6eVW0uOn2wfdHJfQUM8jMFU7dchxn2a445AB3FT/X W45JM3mp3UEmDdqeOUGh2TJtgBXd6WipdUpPiiATNB46b02YdEBzTrzyW3dYr5RJ OSgaislkYNARhBm+15GtI9OzqPRksOqqoCFTLjTllkIzd1OeMTGovMc/DtuQOHAw KxR22G0ddejVL16YiKZQ8L/2ZuEg5d8W5Q0JxCYPUgAIil3myUZ/0gHdoEdoDsbs IhdMMSKRD80apTjLEymVMZPbvwy0Fvm4UBGD3Tz6Fy9QSGJLm5q4uzUjW/E5J6PU W+KkqBrK8IZzaKAL6ml2CwOUoJ2dGN0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org