$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa File: ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa (raw, json) Hash identifier: STw80okq0m5tPB9VvnrKceT7+/JW/xyunC9/nhBSOQ0= Subject key identifier: B7:39:D1:76:CE:92:DF:FF:E6:9C:7C:46:98:63:5C:D1:FB:BF:07:96 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858451B7AF008046E0A0B6B83C800 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa Signing time: Tue 05 Mar 2024 14:00:31 +0000 ROA not before: Tue 05 Mar 2024 14:00:31 +0000 ROA not after: Mon 03 Jun 2024 13:00:31 +0000 asID: 16509 IP address blocks: 161.69.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:7a:f0:08:04:6e:0a:0b:6b:83:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 5 14:00:31 2024 GMT Not After : Jun 3 13:00:31 2024 GMT Subject: CN=53e820ee-754c-4296-be19-314b2f947dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:dc:a4:a6:c0:e2:68:d2:46:a1:56:30:2b: 3f:c7:c2:61:32:11:1a:da:07:ea:06:67:b4:4b:9c: 96:b0:e8:74:18:d5:b4:93:8d:07:27:db:b5:40:c8: 91:79:09:99:8a:90:08:b9:49:51:8c:44:6f:f9:60: 73:48:fe:e9:bb:a2:d5:65:85:2e:f2:55:d1:a4:6f: a8:b2:51:9d:8c:aa:37:0d:c9:2a:08:62:51:57:c1: 01:5a:a1:04:61:e2:f9:43:98:4f:a8:69:eb:bc:5c: 60:07:0d:7e:71:19:3d:58:06:1f:dd:4f:60:0b:20: 04:ef:e5:2a:0d:64:a0:73:1c:87:7f:e5:9a:f3:da: e0:db:49:89:c5:d0:73:30:72:f3:62:a5:fc:25:36: 64:b3:8b:7e:66:d6:5a:11:a1:74:40:fc:13:c2:33: ef:91:1d:d6:2d:f3:50:54:3a:2b:89:dc:5f:d7:77: 6f:e9:ff:44:b3:51:90:ed:cc:aa:3f:bf:c7:3e:56: 43:23:8c:5a:9b:eb:1d:40:fd:03:b1:04:32:6c:a7: 78:6c:7a:62:22:32:e0:0e:9f:5d:4f:dd:ce:dd:c5: fe:34:c3:13:d3:95:f7:c0:21:aa:3e:8e:a8:ac:65: 32:bf:5d:d3:e9:2c:36:e2:e2:65:0c:73:4f:57:a4: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:39:D1:76:CE:92:DF:FF:E6:9C:7C:46:98:63:5C:D1:FB:BF:07:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b9:ec:c5:cb:6e:62:e1:2c:ad:b0:38:94:4d:91:b4:07:f7: 3b:ba:c3:ce:61:0b:2f:ee:fa:66:31:71:45:20:83:08:9a:a8: 37:47:22:aa:99:83:72:3c:18:a4:1d:23:45:fb:17:d2:27:31: c3:5f:79:dd:77:03:bd:c4:fe:12:2d:2d:c5:c8:20:10:69:60: 43:18:31:2e:51:1b:83:05:86:5e:50:7d:49:0d:f3:d1:28:ec: 70:b8:d3:d2:68:dd:44:62:8d:6e:ba:a6:5a:54:33:d8:45:83: ce:f0:26:7f:bd:fc:3f:dd:40:14:cf:e5:34:c1:4d:f9:6f:78: e5:4a:48:7d:7d:f9:2a:00:24:91:c1:39:d6:50:af:36:89:58: dc:77:58:5b:c4:97:1a:69:b9:c1:8d:2f:e8:ba:43:46:4d:8b: 68:a8:d1:eb:d7:f7:8b:ca:14:7b:49:4a:ed:e5:4d:f7:97:db: b8:34:5c:5f:1f:95:08:b9:81:69:f5:32:94:82:42:3c:d2:d4: a8:c5:66:98:7a:4b:09:2a:d0:bf:ff:27:80:15:b1:d9:7f:1e: 06:64:a4:42:fb:f7:24:74:6a:46:6b:5f:ba:f3:00:04:c0:9e: af:6c:5e:9f:a5:a0:e5:93:0a:98:fd:35:19:56:1b:92:05:ea: 8f:2e:06:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbevAIBG4KC2uDyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk NTNlODIwZWUtNzU0Yy00Mjk2LWJlMTktMzE0YjJmOTQ3ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3rcpKbA4mjSRqFWMCs/x8JhMhEa2gfqBme0 S5yWsOh0GNW0k40HJ9u1QMiReQmZipAIuUlRjERv+WBzSP7pu6LVZYUu8lXRpG+o slGdjKo3DckqCGJRV8EBWqEEYeL5Q5hPqGnrvFxgBw1+cRk9WAYf3U9gCyAE7+Uq DWSgcxyHf+Wa89rg20mJxdBzMHLzYqX8JTZks4t+ZtZaEaF0QPwTwjPvkR3WLfNQ VDoridxf13dv6f9Es1GQ7cyqP7/HPlZDI4xam+sdQP0DsQQybKd4bHpiIjLgDp9d T93O3cX+NMMT05X3wCGqPo6orGUyv13T6Sw24uJlDHNPV6TB7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc50XbOkt//5px8RphjXNH7vweWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWU2ODg1MGQtOWExZi0z NDZkLWE0YWUtNGIzZWFjYTk3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK57MXLbmLhLK2wOJRNkbQH9zu6w85hCy/u+mYxcUUggwiaqDdHIqqZ g3I8GKQdI0X7F9InMcNfed13A73E/hItLcXIIBBpYEMYMS5RG4MFhl5QfUkN89Eo 7HC409Jo3URijW66plpUM9hFg87wJn+9/D/dQBTP5TTBTflveOVKSH19+SoAJJHB OdZQrzaJWNx3WFvElxppucGNL+i6Q0ZNi2io0evX94vKFHtJSu3lTfeX27g0XF8f lQi5gWn1MpSCQjzS1KjFZph6Swkq0L//J4AVsdl/HgZkpEL79yR0akZrX7rzAATA nq9sXp+loOWTCpj9NRlWG5IF6o8uBk4= -----END CERTIFICATE-----Generated at Sat Apr 27 21:43:02 2024 by rpki-client on console-ams.rpki-client.org