$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa File: f738af2e-6574-3997-a029-ee3b01e5ca5c.roa (raw, json) Hash identifier: vAACmzr2sM2Imce6iEerDSIHBDQrQGr4GYwx1Uq2HZo= Subject key identifier: 18:ED:A9:2C:55:E2:D2:E0:F8:60:CD:6F:D1:F9:B1:C5:7E:7E:9B:6D Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B9616E48A7301D4C8227F890 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 161.69.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:6e:48:a7:30:1d:4c:82:27:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=596c1e6d-c0da-4e33-ad31-99ff3eeecc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:95:dd:b1:a2:ec:13:19:18:d0:9d:17:2b: a8:8f:17:33:a8:aa:d1:9e:19:a2:75:1c:cf:c8:0a: 23:af:fc:0c:3e:52:87:15:cc:de:6f:14:c8:16:7c: 6c:dc:bb:63:af:9c:81:96:fd:6f:23:97:45:5d:be: 7c:49:ac:0f:48:5e:8d:00:9c:27:80:91:83:89:33: 4e:bf:ce:97:a1:ed:b8:88:8e:47:8d:3a:9f:97:20: b9:f2:8a:37:10:73:9a:71:e9:09:c6:b5:9a:12:bf: aa:e2:b9:20:d9:39:e5:81:34:1d:b0:3d:d2:c0:aa: 67:9e:96:ad:f4:e2:14:1d:52:55:c6:78:4b:30:b8: 66:15:c1:b7:2e:39:b4:8e:02:f9:76:d2:fb:47:5a: b5:ff:0b:36:38:de:b2:f5:12:dd:02:11:b1:56:0a: 6a:51:65:b8:d3:5f:82:34:2d:48:fd:14:54:4b:2b: 7b:98:6a:b2:f8:9b:2c:40:80:57:bc:33:8c:56:fa: 6d:e2:aa:15:6e:25:9f:32:f4:ca:f8:b3:c1:65:5c: ed:17:95:ac:43:e0:cb:c2:9d:9c:a9:e2:4a:91:ed: 2c:37:70:95:c8:de:57:ba:70:af:9b:0e:05:87:a2: 53:b5:ff:b7:14:fe:85:c7:af:d1:6f:88:ab:0a:d2: 43:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:ED:A9:2C:55:E2:D2:E0:F8:60:CD:6F:D1:F9:B1:C5:7E:7E:9B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b0:0c:54:56:fa:5b:27:98:f0:61:28:ce:f2:fe:6b:f1:f0: 88:a7:64:17:b2:56:59:d2:14:5f:ec:85:20:e8:43:48:94:1c: 7d:7b:7c:22:33:ea:7c:0b:3b:32:4a:85:57:ef:05:d2:1d:3e: f8:68:0d:aa:6f:5a:f2:61:f0:8b:77:54:8f:2b:fd:58:78:aa: fc:8b:43:78:57:65:01:c0:35:83:f1:ef:56:b0:3a:9e:a6:a1: a5:fb:e5:0a:f1:12:cf:4a:15:4c:77:4f:15:b7:f5:d7:c7:f1: e6:c3:dd:82:7a:39:72:cb:15:cd:91:f9:59:25:37:9e:cb:e9: 65:68:8a:71:98:d2:c4:15:ac:8b:3b:37:c4:04:ca:02:9b:bc: d0:1d:53:52:cb:9f:01:83:9a:d9:ec:2d:6f:d1:78:82:84:91: 59:03:36:2d:66:04:41:eb:e6:f5:ce:10:c8:a0:e3:2d:d9:75: 86:0f:ad:d0:02:44:ce:1a:67:f9:05:30:b7:91:67:68:59:c9: 25:43:bd:15:46:37:e8:3a:fb:ad:0b:b2:e9:c7:c6:ac:9b:25: 49:07:22:46:ec:f3:4d:af:41:26:d4:cd:83:1f:aa:cf:45:af: f4:e6:6d:73:ca:71:87:4a:8a:c4:b6:c6:a7:a0:aa:fa:4f:06: b8:d9:53:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YW5IpzAdTIIn+JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NTk2YzFlNmQtYzBkYS00ZTMzLWFkMzEtOTlmZjNlZWVjYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQqV3bGi7BMZGNCdFyuojxczqKrRnhmidRzP yAojr/wMPlKHFczebxTIFnxs3Ltjr5yBlv1vI5dFXb58SawPSF6NAJwngJGDiTNO v86Xoe24iI5HjTqflyC58oo3EHOacekJxrWaEr+q4rkg2TnlgTQdsD3SwKpnnpat 9OIUHVJVxnhLMLhmFcG3Ljm0jgL5dtL7R1q1/ws2ON6y9RLdAhGxVgpqUWW401+C NC1I/RRUSyt7mGqy+JssQIBXvDOMVvpt4qoVbiWfMvTK+LPBZVztF5WsQ+DLwp2c qeJKke0sN3CVyN5XunCvmw4Fh6JTtf+3FP6Fx6/Rb4irCtJDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjtqSxV4tLg+GDNb9H5scV+fpttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjczOGFmMmUtNjU3NC0z OTk3LWEwMjktZWUzYjAxZTVjYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWwDFRW+lsnmPBhKM7y/mvx8IinZBeyVlnSFF/shSDoQ0iUHH17fCIz 6nwLOzJKhVfvBdIdPvhoDapvWvJh8It3VI8r/Vh4qvyLQ3hXZQHANYPx71awOp6m oaX75QrxEs9KFUx3TxW39dfH8ebD3YJ6OXLLFc2R+VklN57L6WVoinGY0sQVrIs7 N8QEygKbvNAdU1LLnwGDmtnsLW/ReIKEkVkDNi1mBEHr5vXOEMig4y3ZdYYPrdAC RM4aZ/kFMLeRZ2hZySVDvRVGN+g6+60LsunHxqybJUkHIkbs802vQSbUzYMfqs9F r/TmbXPKcYdKisS2xqegqvpPBrjZU9M= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org