$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa File: fa2860a7-d29d-3110-bb18-5cced3c2733a.roa (raw, json) Hash identifier: w8/H35BTIjMwZu2Pq0D9gNW+Pfv20ioZvDlWEulVpyg= Subject key identifier: 98:4C:8B:CE:98:2A:20:B2:EA:8D:B7:F3:89:BC:05:29:38:F7:05:23 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285847B96173D1BFAD7C37415DD680 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 205272 IP address blocks: 161.69.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:73:d1:bf:ad:7c:37:41:5d:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=83ea448d-0c69-40f3-b241-3a6c690e6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:85:75:21:91:6c:f9:eb:e4:35:1c:97:6f:c7: b8:7b:16:a1:f6:0b:1d:4d:cf:84:77:a3:ee:54:dc: d0:19:a6:75:6d:a2:33:6a:80:f2:57:c2:55:ec:9d: d6:91:30:31:62:e1:46:a9:c5:c0:dd:20:ba:5e:ad: 2e:07:71:58:99:da:2d:37:10:b7:3c:99:f8:f3:58: c2:6c:36:8d:cc:b2:c6:d8:a9:2b:46:68:39:33:e3: f2:83:31:a9:65:27:28:5e:43:25:2b:ec:16:88:84: 94:c4:3d:2f:e2:c0:30:64:06:4e:0d:0f:8a:09:72: d2:97:1e:11:5a:86:b6:f7:34:e5:7c:a5:5d:8b:74: bc:5c:3c:49:ab:8d:32:94:42:61:76:ba:3d:c7:60: 28:a0:b1:62:c1:b2:8b:f3:0c:a2:2d:5f:c3:96:a8: 4d:c7:25:40:c7:37:c7:6a:1f:e3:2d:a6:6a:4f:7c: fe:30:eb:44:cf:bc:ee:eb:ab:02:5f:22:27:a8:65: 4f:98:90:21:e1:d4:ca:3d:94:e5:16:f3:7d:a2:3c: e5:fd:a5:d2:6e:93:00:d1:fc:03:79:f7:ba:62:0e: 50:08:45:b2:bd:0b:3a:a2:82:05:70:3c:68:5c:ab: 8a:a0:7e:e8:fd:13:05:a9:c5:be:36:9a:2e:44:6a: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:8B:CE:98:2A:20:B2:EA:8D:B7:F3:89:BC:05:29:38:F7:05:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7b:11:35:8c:85:91:67:bb:80:df:48:60:9b:b1:cd:9e:a4: 7f:00:10:d8:b4:0b:23:53:bf:3e:12:e0:66:1f:8a:f8:b6:42: b4:84:8d:9d:39:c9:a3:f1:e5:ba:ca:8a:75:57:70:f6:16:05: b4:df:2d:87:a6:60:93:c0:41:72:e5:6b:a0:ef:9a:85:dd:f1: 82:70:73:cf:6a:23:67:f1:a4:19:ab:17:b7:02:4c:b4:f2:97: ff:e8:c9:fa:c1:5e:9b:8a:3e:92:68:15:6c:f2:9a:a0:6f:5a: 5e:df:0d:98:e9:32:72:b1:96:72:b1:33:82:c7:18:2a:f7:ba: 23:de:13:94:c8:d3:52:67:37:27:75:5e:cc:c1:f2:cf:b2:09: 39:31:27:af:38:2b:1a:98:6f:e1:7d:41:92:18:1d:8a:66:bf: 22:35:58:a6:c6:79:2c:77:9d:6f:d6:a9:37:99:54:ba:5e:55: db:01:53:53:d1:c5:2e:a5:35:d2:39:c6:7e:63:db:e3:a5:a5: 30:cb:6d:9a:7b:30:bc:0e:99:0c:64:92:9d:ca:9f:37:17:18: 80:83:a7:8c:c9:33:c7:6a:a1:1b:9d:aa:66:9c:a1:9a:8b:d7: fb:f1:c3:15:00:1f:5e:af:4c:1a:15:a7:90:3c:62:85:92:3b: 0d:0a:bf:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXPRv618N0Fd1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk ODNlYTQ0OGQtMGM2OS00MGYzLWIyNDEtM2E2YzY5MGU2NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioV1IZFs+evkNRyXb8e4exah9gsdTc+Ed6Pu VNzQGaZ1baIzaoDyV8JV7J3WkTAxYuFGqcXA3SC6Xq0uB3FYmdotNxC3PJn481jC bDaNzLLG2KkrRmg5M+PygzGpZScoXkMlK+wWiISUxD0v4sAwZAZODQ+KCXLSlx4R Woa29zTlfKVdi3S8XDxJq40ylEJhdro9x2AooLFiwbKL8wyiLV/DlqhNxyVAxzfH ah/jLaZqT3z+MOtEz7zu66sCXyInqGVPmJAh4dTKPZTlFvN9ojzl/aXSbpMA0fwD efe6Yg5QCEWyvQs6ooIFcDxoXKuKoH7o/RMFqcW+NpouRGrF3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhMi86YKiCy6o2384m8BSk49wUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmEyODYwYTctZDI5ZC0z MTEwLWJiMTgtNWNjZWQzYzI3MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ7ETWMhZFnu4DfSGCbsc2epH8AENi0CyNTvz4S4GYfivi2QrSEjZ05 yaPx5brKinVXcPYWBbTfLYemYJPAQXLla6DvmoXd8YJwc89qI2fxpBmrF7cCTLTy l//oyfrBXpuKPpJoFWzymqBvWl7fDZjpMnKxlnKxM4LHGCr3uiPeE5TI01JnNyd1 XszB8s+yCTkxJ684KxqYb+F9QZIYHYpmvyI1WKbGeSx3nW/WqTeZVLpeVdsBU1PR xS6lNdI5xn5j2+OlpTDLbZp7MLwOmQxkkp3KnzcXGICDp4zJM8dqoRudqmacoZqL 1/vxwxUAH16vTBoVp5A8YoWSOw0Kvxg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org