$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa File: 0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json) Hash identifier: yd6zxyaYhzF4SXUqNakNhQQihb9NPqQ8+NAvdH4Jpkc= Subject key identifier: A4:5A:50:83:C2:AA:79:21:88:D2:E7:25:F1:86:42:16:AB:29:D3:91 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845C8ACD8A7C18B46C1541DFA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa Signing time: Mon 06 May 2024 14:56:01 +0000 ROA not before: Mon 06 May 2024 14:56:01 +0000 ROA not after: Sun 04 Aug 2024 14:56:01 +0000 asID: 8069 IP address blocks: 20.33.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c8:ac:d8:a7:c1:8b:46:c1:54:1d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 14:56:01 2024 GMT Not After : Aug 4 14:56:01 2024 GMT Subject: CN=a6f19ddf-19ef-401e-bebe-59079165eba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3c:80:3d:10:51:a5:cf:a0:8b:6d:f8:d8:19: 84:cb:49:4c:5e:54:63:4c:a9:d4:b9:46:88:a7:e2: ab:d4:7e:03:04:53:ab:f4:1e:dd:5b:8a:80:e7:73: 01:6d:56:c2:85:36:9e:c6:48:0c:28:71:b9:22:96: 3e:8f:54:b7:38:89:95:83:88:c2:3f:4a:0f:65:10: 4d:37:01:9a:68:bf:16:3c:92:79:d9:0c:4c:fb:f0: 41:42:f7:58:8b:5a:db:b7:e1:4e:6a:ac:64:d6:7d: 85:9e:d8:7b:18:39:40:0f:74:21:be:51:b2:92:d0: e4:a0:51:51:0b:59:c7:3e:e3:cc:15:0a:d9:e0:80: cb:c2:a9:2a:ad:5c:59:e8:d2:a3:42:a5:12:1f:02: c1:0b:90:45:d9:b6:1c:21:af:4d:7b:53:6b:bc:5c: fe:6b:85:5f:17:fd:09:5c:5f:27:5d:78:50:c6:b5: a5:5f:8b:5c:9e:de:a7:0f:c3:af:a5:84:44:5f:29: 3a:e1:b2:54:45:7d:a3:bd:7f:37:7d:74:4b:21:6f: 6c:6a:91:f0:b9:c3:21:29:1a:54:6e:97:49:04:27: 62:32:c7:d9:c6:58:96:89:d4:99:98:a1:43:37:0e: 7b:ce:fb:f1:f8:3b:05:66:ac:5e:38:98:c7:56:a2: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:50:83:C2:AA:79:21:88:D2:E7:25:F1:86:42:16:AB:29:D3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:af:31:04:41:01:72:59:d1:92:21:b9:2e:f0:1d:fe:f0:e1: 5f:83:0e:53:95:05:d6:32:6c:5d:af:a7:ad:8e:93:9f:a8:47: fc:8a:92:6c:c1:7c:c1:ce:2c:48:60:1b:44:c4:0a:0a:9e:01: eb:ac:0c:3a:16:23:47:45:49:bb:36:f4:2c:d0:f8:62:9b:b9: d6:47:92:75:54:6d:c9:73:05:e1:88:57:73:d4:57:55:bc:03: 27:9f:0f:9b:db:73:a3:61:c5:a4:64:e7:6f:53:bb:04:83:6f: 6f:6a:d0:03:bf:93:12:50:b3:be:f9:72:93:24:9b:03:3a:a6: b8:1e:fe:05:45:b3:cc:cf:73:0d:e8:90:89:b1:c7:61:24:2d: 71:e7:f3:a9:8c:88:9d:5e:bf:a3:96:89:65:76:87:95:f4:78: 46:bb:0d:32:2a:ac:b9:e7:a6:b2:97:3d:78:58:76:17:16:72: 79:c7:f8:2a:c2:08:95:e3:42:b8:b0:0c:51:5d:36:55:3e:47: 2f:e7:a7:94:2c:5a:ac:83:bb:de:23:99:a4:ab:dd:2d:9f:06: 80:40:5c:40:27:39:05:96:a1:87:15:08:15:de:19:10:9c:fe: da:cb:53:6c:b1:1c:a6:b3:cd:43:eb:1b:08:62:3b:6b:75:9b: bf:d8:6a:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIrNinwYtGwVQd+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDUwNjE0NTYwMVoXDTI0MDgwNDE0NTYwMVowLzEtMCsGA1UEAxMk YTZmMTlkZGYtMTllZi00MDFlLWJlYmUtNTkwNzkxNjVlYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zyAPRBRpc+gi2342BmEy0lMXlRjTKnUuUaI p+Kr1H4DBFOr9B7dW4qA53MBbVbChTaexkgMKHG5IpY+j1S3OImVg4jCP0oPZRBN NwGaaL8WPJJ52QxM+/BBQvdYi1rbt+FOaqxk1n2Fnth7GDlAD3QhvlGyktDkoFFR C1nHPuPMFQrZ4IDLwqkqrVxZ6NKjQqUSHwLBC5BF2bYcIa9Ne1NrvFz+a4VfF/0J XF8nXXhQxrWlX4tcnt6nD8OvpYREXyk64bJURX2jvX83fXRLIW9sapHwucMhKRpU bpdJBCdiMsfZxliWidSZmKFDNw57zvvx+DsFZqxeOJjHVqLmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRaUIPCqnkhiNLnJfGGQharKdORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGQ0OWU3MWUtMTVlZi0z NWQ4LTg3YjYtZTg5MzNmMWNlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOvMQRBAXJZ0ZIhuS7wHf7w4V+DDlOVBdYybF2vp62Ok5+oR/yKkmzB fMHOLEhgG0TECgqeAeusDDoWI0dFSbs29CzQ+GKbudZHknVUbclzBeGIV3PUV1W8 AyefD5vbc6NhxaRk529TuwSDb29q0AO/kxJQs775cpMkmwM6prge/gVFs8zPcw3o kImxx2EkLXHn86mMiJ1ev6OWiWV2h5X0eEa7DTIqrLnnprKXPXhYdhcWcnnH+CrC CJXjQriwDFFdNlU+Ry/np5QsWqyDu94jmaSr3S2fBoBAXEAnOQWWoYcVCBXeGRCc /trLU2yxHKazzUPrGwhiO2t1m7/YahA= -----END CERTIFICATE-----Generated at Tue Jun 25 23:30:27 2024 by rpki-client on console-fra.rpki-client.org