$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/254fce28-37bd-3ed3-9675-f5e7029ca42b.roa File: 254fce28-37bd-3ed3-9675-f5e7029ca42b.roa (raw, json) Hash identifier: dUNMHFTvudQY67OPWHur/jf8HXKZ1HS07jDasM9aQ2w= Subject key identifier: 2C:13:96:B4:34:97:57:2F:61:12:91:94:A1:BC:A6:3C:6E:54:09:14 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858416F511BB164515B3C55930100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/254fce28-37bd-3ed3-9675-f5e7029ca42b.roa Signing time: Sun 02 Apr 2023 12:00:00 +0000 ROA not before: Sun 02 Apr 2023 12:00:00 +0000 ROA not after: Mon 11 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.33.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:6f:51:1b:b1:64:51:5b:3c:55:93:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 2 12:00:00 2023 GMT Not After : Mar 11 04:00:00 2030 GMT Subject: CN=e5fe12d4-c7c2-4b8a-af72-6b640cb5632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:82:0c:66:3f:48:01:4b:53:39:32:15:ff: 4d:be:b8:ed:4a:1c:c8:31:58:96:bd:e8:31:fb:08: 65:b6:af:c4:17:6f:3a:16:ed:44:2e:cb:a3:ce:2e: 4d:01:b0:f7:7b:b1:a3:b5:26:16:c7:b3:68:4a:ca: 98:cc:ba:38:39:b6:ea:1e:3a:c3:fb:28:de:7b:45: 17:1c:ed:09:20:00:d5:08:46:c8:0f:93:76:15:d7: 74:75:47:29:6a:9a:aa:4b:7f:bc:82:1f:c0:37:28: 00:cf:e4:b2:19:aa:aa:96:83:32:d1:2c:b4:f9:29: 72:df:fc:86:ba:3e:a5:d6:5d:14:c6:73:63:10:43: 45:aa:4c:e1:53:de:2e:dd:fb:d8:45:37:bd:71:20: 26:b2:6c:a4:07:77:48:1e:bf:5f:e0:99:60:1e:0a: 90:e8:6c:ee:cf:05:d3:a8:d4:62:c9:2a:50:43:41: 76:41:fd:e8:0b:f0:d8:a5:e4:c3:0c:0b:e9:73:00: c8:65:4d:20:5e:45:df:ff:f3:d1:38:64:e6:0b:d0: a3:bb:f1:d6:57:67:2e:80:32:f4:05:91:48:78:53: a7:5d:8b:a2:da:3e:d6:54:e4:ca:e6:0c:af:c3:ea: d0:4c:51:af:69:b0:44:67:35:ea:e7:2e:09:26:2a: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:13:96:B4:34:97:57:2F:61:12:91:94:A1:BC:A6:3C:6E:54:09:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/254fce28-37bd-3ed3-9675-f5e7029ca42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:39:22:d4:4b:1e:36:46:6e:d5:75:6b:bb:01:4d:cb:c8:e3: 86:b0:b4:d7:82:11:20:ef:75:17:4b:55:98:6b:fe:32:9c:ef: 94:bc:22:8d:84:15:18:ab:69:6d:17:26:7a:b4:27:53:38:4e: 76:31:c4:e1:74:92:2d:34:0b:19:ff:59:d1:9f:1c:81:c4:ff: 01:97:06:bc:f8:2f:87:f3:67:00:43:e6:61:d0:5d:8d:5d:9f: 4f:cf:56:c5:f1:bf:d6:8e:74:49:16:a8:bb:96:cf:97:68:3d: c5:20:6e:4b:ad:f2:08:2f:23:89:00:da:68:0f:de:a2:17:a3: 57:52:fc:2a:94:56:22:e4:0d:2a:ee:af:48:dc:81:61:56:f9: 44:da:06:c2:e7:a7:76:cf:b0:cf:8f:1c:dc:20:f8:65:18:4a: ea:92:54:94:ae:f7:c7:5c:33:58:a2:17:5a:e7:18:ca:18:f0: 58:81:6b:f9:fc:ab:c7:71:2f:7f:ac:34:ce:5f:8b:e9:e8:05: 81:90:49:ff:ad:0a:df:d6:7f:aa:c6:df:48:2a:9f:47:fd:b2: e1:81:a6:09:f8:19:08:80:d2:8c:72:b5:41:b1:b3:ed:37:f2: 0f:c3:96:0f:f9:d1:1c:3a:fc:0c:a1:68:6c:c0:b8:d2:bb:b8: b7:a7:8f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFvURuxZFFbPFWTAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIzMDQwMjEyMDAwMFoXDTMwMDMxMTA0MDAwMFowLzEtMCsGA1UEAxMk ZTVmZTEyZDQtYzdjMi00YjhhLWFmNzItNmI2NDBjYjU2MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl6CDGY/SAFLUzkyFf9NvrjtShzIMViWvegx +whltq/EF286Fu1ELsujzi5NAbD3e7GjtSYWx7NoSsqYzLo4ObbqHjrD+yjee0UX HO0JIADVCEbID5N2Fdd0dUcpapqqS3+8gh/ANygAz+SyGaqqloMy0Sy0+Sly3/yG uj6l1l0UxnNjEENFqkzhU94u3fvYRTe9cSAmsmykB3dIHr9f4JlgHgqQ6GzuzwXT qNRiySpQQ0F2Qf3oC/DYpeTDDAvpcwDIZU0gXkXf//PROGTmC9Cju/HWV2cugDL0 BZFIeFOnXYui2j7WVOTK5gyvw+rQTFGvabBEZzXq5y4JJipYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwTlrQ0l1cvYRKRlKG8pjxuVAkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU0ZmNlMjgtMzdiZC0z ZWQzLTk2NzUtZjVlNzAyOWNhNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo5ItRLHjZGbtV1a7sBTcvI44awtNeCESDvdRdLVZhr/jKc75S8Io2E FRiraW0XJnq0J1M4TnYxxOF0ki00Cxn/WdGfHIHE/wGXBrz4L4fzZwBD5mHQXY1d n0/PVsXxv9aOdEkWqLuWz5doPcUgbkut8ggvI4kA2mgP3qIXo1dS/CqUViLkDSru r0jcgWFW+UTaBsLnp3bPsM+PHNwg+GUYSuqSVJSu98dcM1iiF1rnGMoY8FiBa/n8 q8dxL3+sNM5fi+noBYGQSf+tCt/Wf6rG30gqn0f9suGBpgn4GQiA0oxytUGxs+03 8g/Dlg/50Rw6/AyhaGzAuNK7uLenj+I= -----END CERTIFICATE-----Generated at Tue Jun 25 22:31:18 2024 by rpki-client on console-ams.rpki-client.org