$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa File: 35b9c925-cda6-3421-a583-d46714bddd70.roa (raw, json) Hash identifier: f2Y3QdZeZLm1fbVcmTLY7+PJEyNYZUmuZKhFDmcnpRo= Subject key identifier: 09:02:96:0A:7B:18:B6:CF:9D:B8:D5:47:0C:BE:65:CA:5E:E3:69:0F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858455A2D87D193290C62C9050980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa Signing time: Thu 28 Mar 2024 01:00:27 +0000 ROA not before: Thu 28 Mar 2024 01:00:27 +0000 ROA not after: Wed 26 Jun 2024 01:00:27 +0000 asID: 8069 IP address blocks: 20.33.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5a:2d:87:d1:93:29:0c:62:c9:05:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 01:00:27 2024 GMT Not After : Jun 26 01:00:27 2024 GMT Subject: CN=d5fb7378-3c31-46f5-9921-80c0cfadccc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:12:6f:50:81:08:2a:df:84:e9:f0:5f:36: 98:91:f2:f8:7a:50:f2:09:a5:2b:08:52:65:f4:02: 40:f2:ed:f1:48:5b:c5:9c:cb:0b:9e:d1:3a:5d:f1: 13:2f:b9:38:03:49:d1:84:61:fa:74:2e:e5:02:e1: dd:47:79:dd:72:28:10:cc:13:f4:52:29:e2:21:59: 8b:dd:ab:27:69:74:32:9e:2c:64:8b:f1:97:a4:16: d9:f7:ec:b6:b3:c6:87:4a:b2:9f:fb:35:8c:73:eb: c6:9f:7a:87:8b:b4:9f:d2:f2:a4:e8:ba:24:55:2f: 71:83:fb:91:03:cb:0a:68:9f:b2:00:9c:68:12:41: 00:22:35:01:35:f9:81:bc:85:a7:dc:38:a7:65:0c: aa:73:cf:ec:b6:af:bc:d6:96:38:b4:c0:12:51:44: de:1f:3d:df:a7:a2:e1:98:c2:1e:b5:9d:9f:d3:6e: a9:07:74:3b:5d:1b:ba:d2:68:69:38:6f:68:9d:84: 27:33:95:8c:4d:fc:87:75:e4:78:6d:1f:6b:c1:94: 39:97:4e:8e:ec:5e:b1:14:70:16:04:0d:14:da:29: 91:2e:c9:13:af:ce:5c:b4:12:7e:4e:9d:da:74:83: 01:85:33:3d:67:72:41:11:21:05:83:6f:48:98:c7: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:96:0A:7B:18:B6:CF:9D:B8:D5:47:0C:BE:65:CA:5E:E3:69:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d7:bc:24:f1:32:f3:a1:03:81:31:25:37:84:8a:bc:17:b4: 57:8a:ae:64:48:2d:4b:85:21:aa:3f:68:9c:51:b7:5e:5a:3e: 65:47:c5:f9:24:22:a3:9e:52:af:2c:2c:77:66:18:be:a5:86: d2:f0:36:b7:97:0b:91:96:23:95:ec:e2:6e:f9:2a:69:9d:cd: 26:8f:c4:3c:e0:7c:cf:e7:57:fd:5b:1a:4b:25:1c:f7:52:2c: 42:97:65:10:73:26:da:c6:5e:fd:1b:2b:69:ca:13:ce:34:0d: 32:25:54:89:43:66:4e:e4:9b:59:c2:f8:6a:9d:8a:a3:d9:c4: 37:f3:d7:e5:a1:b4:0b:30:7d:b3:fd:e0:04:df:a0:b2:e2:e1: 19:0e:5a:44:44:c4:f7:2f:9c:3c:aa:48:eb:45:7f:15:a5:66: 5d:09:67:77:07:a7:b9:d5:33:ec:0b:61:52:84:50:3e:5a:b3: 2e:f4:d8:c0:df:11:17:ca:82:69:9c:f3:99:94:01:1c:b9:0f: 42:03:68:bb:ec:2c:88:a8:bd:7a:dd:65:cc:87:3b:4b:08:51: 95:00:87:94:a3:b2:36:3a:fb:38:7e:c9:89:51:73:fa:7b:8a: d2:b8:d3:cb:c1:f0:47:8d:c2:d3:c6:a8:3f:39:2c:46:39:ed: 39:2b:bb:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYfRkykMYskFCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk ZDVmYjczNzgtM2MzMS00NmY1LTk5MjEtODBjMGNmYWRjY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6QSb1CBCCrfhOnwXzaYkfL4elDyCaUrCFJl 9AJA8u3xSFvFnMsLntE6XfETL7k4A0nRhGH6dC7lAuHdR3ndcigQzBP0UiniIVmL 3asnaXQynixki/GXpBbZ9+y2s8aHSrKf+zWMc+vGn3qHi7Sf0vKk6LokVS9xg/uR A8sKaJ+yAJxoEkEAIjUBNfmBvIWn3DinZQyqc8/stq+81pY4tMASUUTeHz3fp6Lh mMIetZ2f026pB3Q7XRu60mhpOG9onYQnM5WMTfyHdeR4bR9rwZQ5l06O7F6xFHAW BA0U2imRLskTr85ctBJ+Tp3adIMBhTM9Z3JBESEFg29ImMequwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkClgp7GLbPnbjVRwy+Zcpe42kPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzViOWM5MjUtY2RhNi0z NDIxLWE1ODMtZDQ2NzE0YmRkZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPXvCTxMvOhA4ExJTeEirwXtFeKrmRILUuFIao/aJxRt15aPmVHxfkk IqOeUq8sLHdmGL6lhtLwNreXC5GWI5Xs4m75KmmdzSaPxDzgfM/nV/1bGkslHPdS LEKXZRBzJtrGXv0bK2nKE840DTIlVIlDZk7km1nC+GqdiqPZxDfz1+WhtAswfbP9 4ATfoLLi4RkOWkRExPcvnDyqSOtFfxWlZl0JZ3cHp7nVM+wLYVKEUD5asy702MDf ERfKgmmc85mUARy5D0IDaLvsLIiovXrdZcyHO0sIUZUAh5SjsjY6+zh+yYlRc/p7 itK408vB8EeNwtPGqD85LEY57Tkruxs= -----END CERTIFICATE-----Generated at Sun Jun 16 07:49:09 2024 by rpki-client on console-ams.rpki-client.org