$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa File: 4dd409f5-81c8-3feb-986f-28c676a7eb94.roa (raw, json) Hash identifier: i911cMrwt8gVgYNOeVT44Z+eEIHyMWaRVlGZC7SaB0w= Subject key identifier: 38:4B:E0:C7:7E:91:11:99:B8:ED:F1:7C:76:58:F0:6E:F4:BF:CF:71 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845B383766F33D8EF8057A4A700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 8069 IP address blocks: 20.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Jun 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:76:6f:33:d8:ef:80:57:a4:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=559beddb-421d-4d2d-9d1c-b7d73403fd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:b7:04:15:3c:43:c8:3e:34:95:c6:17:98: b2:59:35:37:ac:36:4c:36:0c:f7:c5:b5:aa:74:65: 34:dc:86:d4:2b:90:ce:a9:76:6f:9a:1c:a5:25:29: bb:ac:55:c6:59:e8:21:db:50:db:a8:c7:4f:fd:08: 23:ed:08:1b:9b:8c:f8:f7:a8:f5:3c:a8:b0:ca:5a: 34:67:da:67:be:ac:20:28:e5:cb:2a:b8:ee:c4:55: 8c:24:a1:ff:a7:e2:b4:66:ac:4d:80:0f:82:33:46: 8e:1a:01:88:eb:4e:a0:14:ad:cc:3f:19:22:34:a0: 01:56:8d:27:1a:70:69:f9:66:ac:15:52:3f:bb:bf: 73:b4:26:a3:04:46:c8:6d:ca:a5:c1:62:0f:b5:64: 46:b6:5f:da:b9:fe:f1:07:e6:58:6d:05:22:22:3e: 5f:b4:56:3f:7f:4a:b5:74:f9:57:3e:8b:87:ac:96: 93:41:36:b1:92:af:57:c4:fb:ec:0a:ef:5c:94:25: f1:c1:49:e1:10:f8:ca:0e:1b:c4:e9:e1:c5:92:a3: cb:c8:ef:8b:b2:a9:d2:f4:5b:cd:60:b2:c8:72:81: fc:a1:58:ae:1f:88:dc:04:38:67:db:ff:44:8b:49: 88:40:e9:e4:5e:e6:ec:04:c0:fc:cd:59:de:94:03: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4B:E0:C7:7E:91:11:99:B8:ED:F1:7C:76:58:F0:6E:F4:BF:CF:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:91:82:6d:15:8a:51:42:01:48:c0:b6:bb:bf:05:70:4f:78: 15:66:8a:66:ef:ac:81:65:ab:e0:e4:5b:5d:90:88:3e:5d:ae: 02:f5:58:1c:c0:a8:c2:90:3b:7a:8a:8f:4a:73:25:d7:5e:cc: ba:d7:c3:55:09:09:7d:5b:61:16:1b:d8:94:70:2b:10:57:16: 68:53:43:9e:dd:0b:84:db:c9:85:36:a3:0a:a6:5e:23:d7:06: 96:0c:42:b0:08:5a:0a:f3:0e:1a:8a:55:fd:da:b5:7d:f1:73: 82:d9:7e:c8:ad:f2:43:6d:71:e6:22:d7:d7:81:9f:ff:5a:3e: 12:8c:4c:ab:88:de:b5:f8:84:6e:78:38:65:61:cb:a1:6d:08: 8a:c3:85:b0:e3:63:5b:76:f4:b7:9d:65:69:18:35:30:37:4e: 7c:0e:7e:9f:63:a3:6c:41:f6:78:fd:a8:93:64:97:b4:80:32: a7:8b:90:90:62:d2:b6:e7:00:24:c5:e3:b6:7e:00:94:8b:2a: c2:1d:28:13:fe:1c:24:06:56:e7:42:1b:c2:05:35:05:8a:4e: 85:d1:4e:70:61:e8:30:53:a8:44:1f:e6:5e:79:21:1f:bb:e0: b5:e4:ea:dc:00:bc:5b:8d:21:d6:3b:62:f8:a9:24:21:3c:7b: 18:40:df:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg3ZvM9jvgFekpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk NTU5YmVkZGItNDIxZC00ZDJkLTlkMWMtYjdkNzM0MDNmZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQq3BBU8Q8g+NJXGF5iyWTU3rDZMNgz3xbWq dGU03IbUK5DOqXZvmhylJSm7rFXGWegh21DbqMdP/Qgj7Qgbm4z496j1PKiwylo0 Z9pnvqwgKOXLKrjuxFWMJKH/p+K0ZqxNgA+CM0aOGgGI606gFK3MPxkiNKABVo0n GnBp+WasFVI/u79ztCajBEbIbcqlwWIPtWRGtl/auf7xB+ZYbQUiIj5ftFY/f0q1 dPlXPouHrJaTQTaxkq9XxPvsCu9clCXxwUnhEPjKDhvE6eHFkqPLyO+LsqnS9FvN YLLIcoH8oViuH4jcBDhn2/9Ei0mIQOnkXubsBMD8zVnelAPLQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhL4Md+kRGZuO3xfHZY8G70v89xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRkNDA5ZjUtODFjOC0z ZmViLTk4NmYtMjhjNjc2YTdlYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCRgm0VilFCAUjAtru/BXBPeBVmimbvrIFlq+DkW12QiD5drgL1WBzA qMKQO3qKj0pzJddezLrXw1UJCX1bYRYb2JRwKxBXFmhTQ57dC4TbyYU2owqmXiPX BpYMQrAIWgrzDhqKVf3atX3xc4LZfsit8kNtceYi19eBn/9aPhKMTKuI3rX4hG54 OGVhy6FtCIrDhbDjY1t29LedZWkYNTA3TnwOfp9jo2xB9nj9qJNkl7SAMqeLkJBi 0rbnACTF47Z+AJSLKsIdKBP+HCQGVudCG8IFNQWKToXRTnBh6DBTqEQf5l55IR+7 4LXk6twAvFuNIdY7YvipJCE8exhA31E= -----END CERTIFICATE-----Generated at Tue Jun 25 03:11:33 2024 by rpki-client on console-fra.rpki-client.org