$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa File: 7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa (raw, json) Hash identifier: 3jqGgy0Cy4N4sw7Wds6BHmflPScEogFGha6dnVJRKFg= Subject key identifier: 1F:D2:A4:E0:DF:7B:EA:AB:DA:32:1E:FD:85:1C:2C:FD:D8:77:22:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845CF6E47244A7CC38F81059560 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 8069 IP address blocks: 20.157.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Jun 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:47:24:4a:7c:c3:8f:81:05:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=9cdd87c6-1da5-437f-bae4-6df8010e7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:60:c7:f8:77:48:33:97:d9:09:31:03:5a: 12:ba:c6:4b:99:51:ce:df:bf:a5:f4:dc:53:90:2f: a0:1f:05:9e:39:02:25:f1:b2:4e:38:19:c4:6b:5c: c5:2d:2b:d5:bf:a9:aa:69:69:43:f5:96:3d:b4:67: e3:58:b3:0e:d7:d7:58:ae:3b:15:3e:d4:40:c1:be: 32:82:4e:6c:60:39:2d:51:0b:68:b0:c4:06:dc:1d: 69:de:63:16:38:1a:f5:8b:91:5d:10:42:05:6b:d9: a8:c7:88:f9:35:c2:3d:68:0b:70:f9:7f:95:15:1c: d1:1c:ac:c0:52:12:83:37:56:79:ee:84:28:72:0a: 11:39:29:aa:d9:3d:82:ef:f6:60:48:9d:98:42:71: f3:e6:1c:26:45:d7:66:e9:c0:09:f7:3b:2c:ae:9e: aa:04:c1:35:0f:32:c4:64:e9:37:11:65:a6:dd:fe: d5:65:57:9c:e2:43:a5:9b:ea:d5:68:43:89:a2:5a: f8:25:ef:a2:f0:75:c3:26:73:a3:47:f0:03:5c:6f: b3:a0:ea:b5:b1:1b:d6:94:f7:be:df:aa:d3:ee:1b: 37:7e:c1:28:6b:6b:e2:da:24:d0:80:3a:7f:c0:7d: 12:02:db:68:ab:fe:60:dd:3c:eb:34:5c:1f:52:bc: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:A4:E0:DF:7B:EA:AB:DA:32:1E:FD:85:1C:2C:FD:D8:77:22:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3d:81:30:a8:6a:84:23:1a:43:46:59:d6:95:01:a0:08:72: a9:69:5c:21:61:b5:97:44:a3:b5:7f:41:c4:9b:e2:41:d2:97: 57:6a:83:b9:a8:b0:bd:2e:15:01:10:6c:ec:b0:fa:c0:7d:06: 3d:c6:7d:56:96:10:8c:88:ee:12:0c:c2:69:4a:64:89:fa:17: 11:a1:22:48:3e:e5:70:19:15:c9:6d:26:33:bd:41:d6:5b:d7: d7:56:f7:4a:5b:71:d2:a2:44:9b:c8:73:02:64:49:8b:64:8b: ac:a9:2a:61:9d:16:bf:c2:8e:4a:94:ec:18:51:25:a1:e9:34: 9e:01:31:b4:64:0b:6b:a6:62:35:51:0e:be:3d:f7:c6:6e:82: 55:bf:f0:be:3a:c9:c0:bd:fc:35:d8:17:a3:d7:bc:27:8a:71: 1b:5a:c8:b8:a5:b1:c3:f1:75:cc:38:b3:76:31:94:19:77:bd: 6e:03:2a:e4:0e:c4:67:a9:68:48:ab:68:25:5e:f7:db:9f:71: d5:93:ed:c4:a6:31:ab:06:11:36:7c:0f:40:0f:52:38:bd:2d: 92:48:b1:7a:63:51:bb:5c:67:46:f2:96:85:f3:06:7e:13:d4: 22:13:17:f8:85:5a:52:ac:0b:02:9b:1f:9d:ed:00:29:ca:b8: 70:fe:7a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbkckSnzDj4EFlWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk OWNkZDg3YzYtMWRhNS00MzdmLWJhZTQtNmRmODAxMGU3MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLVgx/h3SDOX2QkxA1oSusZLmVHO37+l9NxT kC+gHwWeOQIl8bJOOBnEa1zFLSvVv6mqaWlD9ZY9tGfjWLMO19dYrjsVPtRAwb4y gk5sYDktUQtosMQG3B1p3mMWOBr1i5FdEEIFa9mox4j5NcI9aAtw+X+VFRzRHKzA UhKDN1Z57oQocgoROSmq2T2C7/ZgSJ2YQnHz5hwmRddm6cAJ9zssrp6qBME1DzLE ZOk3EWWm3f7VZVec4kOlm+rVaEOJolr4Je+i8HXDJnOjR/ADXG+zoOq1sRvWlPe+ 36rT7hs3fsEoa2vi2iTQgDp/wH0SAttoq/5g3TzrNFwfUryTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/SpODfe+qr2jIe/YUcLP3YdyLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2E3YzNlNmQtMWY5YS0z ZTBhLWFmYTktZjhjOTM4MGJkNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU9gTCoaoQjGkNGWdaVAaAIcqlpXCFhtZdEo7V/QcSb4kHSl1dqg7mo sL0uFQEQbOyw+sB9Bj3GfVaWEIyI7hIMwmlKZIn6FxGhIkg+5XAZFcltJjO9QdZb 19dW90pbcdKiRJvIcwJkSYtki6ypKmGdFr/CjkqU7BhRJaHpNJ4BMbRkC2umYjVR Dr4998ZuglW/8L46ycC9/DXYF6PXvCeKcRtayLilscPxdcw4s3YxlBl3vW4DKuQO xGepaEiraCVe99ufcdWT7cSmMasGETZ8D0APUji9LZJIsXpjUbtcZ0byloXzBn4T 1CITF/iFWlKsCwKbH53tACnKuHD+esk= -----END CERTIFICATE-----Generated at Tue Jun 25 04:37:07 2024 by rpki-client on console-ams.rpki-client.org