$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa File: 848376e0-ddab-3a49-a842-785182b9be6b.roa (raw, json) Hash identifier: 5lhLKPa60Wk+xomhO969Wpp9M4Qi8v4Z5Brp04u4+/U= Subject key identifier: 39:23:D8:23:F0:81:70:8C:A0:75:A3:5A:7A:53:0A:D5:08:5E:30:B2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845C70E2848189FB40153F22DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa Signing time: Mon 06 May 2024 01:00:24 +0000 ROA not before: Mon 06 May 2024 01:00:24 +0000 ROA not after: Sun 04 Aug 2024 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c7:0e:28:48:18:9f:b4:01:53:f2:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 01:00:24 2024 GMT Not After : Aug 4 01:00:24 2024 GMT Subject: CN=b2a78f80-8754-4ede-b641-13182c58d52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:19:60:8b:e8:7d:24:99:90:27:dd:6c:c1: dc:45:4d:77:8b:79:c3:e9:8d:86:02:45:60:11:d6: 5b:2d:a5:d8:23:f7:3c:08:b5:e6:b6:99:58:a3:6d: f0:c5:ab:04:88:bf:ae:fb:cf:08:b3:45:80:1e:99: 72:e3:ae:79:f4:53:37:4a:e7:11:49:25:6b:03:06: 6f:10:da:df:e8:4f:11:07:5d:69:94:c1:58:66:49: 3f:65:fc:60:2b:3c:c3:ca:13:3d:1f:89:14:a4:61: 03:f7:ef:0f:fe:88:8f:d1:3b:02:62:cf:ad:4d:c0: 1a:86:29:52:b4:28:47:a2:2c:b6:db:af:5c:fc:ae: a7:f4:dc:b2:7b:d9:ff:8c:10:d4:16:73:80:bc:05: 2e:18:02:5b:0b:f3:b8:ca:f3:ab:2e:3f:32:99:7d: 82:7c:e7:3b:29:c1:ea:8c:1a:7d:35:35:1d:dc:78: 57:dd:d7:e0:62:e5:c2:e2:34:28:37:71:39:b4:df: 8f:be:27:de:4b:79:fa:7e:41:19:03:97:5a:ef:5c: f0:1a:87:8d:2b:95:b9:46:71:67:18:77:51:0c:6a: fc:4d:d8:86:8c:1d:97:68:b4:d0:e0:01:76:28:7f: 24:d1:db:29:65:e2:5a:c9:46:42:5e:83:7d:65:8b: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:D8:23:F0:81:70:8C:A0:75:A3:5A:7A:53:0A:D5:08:5E:30:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:73:96:78:23:02:47:78:bf:c7:0a:44:db:b1:2e:27:c8:3a: 54:16:67:3b:cc:9d:38:84:b2:78:65:7b:0c:bc:90:8d:4a:b5: b8:91:ba:56:d3:12:27:97:49:7f:4d:7f:31:b5:27:d2:bd:65: 4c:a6:13:36:f5:5f:37:78:91:59:7b:b3:c1:a4:d6:14:76:29: ff:3a:a0:8c:c1:9d:bf:9a:40:80:a4:6e:cb:b2:28:1c:78:d2: 41:ba:5f:29:75:a0:71:69:c0:4b:de:65:98:b7:80:f2:dd:44: 57:99:4f:3b:63:7e:07:7c:83:dd:fa:0f:ca:34:3c:1e:85:11: 56:02:58:63:76:eb:ca:aa:e9:fc:eb:6e:3b:e8:81:7b:7a:9d: 9f:fc:55:da:48:86:c9:7a:32:2c:ce:c5:93:19:65:d0:0a:a9: 1d:80:42:29:6c:11:dc:dc:64:91:52:2e:44:42:c2:a2:8d:b7: e6:48:b7:7f:41:64:68:59:4b:60:38:ec:a8:72:06:4b:a7:ec: 2c:75:67:c2:83:cc:18:f4:33:06:ee:bb:35:23:75:e1:5a:e1: ba:bb:78:50:36:8f:1c:1c:79:cc:75:ba:33:ae:20:19:38:44: be:72:50:cf:9b:38:d7:f5:8c:91:c9:ca:03:7b:b5:c3:c3:b0: b3:62:15:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXHDihIGJ+0AVPyLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDUwNjAxMDAyNFoXDTI0MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YjJhNzhmODAtODc1NC00ZWRlLWI2NDEtMTMxODJjNThkNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsoZYIvofSSZkCfdbMHcRU13i3nD6Y2GAkVg EdZbLaXYI/c8CLXmtplYo23wxasEiL+u+88Is0WAHply46559FM3SucRSSVrAwZv ENrf6E8RB11plMFYZkk/ZfxgKzzDyhM9H4kUpGED9+8P/oiP0TsCYs+tTcAahilS tChHoiy2269c/K6n9Nyye9n/jBDUFnOAvAUuGAJbC/O4yvOrLj8ymX2CfOc7KcHq jBp9NTUd3HhX3dfgYuXC4jQoN3E5tN+PvifeS3n6fkEZA5da71zwGoeNK5W5RnFn GHdRDGr8TdiGjB2XaLTQ4AF2KH8k0dspZeJayUZCXoN9ZYuqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkj2CPwgXCMoHWjWnpTCtUIXjCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODQ4Mzc2ZTAtZGRhYi0z YTQ5LWE4NDItNzg1MTgyYjliZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVzlngjAkd4v8cKRNuxLifIOlQWZzvMnTiEsnhlewy8kI1KtbiRulbT EieXSX9NfzG1J9K9ZUymEzb1Xzd4kVl7s8Gk1hR2Kf86oIzBnb+aQICkbsuyKBx4 0kG6Xyl1oHFpwEveZZi3gPLdRFeZTztjfgd8g936D8o0PB6FEVYCWGN268qq6fzr bjvogXt6nZ/8VdpIhsl6MizOxZMZZdAKqR2AQilsEdzcZJFSLkRCwqKNt+ZIt39B ZGhZS2A47KhyBkun7Cx1Z8KDzBj0MwbuuzUjdeFa4bq7eFA2jxwcecx1ujOuIBk4 RL5yUM+bONf1jJHJygN7tcPDsLNiFUI= -----END CERTIFICATE-----Generated at Tue Jun 25 23:30:28 2024 by rpki-client on console-fra.rpki-client.org