$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: 22sTkPmfVXea0wZQj96JJJdBsaKHK3klvxjasFYxazc= Subject key identifier: E9:60:77:CB:3E:5F:B9:99:D4:93:C4:65:F3:58:14:82:52:7C:EE:EA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845ECBE91FAAAEA9DE9DF4F7D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Sun 19 May 2024 13:00:33 +0000 ROA not before: Sun 19 May 2024 13:00:33 +0000 ROA not after: Sat 17 Aug 2024 13:00:33 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ec:be:91:fa:aa:ea:9d:e9:df:4f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 19 13:00:33 2024 GMT Not After : Aug 17 13:00:33 2024 GMT Subject: CN=75b19c9c-e58a-46fe-9bed-8f7bb0ddb35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f5:24:8f:25:db:6c:f9:45:a3:4e:5a:ae:36: 81:58:e1:fd:8f:8b:3f:57:75:23:bb:69:59:64:a7: fc:7b:80:3e:8e:95:5d:c0:24:0b:51:74:58:26:22: 9d:4c:25:ae:52:15:be:2d:92:50:8a:e2:1a:5a:6f: 45:0e:ce:0f:03:6a:3a:a5:3c:36:96:25:9d:22:9e: c8:b2:82:fb:be:8c:24:0a:53:f9:4f:57:81:7e:10: 6c:2c:a9:be:98:bb:a4:5f:f4:72:52:8b:e6:38:98: 6e:c3:f7:ea:da:9d:7a:93:e3:11:74:21:a8:0a:e9: 64:47:c5:76:7f:31:eb:f3:73:36:0a:85:a3:26:34: 25:8e:88:7d:36:40:43:2f:2a:5d:70:fc:5f:6d:66: 0a:4f:62:b0:08:8d:8a:fa:af:54:ea:b5:4f:71:97: 05:3b:ee:08:e5:b6:18:2b:a1:8c:24:ce:35:6f:85: 2b:8e:65:e2:e7:a0:73:3d:94:a8:f9:ac:26:49:fc: 52:7a:cf:42:97:4f:2c:ab:bf:5a:0c:7d:68:f3:bd: 06:15:b7:90:12:64:ab:8d:64:07:15:b0:40:e7:52: 69:90:95:2d:b5:5f:46:1a:ee:b7:5e:05:f8:23:6f: 26:8a:3d:a0:9e:f6:51:8a:0b:f3:a0:52:42:d1:8f: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:60:77:CB:3E:5F:B9:99:D4:93:C4:65:F3:58:14:82:52:7C:EE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:26:a8:af:fe:51:7f:c5:3a:48:7b:d4:81:e5:24:f2:59:27: bd:f5:9e:3a:cc:7d:c6:04:d3:74:4a:53:a2:93:e8:b9:fc:ea: 19:4d:84:dd:b9:1e:1b:96:e7:90:84:43:b3:77:7d:88:26:fd: 6d:53:d8:d0:81:d1:10:39:d4:d9:3d:61:4d:7a:ea:27:be:3f: bb:7d:26:f8:ff:f5:5e:08:c1:fe:74:fc:1f:b6:21:29:f1:6c: 27:fd:4a:af:03:3a:a0:9b:44:97:0a:30:d7:f4:ea:db:3b:8f: 81:b7:3c:d9:ed:5e:4d:0a:b1:a5:69:0e:13:ca:d0:c4:35:6d: 28:54:a2:df:05:b1:b3:21:6b:cf:e3:67:cd:2c:b4:83:60:dc: cf:9e:ff:13:ec:cb:fa:03:bc:c2:98:35:07:c2:09:60:50:88: b3:76:d2:e9:94:e1:1c:85:e1:19:94:b3:18:43:ab:dd:19:37: a3:eb:49:2c:46:45:fc:8d:11:b7:b3:8c:d9:8d:9b:bb:24:6d: 74:83:8b:ac:67:48:54:d0:49:5c:e3:97:53:73:d8:1a:d8:bc: a0:f3:55:11:ac:ff:c3:cf:4c:1a:25:b9:c9:bb:de:06:4e:2f: a1:f4:4b:fc:38:c1:99:e0:34:22:f3:48:cd:b8:df:b5:a1:e5: 81:a2:22:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXsvpH6quqd6d9PfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDUxOTEzMDAzM1oXDTI0MDgxNzEzMDAzM1owLzEtMCsGA1UEAxMk NzViMTljOWMtZTU4YS00NmZlLTliZWQtOGY3YmIwZGRiMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vUkjyXbbPlFo05arjaBWOH9j4s/V3Uju2lZ ZKf8e4A+jpVdwCQLUXRYJiKdTCWuUhW+LZJQiuIaWm9FDs4PA2o6pTw2liWdIp7I soL7vowkClP5T1eBfhBsLKm+mLukX/RyUovmOJhuw/fq2p16k+MRdCGoCulkR8V2 fzHr83M2CoWjJjQljoh9NkBDLypdcPxfbWYKT2KwCI2K+q9U6rVPcZcFO+4I5bYY K6GMJM41b4UrjmXi56BzPZSo+awmSfxSes9Cl08sq79aDH1o870GFbeQEmSrjWQH FbBA51JpkJUttV9GGu63XgX4I28mij2gnvZRigvzoFJC0Y+Z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlgd8s+X7mZ1JPEZfNYFIJSfO7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwmqK/+UX/FOkh71IHlJPJZJ731njrMfcYE03RKU6KT6Ln86hlNhN25 HhuW55CEQ7N3fYgm/W1T2NCB0RA51Nk9YU166ie+P7t9Jvj/9V4Iwf50/B+2ISnx bCf9Sq8DOqCbRJcKMNf06ts7j4G3PNntXk0KsaVpDhPK0MQ1bShUot8FsbMha8/j Z80stINg3M+e/xPsy/oDvMKYNQfCCWBQiLN20umU4RyF4RmUsxhDq90ZN6PrSSxG RfyNEbezjNmNm7skbXSDi6xnSFTQSVzjl1Nz2BrYvKDzVRGs/8PPTBolucm73gZO L6H0S/w4wZngNCLzSM2437Wh5YGiImg= -----END CERTIFICATE-----Generated at Tue Jun 25 07:12:15 2024 by rpki-client on console-fra.rpki-client.org