$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa File: 9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json) Hash identifier: nKYZf5iv7cOgkUx6dhGSn4ySaSVT8xdKLQVKRiCu7HU= Subject key identifier: 00:EA:D9:90:89:F8:A2:6B:89:1F:76:37:BD:1C:86:D7:0E:2A:F7:B5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285845B3837602CA8D324648DCBF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 8069 IP address blocks: 20.33.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:76:02:ca:8d:32:46:48:dc:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=29842fd1-8a9d-4f44-858b-c71664f8f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:b2:92:31:9b:e8:6b:3b:9f:3f:ee:ab:bb: 87:c8:3f:ae:2c:c8:df:cb:2b:42:46:7f:0b:c5:77: cd:b1:ff:b7:d1:b4:02:d0:0b:b3:59:61:dd:9f:e8: b1:5c:17:75:d8:d9:c2:38:7e:b7:59:cc:96:39:0d: 0b:69:2a:0f:8a:fe:b4:11:43:63:e5:fc:43:ed:69: 12:61:ef:0b:05:fb:fc:9c:97:9e:b1:a8:eb:a1:30: db:b1:92:0b:4e:f5:45:8a:f1:b2:68:b5:0d:4a:a0: 8a:fc:fa:6d:04:5e:d7:a8:55:80:9e:b0:3a:ed:a1: d0:82:a9:5f:a6:96:1b:fb:fe:af:8f:6c:fb:c7:f1: bf:f8:3a:3f:bd:00:db:d7:3e:d1:e4:e7:61:f0:b6: ad:4c:bf:01:e2:ea:8c:28:08:f2:13:d1:a7:b8:c8: d6:73:95:fd:19:0f:fa:05:bc:1f:56:38:47:55:77: 2b:fd:4b:87:a4:be:ab:2b:44:a8:31:4d:f5:e2:96: 96:9d:99:1d:45:65:f6:2b:47:fd:6b:23:30:ad:99: 13:0b:4b:03:f3:8a:34:0d:42:d2:37:66:ba:9a:2c: 75:ca:33:f3:22:23:af:96:a1:80:df:95:b7:07:90: 74:51:a6:b6:87:ec:78:4c:e8:1b:c2:58:9f:1c:d6: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EA:D9:90:89:F8:A2:6B:89:1F:76:37:BD:1C:86:D7:0E:2A:F7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:84:2c:a6:13:ea:a4:db:b5:dc:4f:44:a8:b9:1d:37:c2:10: 42:eb:3c:07:2a:ee:50:ab:57:6e:fd:ae:7c:4e:62:2a:b1:73: 1a:da:ec:6f:c7:4f:04:48:d2:cb:a4:90:ac:e5:29:63:a7:87: ad:95:40:7b:cd:04:79:53:b2:7f:50:a8:d6:d4:61:64:b6:3f: e1:c0:f4:eb:56:b7:be:6b:fd:09:45:0f:9b:f0:eb:a8:76:af: d2:22:e4:e5:54:d9:5b:b5:2a:8d:a3:6f:87:3b:82:98:2c:13: 68:d4:22:ab:71:3d:4a:bb:1a:ff:23:ca:2d:38:48:e7:9c:9e: 3e:17:96:2c:47:1c:b2:e3:36:6f:67:14:ee:95:08:8d:c8:9e: e2:d9:8d:6f:79:8f:2c:37:a3:0a:2e:94:e0:2a:03:1d:5f:cf: 47:2d:4c:81:57:25:c9:9c:c8:b7:06:9f:de:42:a6:55:44:35: 79:e1:8c:c3:5a:e1:f7:27:80:57:62:5e:0f:a3:d0:5a:c2:50: ea:01:e3:b7:d2:b3:68:df:b1:b0:32:b8:0e:6e:45:2a:2e:4b: 18:d6:8b:63:23:fe:9d:7c:53:f2:e7:3d:a4:62:5b:e5:6c:38: 87:c2:bc:f8:63:d8:5a:e6:98:67:79:eb:f1:12:10:c5:3c:61: 40:c6:87:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg3YCyo0yRkjcvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk Mjk4NDJmZDEtOGE5ZC00ZjQ0LTg1OGItYzcxNjY0ZjhmNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S2ykjGb6Gs7nz/uq7uHyD+uLMjfyytCRn8L xXfNsf+30bQC0AuzWWHdn+ixXBd12NnCOH63WcyWOQ0LaSoPiv60EUNj5fxD7WkS Ye8LBfv8nJeesajroTDbsZILTvVFivGyaLUNSqCK/PptBF7XqFWAnrA67aHQgqlf ppYb+/6vj2z7x/G/+Do/vQDb1z7R5Odh8LatTL8B4uqMKAjyE9GnuMjWc5X9GQ/6 BbwfVjhHVXcr/UuHpL6rK0SoMU314paWnZkdRWX2K0f9ayMwrZkTC0sD84o0DULS N2a6mix1yjPzIiOvlqGA35W3B5B0Uaa2h+x4TOgbwlifHNbKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADq2ZCJ+KJriR92N70chtcOKve1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTI1NmU5MjgtOWU3YS0z OTVmLWEwZWMtYjJlMGM2YWMwYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKELKYT6qTbtdxPRKi5HTfCEELrPAcq7lCrV279rnxOYiqxcxra7G/H TwRI0sukkKzlKWOnh62VQHvNBHlTsn9QqNbUYWS2P+HA9OtWt75r/QlFD5vw66h2 r9Ii5OVU2Vu1Ko2jb4c7gpgsE2jUIqtxPUq7Gv8jyi04SOecnj4XlixHHLLjNm9n FO6VCI3InuLZjW95jyw3owoulOAqAx1fz0ctTIFXJcmcyLcGn95CplVENXnhjMNa 4fcngFdiXg+j0FrCUOoB47fSs2jfsbAyuA5uRSouSxjWi2Mj/p18U/LnPaRiW+Vs OIfCvPhj2FrmmGd56/ESEMU8YUDGh04= -----END CERTIFICATE-----Generated at Tue Jun 25 22:31:19 2024 by rpki-client on console-ams.rpki-client.org