$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa File: ceaea99f-2361-3e42-81dc-2424d99387d5.roa (raw, json) Hash identifier: K5mKX8MfyIZQjT1TWLNJW6K8xsJB8pVfHGB7as7YzLg= Subject key identifier: 1B:CE:16:CB:84:08:4B:C9:0F:C7:2B:00:82:31:71:46:35:61:7B:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584566FEEE64BAF7A6D57AD0A780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa Signing time: Mon 01 Apr 2024 15:12:11 +0000 ROA not before: Mon 01 Apr 2024 15:12:11 +0000 ROA not after: Sun 30 Jun 2024 15:12:11 +0000 asID: 8069 IP address blocks: 20.33.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:fe:ee:64:ba:f7:a6:d5:7a:d0:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 1 15:12:11 2024 GMT Not After : Jun 30 15:12:11 2024 GMT Subject: CN=937c3a9f-46e4-4955-94bc-2c33f6c6d028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:14:80:2e:14:ba:25:b4:65:4f:bd:89:e8: 22:ae:63:91:27:34:53:9d:e1:60:4c:0a:a9:44:a7: d9:24:10:3a:df:8a:cf:c2:f0:9b:25:36:15:79:8d: 3d:3e:94:60:40:8b:b9:54:90:c5:06:59:2e:bd:3d: a8:a6:26:dd:a3:7d:8f:74:ac:b2:df:8a:f6:46:3e: bb:2c:79:7a:80:8f:1b:8f:6d:63:f5:85:cf:b6:3c: 2e:7c:ae:2e:d3:45:91:37:65:07:6d:bc:9b:5c:64: 58:f7:5d:24:8e:ce:54:72:49:97:81:32:05:04:84: 55:73:49:5d:17:26:d2:1a:f0:a0:4f:13:01:85:61: c1:0e:b7:56:0b:0d:9f:fe:af:41:d7:8f:02:04:56: d1:d0:a3:03:63:2c:83:74:dc:63:f4:da:00:7e:54: 35:5a:cb:61:fe:c8:13:f0:a6:b4:26:ff:9a:02:d3: 28:38:b2:f1:45:be:e9:10:f0:c7:5a:13:88:30:c8: 58:b8:a6:7a:c4:36:17:a4:3a:3e:06:fe:53:31:ed: 03:08:89:5f:59:c2:84:2c:9a:44:8d:e4:98:2c:f0: de:f7:9a:eb:ef:7d:02:7c:27:9b:ad:e2:20:6a:2b: 3b:7d:8d:0d:80:99:82:83:f3:d7:bf:9e:b6:b9:f0: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:16:CB:84:08:4B:C9:0F:C7:2B:00:82:31:71:46:35:61:7B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:43:4a:d0:d9:5c:58:12:29:0a:ee:e4:04:b9:75:cc:f0:c7: 80:f9:80:47:8d:b8:9e:08:91:c5:93:b3:84:ab:4e:fb:94:21: c7:19:66:52:7b:8f:61:52:04:1f:58:10:d7:e2:96:ef:ef:11: 1a:96:65:30:72:4d:38:fc:f9:2e:17:90:7a:a3:f5:f5:03:1f: ea:a2:ff:a4:69:86:29:37:cb:6b:b0:14:62:26:85:cd:0c:04: 68:1c:33:d8:43:48:c8:fa:39:cb:d9:75:c2:41:da:9c:7e:e0: ba:e1:7d:37:73:7c:45:dc:29:04:3e:d5:60:87:d1:1c:e8:30: ac:25:65:2b:90:65:fa:b2:eb:d9:3d:dc:6d:3c:55:ae:9e:9c: d3:df:7c:f9:f4:08:f2:a6:5d:ba:f7:70:00:12:46:5e:f0:ed: 45:18:ff:46:01:ad:6d:f5:5a:ee:6d:0a:b4:b1:a0:f8:90:b4: a2:c6:bb:e1:3b:05:c5:e0:c5:91:71:17:50:40:bc:34:e6:f4: 3d:f7:d8:bb:31:fd:49:d4:28:33:60:59:30:b1:e0:a0:81:e8: 10:bf:49:93:e0:4a:cb:dc:db:9c:00:3c:10:b0:8a:3c:84:ec: 05:94:27:d6:69:c4:ba:e0:69:cd:79:87:5d:50:7e:0d:21:38: 0a:54:33:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVm/u5kuvem1XrQp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDQwMTE1MTIxMVoXDTI0MDYzMDE1MTIxMVowLzEtMCsGA1UEAxMk OTM3YzNhOWYtNDZlNC00OTU1LTk0YmMtMmMzM2Y2YzZkMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqYUgC4UuiW0ZU+9iegirmORJzRTneFgTAqp RKfZJBA634rPwvCbJTYVeY09PpRgQIu5VJDFBlkuvT2opibdo32PdKyy34r2Rj67 LHl6gI8bj21j9YXPtjwufK4u00WRN2UHbbybXGRY910kjs5UckmXgTIFBIRVc0ld FybSGvCgTxMBhWHBDrdWCw2f/q9B148CBFbR0KMDYyyDdNxj9NoAflQ1Wsth/sgT 8Ka0Jv+aAtMoOLLxRb7pEPDHWhOIMMhYuKZ6xDYXpDo+Bv5TMe0DCIlfWcKELJpE jeSYLPDe95rr730CfCebreIgais7fY0NgJmCg/PXv562ufCZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvOFsuECEvJD8crAIIxcUY1YXvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VhZWE5OWYtMjM2MS0z ZTQyLTgxZGMtMjQyNGQ5OTM4N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxDStDZXFgSKQru5AS5dczwx4D5gEeNuJ4IkcWTs4SrTvuUIccZZlJ7 j2FSBB9YENfilu/vERqWZTByTTj8+S4XkHqj9fUDH+qi/6Rphik3y2uwFGImhc0M BGgcM9hDSMj6OcvZdcJB2px+4LrhfTdzfEXcKQQ+1WCH0RzoMKwlZSuQZfqy69k9 3G08Va6enNPffPn0CPKmXbr3cAASRl7w7UUY/0YBrW31Wu5tCrSxoPiQtKLGu+E7 BcXgxZFxF1BAvDTm9D332Lsx/UnUKDNgWTCx4KCB6BC/SZPgSsvc25wAPBCwijyE 7AWUJ9ZpxLrgac15h11Qfg0hOApUM8k= -----END CERTIFICATE-----Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org