$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa File: 02a83350-670d-3cb6-afe2-eff642f4f27c.roa (raw, json) Hash identifier: 3BaiGnpH5fDq75GsOfkJtnBlYPUqr/89R5/musjTjTU= Subject key identifier: 16:F3:4A:FA:28:B6:C2:3D:47:F6:C0:45:C8:D2:A7:6F:35:DD:58:0F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584785BBB1C65EC53216BF92AF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa Signing time: Sun 13 Oct 2024 01:00:31 +0000 ROA not before: Sun 13 Oct 2024 01:00:31 +0000 ROA not after: Sat 11 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:bb:b1:c6:5e:c5:32:16:bf:92:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 13 01:00:31 2024 GMT Not After : Jan 11 02:00:31 2025 GMT Subject: CN=2b2fd457-dc16-4c62-859a-bf21813d1347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:2b:92:24:cc:59:20:73:40:e0:4f:5e:31: a8:a7:5a:32:c4:f7:a7:d0:ad:1a:32:38:3c:b6:af: 02:47:d8:99:0c:65:0b:e2:a1:c4:04:27:6e:d3:61: 81:61:d3:d5:1f:0b:9c:b0:12:9f:89:79:f7:af:7c: e4:1f:07:69:53:6e:87:cd:31:50:b1:9f:00:f1:18: c3:67:32:17:e6:50:ee:3c:fd:86:fb:d5:d8:7e:02: 21:3a:98:52:3c:59:46:76:7e:d6:36:fa:03:1e:a2: 99:ac:95:ee:8b:67:8a:f0:7f:fe:87:d0:91:2d:30: 07:24:e1:b1:15:60:5a:18:c7:50:1a:a3:b1:08:41: 23:b2:81:7d:72:c5:2e:80:d6:88:61:c9:4a:4b:26: 18:84:9a:58:e7:b9:17:50:ff:90:aa:7d:82:43:66: 81:9c:a6:21:78:20:cc:e1:30:78:44:77:3b:e6:55: 73:f3:41:c8:f4:2d:f7:c1:4c:ff:ae:2c:b3:56:90: 28:c4:ed:36:1a:13:3b:22:2d:3f:4a:67:b5:c4:c1: d9:4e:11:9e:45:7d:91:26:b6:c4:f9:31:1d:53:ab: b3:59:9f:82:af:56:43:20:48:7b:20:cb:aa:c8:41: 00:2c:be:80:86:98:ec:95:f5:30:b3:c2:8d:55:86: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:4A:FA:28:B6:C2:3D:47:F6:C0:45:C8:D2:A7:6F:35:DD:58:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a3:c4:9d:dc:a2:a7:37:8a:28:2e:df:8c:c9:58:fb:43:90: 33:a3:36:f3:92:ac:52:28:e9:d4:67:2b:cd:8e:94:eb:d2:20: 74:4c:74:12:cd:d6:4d:2b:c5:44:c0:39:ad:eb:dd:f3:0f:cd: ec:c9:a3:78:86:41:b9:0c:46:d6:80:6e:12:37:f9:9a:92:3c: 02:e4:ff:27:79:f9:e4:bb:41:a1:53:dc:b5:a7:60:12:2c:7f: 4f:0a:35:20:ad:8b:fc:f6:2c:dd:6a:7c:0d:95:81:54:99:4b: 71:e6:44:94:7f:15:e5:35:fe:00:cc:5e:08:05:0d:88:87:5f: 7e:5b:45:93:82:14:a0:b1:47:05:59:b6:42:c8:a0:c5:f5:58: c6:4e:c9:f9:d2:e9:93:c0:ac:ec:ba:3b:a5:52:81:cf:c6:62: 52:79:98:e5:d9:d5:61:0b:d8:95:54:9c:49:87:86:05:c5:dc: 17:6c:8e:4c:b3:4a:fc:d6:0a:ed:bf:7d:58:36:ca:7d:a9:7f: 25:5b:8c:c9:2d:67:cc:6e:66:7b:48:16:3e:48:f0:bd:bc:16: 25:86:8f:f9:31:94:6f:35:0e:74:ac:05:94:f3:74:06:9d:3c: da:19:5f:69:91:82:5a:7a:36:81:99:eb:b9:3b:a0:0d:d5:12: a8:df:aa:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu7HGXsUyFr+Sr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk MmIyZmQ0NTctZGMxNi00YzYyLTg1OWEtYmYyMTgxM2QxMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk4rkiTMWSBzQOBPXjGop1oyxPen0K0aMjg8 tq8CR9iZDGUL4qHEBCdu02GBYdPVHwucsBKfiXn3r3zkHwdpU26HzTFQsZ8A8RjD ZzIX5lDuPP2G+9XYfgIhOphSPFlGdn7WNvoDHqKZrJXui2eK8H/+h9CRLTAHJOGx FWBaGMdQGqOxCEEjsoF9csUugNaIYclKSyYYhJpY57kXUP+Qqn2CQ2aBnKYheCDM 4TB4RHc75lVz80HI9C33wUz/riyzVpAoxO02GhM7Ii0/Sme1xMHZThGeRX2RJrbE +TEdU6uzWZ+Cr1ZDIEh7IMuqyEEALL6AhpjslfUws8KNVYZpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbzSvootsI9R/bARcjSp2813VgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDJhODMzNTAtNjcwZC0z Y2I2LWFmZTItZWZmNjQyZjRmMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCjxJ3coqc3iigu34zJWPtDkDOjNvOSrFIo6dRnK82OlOvSIHRMdBLN 1k0rxUTAOa3r3fMPzezJo3iGQbkMRtaAbhI3+ZqSPALk/yd5+eS7QaFT3LWnYBIs f08KNSCti/z2LN1qfA2VgVSZS3HmRJR/FeU1/gDMXggFDYiHX35bRZOCFKCxRwVZ tkLIoMX1WMZOyfnS6ZPArOy6O6VSgc/GYlJ5mOXZ1WEL2JVUnEmHhgXF3Bdsjkyz SvzWCu2/fVg2yn2pfyVbjMktZ8xuZntIFj5I8L28FiWGj/kxlG81DnSsBZTzdAad PNoZX2mRglp6NoGZ67k7oA3VEqjfqvQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:22 2024 by rpki-client on console-ams.rpki-client.org