$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa File: 2f4b3421-ca06-34d3-ad50-682de9195829.roa (raw, json) Hash identifier: 0JWQyk/I/JROIauKSlb8x7XyI6sXcO5nJ8lGkkaCpds= Subject key identifier: D6:99:D7:1D:CA:35:AD:52:93:AF:28:17:A8:67:AF:B1:ED:4A:F6:9F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584776610A6FF78571FD929E2680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0a:6f:f7:85:71:fd:92:9e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=35cac030-a0c8-4d10-a5ba-ff03b1edd840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:b6:e4:a9:8b:ab:09:4b:ff:9a:36:16:47: 23:49:a6:19:d8:9d:33:35:54:7e:43:af:f7:04:48: 43:80:c7:eb:2e:73:3d:7f:1e:06:b8:b7:5d:85:08: 0c:db:2f:79:f1:14:e7:69:bd:4b:d3:fb:cc:08:f3: 96:a4:6b:af:ed:63:8f:a9:9d:e2:65:63:02:e0:80: 7e:68:1f:f0:85:98:0b:92:c7:fd:30:dc:c3:56:c3: ba:3d:3d:62:96:96:73:00:fe:11:eb:89:f0:10:a0: 88:af:60:a6:5d:d7:2e:aa:95:86:af:a9:04:e5:7c: e2:1a:83:cd:94:dd:72:6a:4b:24:05:79:42:33:b2: 9f:74:72:39:c2:f7:a6:97:dd:63:6f:fb:38:a1:fe: 4f:df:6f:18:88:b5:61:92:3c:a3:aa:bd:96:91:18: d3:35:9a:54:33:14:d8:1c:a1:f0:3d:04:d8:ec:71: e5:49:0f:82:02:a6:a4:89:7b:1f:13:b2:77:96:56: 02:9e:f7:23:10:ab:cb:c6:84:7c:0b:a6:62:f9:86: f4:be:24:44:f0:11:c1:27:6b:a5:38:9f:3b:86:43: 94:a3:c4:e9:67:17:ec:e2:9d:c6:11:05:03:d3:c1: 3e:7f:21:55:49:27:a1:b6:82:ca:d7:b7:aa:7d:e9: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:99:D7:1D:CA:35:AD:52:93:AF:28:17:A8:67:AF:B1:ED:4A:F6:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9d:d1:da:9f:ff:20:2d:52:98:a2:6b:60:c6:f5:cd:0b:db: 67:23:d0:67:b2:59:f1:20:c7:48:8f:14:ee:ef:67:8a:20:8f: 4d:ad:12:9b:e2:f5:be:c3:8d:92:f8:88:69:0b:24:82:c1:5d: 11:af:94:f3:e0:df:29:3f:e0:bc:43:d4:5f:7c:a6:d4:79:af: 9e:18:36:5c:21:e5:0c:e5:53:e7:de:1b:0d:17:a6:95:29:03: 09:1d:76:80:a0:4e:f0:49:c6:bd:3f:b9:e9:6e:d0:1f:61:73: 03:45:28:a4:b2:11:83:35:cd:6f:f6:a9:28:c1:73:f4:11:bf: 1d:1b:5e:49:3c:07:d4:f6:e7:0d:4e:8e:1c:78:41:ca:17:db: 2b:53:c7:07:0a:25:4d:c6:10:28:65:7b:2b:28:f7:3f:db:a3: 11:b1:06:09:e0:60:7f:b2:6c:5a:57:6e:f2:8b:e8:d6:18:7f: b2:df:0b:94:10:51:2d:54:1b:b6:34:25:6e:a5:4c:f4:ce:72: fe:c4:aa:fa:cc:80:0d:2d:02:23:b0:fe:24:87:48:2f:b0:ed: 59:a0:92:54:f0:62:4f:5a:72:9c:ab:ac:5e:b9:23:c7:a8:a3: 26:0c:c7:ac:4e:92:32:0e:b1:47:e6:6f:7a:55:6d:00:f4:06: d9:6e:4a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQpv94Vx/ZKeJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MzVjYWMwMzAtYTBjOC00ZDEwLWE1YmEtZmYwM2IxZWRkODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3S25KmLqwlL/5o2FkcjSaYZ2J0zNVR+Q6/3 BEhDgMfrLnM9fx4GuLddhQgM2y958RTnab1L0/vMCPOWpGuv7WOPqZ3iZWMC4IB+ aB/whZgLksf9MNzDVsO6PT1ilpZzAP4R64nwEKCIr2CmXdcuqpWGr6kE5XziGoPN lN1yakskBXlCM7KfdHI5wveml91jb/s4of5P328YiLVhkjyjqr2WkRjTNZpUMxTY HKHwPQTY7HHlSQ+CAqakiXsfE7J3llYCnvcjEKvLxoR8C6Zi+Yb0viRE8BHBJ2ul OJ87hkOUo8TpZxfs4p3GEQUD08E+fyFVSSehtoLK17eqfel6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaZ1x3KNa1Sk68oF6hnr7HtSvafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmY0YjM0MjEtY2EwNi0z NGQzLWFkNTAtNjgyZGU5MTk1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWd0dqf/yAtUpiia2DG9c0L22cj0GeyWfEgx0iPFO7vZ4ogj02tEpvi 9b7DjZL4iGkLJILBXRGvlPPg3yk/4LxD1F98ptR5r54YNlwh5QzlU+feGw0XppUp AwkddoCgTvBJxr0/uelu0B9hcwNFKKSyEYM1zW/2qSjBc/QRvx0bXkk8B9T25w1O jhx4QcoX2ytTxwcKJU3GEChleyso9z/boxGxBgngYH+ybFpXbvKL6NYYf7LfC5QQ US1UG7Y0JW6lTPTOcv7EqvrMgA0tAiOw/iSHSC+w7VmgklTwYk9acpyrrF65I8eo oyYMx6xOkjIOsUfmb3pVbQD0BtluSt0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org