$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa File: 3450c19e-0fd1-3623-812c-c078eb3ba143.roa (raw, json) Hash identifier: 5lkLYlBfN45JLGCMK7MfDWMlMYWOM8bvZyB3SEJiDEg= Subject key identifier: 03:52:F6:97:8D:89:3F:CE:2D:B4:20:03:9E:F0:F4:30:8B:48:EA:64 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584779AB5B27C141E3B4AA943080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa Signing time: Tue 08 Oct 2024 17:18:01 +0000 ROA not before: Tue 08 Oct 2024 17:18:01 +0000 ROA not after: Mon 06 Jan 2025 18:18:01 +0000 asID: 8069 IP address blocks: 20.157.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:ab:5b:27:c1:41:e3:b4:aa:94:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 8 17:18:01 2024 GMT Not After : Jan 6 18:18:01 2025 GMT Subject: CN=925231fe-514d-47b7-bf91-ebbbb1770b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:6b:a0:90:93:c6:6c:a7:81:76:ca:9c:f9: 0f:85:a9:54:f8:b5:51:27:1d:d7:ac:ee:3f:11:b3: fe:83:44:ae:3f:cd:48:f8:8d:99:28:2f:df:0a:4e: 86:9b:29:ca:26:d5:ea:e3:42:dd:6f:b5:6b:4b:0e: ff:8c:06:59:93:d5:c5:d3:0d:07:23:a0:6f:b8:30: 41:ff:b7:48:63:68:cb:8b:2a:a4:23:b0:bb:11:07: 3b:33:25:45:2d:f2:4e:52:2a:98:8c:85:04:25:c2: 8b:a5:70:88:96:d8:e2:27:78:0d:95:04:4d:72:87: 28:eb:b8:2d:a4:56:d2:f8:23:59:49:d8:8c:38:59: 25:7c:7d:33:02:a0:78:bb:99:30:d2:8a:71:02:0c: 8a:1d:a0:ba:aa:b5:04:16:10:f8:fb:62:6e:de:40: 30:ad:29:c3:49:76:f5:91:41:92:55:f5:4f:da:a3: f9:86:b7:88:ae:37:ca:43:f5:14:da:9a:23:df:ed: 2c:c7:ab:76:75:09:89:f3:35:95:4d:3f:b5:88:f4: 39:71:c3:7f:ae:05:95:7a:2c:dd:12:b8:ec:af:b5: 8f:55:c6:32:79:f7:d8:fb:cb:9b:c7:6d:ac:f0:f9: 8f:42:99:4b:72:2b:3a:f6:86:95:93:69:9e:67:57: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:52:F6:97:8D:89:3F:CE:2D:B4:20:03:9E:F0:F4:30:8B:48:EA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3450c19e-0fd1-3623-812c-c078eb3ba143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:58:e2:72:82:16:e8:27:84:4f:4a:3b:c1:a0:92:b9:4c:6d: 9c:ca:69:07:b1:40:ea:64:35:4e:ee:cd:1b:fa:57:7d:da:a3: 4f:3f:5b:e1:03:66:81:61:3d:e1:02:d4:79:ba:d3:fb:2f:99: 7f:7a:a3:e8:a0:35:2e:d8:45:24:af:7a:a4:86:58:9c:ae:14: 5e:6b:69:2c:17:cf:92:1d:40:bb:b5:b9:9b:52:da:59:ec:2f: 0c:20:43:a2:58:94:9b:c7:f6:7f:ed:7a:2a:84:51:9d:28:ee: 4f:40:b0:1f:84:64:2e:da:2f:66:c9:30:15:dd:a2:7d:4c:18: 7f:ac:d9:50:45:90:8a:ca:a7:0f:a3:eb:64:94:02:9b:e7:11: 88:8e:3e:0f:6d:ae:5e:eb:d5:1a:61:d5:dc:b0:25:26:8e:fb: 63:57:78:70:5a:ed:17:9b:d4:c1:5a:94:3a:18:6d:de:de:37: af:03:bf:a5:2c:40:d2:39:fb:fb:75:96:25:46:7d:00:80:98: 67:68:b5:bf:39:06:bb:8b:f4:f8:7f:5e:87:ff:db:e5:f1:c8: ed:1c:8b:83:03:8d:52:81:08:ea:4f:0f:f1:93:b0:4e:35:2e: 3d:b9:4e:41:76:df:9d:bd:61:ff:f2:a5:6e:b9:f6:45:11:0a: 53:d7:fe:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5q1snwUHjtKqUMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwODE3MTgwMVoXDTI1MDEwNjE4MTgwMVowLzEtMCsGA1UEAxMk OTI1MjMxZmUtNTE0ZC00N2I3LWJmOTEtZWJiYmIxNzcwYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCBroJCTxmyngXbKnPkPhalU+LVRJx3XrO4/ EbP+g0SuP81I+I2ZKC/fCk6GmynKJtXq40Ldb7VrSw7/jAZZk9XF0w0HI6BvuDBB /7dIY2jLiyqkI7C7EQc7MyVFLfJOUiqYjIUEJcKLpXCIltjiJ3gNlQRNcoco67gt pFbS+CNZSdiMOFklfH0zAqB4u5kw0opxAgyKHaC6qrUEFhD4+2Ju3kAwrSnDSXb1 kUGSVfVP2qP5hreIrjfKQ/UU2poj3+0sx6t2dQmJ8zWVTT+1iPQ5ccN/rgWVeizd Erjsr7WPVcYyeffY+8ubx22s8PmPQplLcis69oaVk2meZ1dgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANS9peNiT/OLbQgA57w9DCLSOpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ1MGMxOWUtMGZkMS0z NjIzLTgxMmMtYzA3OGViM2JhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Y4nKCFugnhE9KO8GgkrlMbZzKaQexQOpkNU7uzRv6V33ao08/W+ED ZoFhPeEC1Hm60/svmX96o+igNS7YRSSveqSGWJyuFF5raSwXz5IdQLu1uZtS2lns LwwgQ6JYlJvH9n/teiqEUZ0o7k9AsB+EZC7aL2bJMBXdon1MGH+s2VBFkIrKpw+j 62SUApvnEYiOPg9trl7r1Rph1dywJSaO+2NXeHBa7Reb1MFalDoYbd7eN68Dv6Us QNI5+/t1liVGfQCAmGdotb85BruL9Ph/Xof/2+XxyO0ci4MDjVKBCOpPD/GTsE41 Lj25TkF23529Yf/ypW659kURClPX/hM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org