$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa File: 37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa (raw, json) Hash identifier: cRmCLg16XyIoCy/WLKrKvjvgnbxgzT/YgmeNf3suqX0= Subject key identifier: 12:73:CF:81:B9:B2:41:CF:8D:84:EE:52:50:95:D6:D2:8D:E6:3C:39 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847201986579737F054A8054D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa Signing time: Fri 06 Sep 2024 15:17:15 +0000 ROA not before: Fri 06 Sep 2024 15:17:15 +0000 ROA not after: Thu 05 Dec 2024 16:17:15 +0000 asID: 8069 IP address blocks: 20.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:19:86:57:97:37:f0:54:a8:05:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 15:17:15 2024 GMT Not After : Dec 5 16:17:15 2024 GMT Subject: CN=efd89004-4287-405e-aeb4-6db929ea324a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:00:a5:aa:d9:cc:3f:34:dd:2a:44:12:e2: d7:bc:5a:91:87:c7:06:14:bc:50:be:8e:d2:11:ea: d8:8c:f7:57:ef:6d:7f:35:fc:a7:97:33:49:84:61: 01:7b:e2:c0:e1:1c:e5:43:2a:91:10:dd:3d:e5:09: 22:7c:0f:30:34:d9:5d:4c:89:c0:3a:c9:b6:b9:b4: da:cf:a8:b4:a3:a7:13:be:24:5f:0d:e9:16:4f:44: 4e:a9:bf:78:4f:ff:ac:3e:34:7a:9f:72:94:ef:b6: 02:19:b5:87:fc:9a:75:90:93:15:b6:6a:06:c8:a4: af:5e:c6:5f:79:e5:ad:e5:8d:3c:1b:a8:d5:9e:e6: 4f:25:f8:67:b6:56:ac:bd:86:1d:04:93:d4:fb:f8: 02:85:e1:a8:b5:14:14:d7:dc:a2:a8:2d:2a:b4:73: 27:c6:4e:c4:3c:a3:64:74:db:2c:ac:9b:07:9f:f5: 57:66:ab:d4:b0:22:1f:d2:a9:2c:94:d2:c3:03:32: f6:d5:8a:b4:9b:5c:94:ab:fd:76:92:71:e7:0b:b4: 14:3a:b2:80:91:26:c0:8d:51:3d:11:4b:8e:af:c2: ea:aa:63:85:6e:26:17:33:16:4c:f1:3b:86:e4:99: 5d:7f:1d:95:b3:53:ee:82:4d:92:de:5f:82:8f:6a: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:73:CF:81:B9:B2:41:CF:8D:84:EE:52:50:95:D6:D2:8D:E6:3C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b0:18:1c:c2:3e:75:35:9f:db:8e:be:cf:f4:77:0a:db:e0: 4d:f6:80:fb:0c:d9:b6:1a:05:8a:1f:bc:bd:34:7d:e4:cf:20: 71:d2:02:98:6c:c8:bc:09:27:eb:90:3d:9b:44:e4:6f:9c:79: 9c:ba:a7:16:da:79:fa:ba:39:ce:d2:ff:41:6f:63:e3:e1:0a: b7:08:51:c3:cc:50:e2:63:86:6f:6c:d2:1a:25:25:64:4e:50: e6:64:15:d8:86:46:fd:8e:d9:4e:81:8c:8a:c7:fb:2b:62:bb: be:99:e1:fd:22:5e:09:de:d2:bf:4e:d9:ef:af:55:8b:73:c0: 38:c8:1d:d3:8c:65:9e:a9:40:81:06:58:15:8a:f1:3b:95:06: 0c:cb:4d:e6:fc:d2:3c:e3:e4:5b:b1:05:f1:78:46:75:72:cf: 04:41:bb:12:bf:82:f5:0b:7a:fd:0c:86:f0:73:da:d8:3f:b9: a0:87:8a:e5:c7:7f:4c:8f:6f:f6:24:e7:39:68:b5:25:1c:13: 09:76:be:e1:e6:e5:24:15:ed:0c:c1:86:e9:cf:f6:04:a9:59: 8d:a0:1a:7b:4d:95:bc:ea:97:50:85:c0:f8:88:ea:1b:89:6d: 88:7c:b8:c4:b6:3d:36:81:ce:57:0a:8d:0b:d1:21:02:53:71: 89:49:13:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgGYZXlzfwVKgFTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkwNjE1MTcxNVoXDTI0MTIwNTE2MTcxNVowLzEtMCsGA1UEAxMk ZWZkODkwMDQtNDI4Ny00MDVlLWFlYjQtNmRiOTI5ZWEzMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BAAparZzD803SpEEuLXvFqRh8cGFLxQvo7S EerYjPdX721/NfynlzNJhGEBe+LA4RzlQyqREN095QkifA8wNNldTInAOsm2ubTa z6i0o6cTviRfDekWT0ROqb94T/+sPjR6n3KU77YCGbWH/Jp1kJMVtmoGyKSvXsZf eeWt5Y08G6jVnuZPJfhntlasvYYdBJPU+/gCheGotRQU19yiqC0qtHMnxk7EPKNk dNssrJsHn/VXZqvUsCIf0qkslNLDAzL21Yq0m1yUq/12knHnC7QUOrKAkSbAjVE9 EUuOr8LqqmOFbiYXMxZM8TuG5Jldfx2Vs1Pugk2S3l+Cj2on4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJzz4G5skHPjYTuUlCV1tKN5jw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzc1ODBjMGMtMmE1NS0z M2IzLTgzNzAtZjFkZTBkZjdhM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqwGBzCPnU1n9uOvs/0dwrb4E32gPsM2bYaBYofvL00feTPIHHSAphs yLwJJ+uQPZtE5G+ceZy6pxbaefq6Oc7S/0FvY+PhCrcIUcPMUOJjhm9s0holJWRO UOZkFdiGRv2O2U6BjIrH+ytiu76Z4f0iXgne0r9O2e+vVYtzwDjIHdOMZZ6pQIEG WBWK8TuVBgzLTeb80jzj5FuxBfF4RnVyzwRBuxK/gvULev0MhvBz2tg/uaCHiuXH f0yPb/Yk5zlotSUcEwl2vuHm5SQV7QzBhunP9gSpWY2gGntNlbzql1CFwPiI6huJ bYh8uMS2PTaBzlcKjQvRIQJTcYlJE6U= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org