$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa File: 381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa (raw, json) Hash identifier: IpwUyi7IN5hEzYbpfkOxQVMwamqd9UQNJ5CoGfz3J1A= Subject key identifier: 6F:A8:B2:7C:98:84:C4:E3:0E:8A:56:41:87:73:18:8E:49:A0:83:FF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858473FF0AAF0F2543EF593AD1200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:aa:f0:f2:54:3e:f5:93:ad:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=661fee21-2a62-48b1-9173-4576c47ffc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:4f:31:ba:6b:ff:d1:4e:aa:ab:42:b7:8a: 90:14:c1:e0:f3:0e:9a:ab:cc:1d:50:09:f4:f9:fc: 88:d9:ec:56:16:df:22:d7:eb:3b:8b:e1:91:5f:a2: 92:d7:f9:98:d0:2d:48:df:6a:ce:90:41:96:2c:87: c7:0c:69:ee:13:8e:a7:b5:7a:72:61:18:98:0c:ac: f5:3b:de:97:42:dd:82:c9:f8:92:5b:cf:44:10:fe: 3c:dd:03:40:1e:52:67:2a:f5:61:ff:84:51:51:d9: b4:d6:fb:29:05:29:06:cd:9d:f3:89:65:e3:a3:f0: f4:c9:16:87:87:a4:77:fa:44:52:d3:ae:51:ad:11: 1f:3c:7b:da:55:56:73:ac:d6:15:4c:f7:94:cd:13: a5:6f:fb:af:5c:49:08:12:08:10:5b:ab:d4:38:40: 15:d4:a3:2c:d9:ac:f5:bb:af:37:63:53:ab:23:eb: a3:2a:51:8e:a8:fa:69:8b:e4:d8:d6:3c:31:de:1a: 23:2b:1d:5f:54:b4:fb:6b:55:08:c1:40:c2:52:8a: 82:9b:d8:f1:1e:8f:43:3d:43:79:16:0a:43:f1:cb: 13:c7:74:2b:86:2c:2a:8b:73:0b:99:bc:11:95:9c: 62:0c:a9:d5:d0:a0:9c:7d:4a:72:2f:8e:fc:b4:38: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A8:B2:7C:98:84:C4:E3:0E:8A:56:41:87:73:18:8E:49:A0:83:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:af:c0:e5:29:41:3f:e8:4c:a8:5d:49:4c:9c:9b:73:2c:9d: 1e:12:3b:fa:e5:0b:6b:ac:be:f1:18:c5:e9:c0:17:47:07:2f: 1b:80:46:0d:84:a0:03:28:76:31:4b:41:5b:4f:da:4b:03:c8: 45:67:cf:ac:e5:e8:37:f2:5e:98:17:dd:46:a7:a8:cf:f4:aa: 85:cd:37:14:22:12:36:dd:65:16:e0:ee:a0:0e:14:ae:f8:5f: c1:cf:e0:3f:fe:9c:a8:20:cc:e7:ca:d5:3d:3b:4a:d6:cc:90: 70:68:62:f7:ea:49:98:e4:08:2e:cc:52:42:12:59:9f:60:aa: 63:5f:c4:89:ab:2d:59:a8:c8:6e:d1:4c:97:c0:d7:8c:bd:ee: 23:e4:b8:6e:2d:87:0e:4f:e5:16:cd:27:5e:50:a2:77:0e:e3: 18:5c:55:fd:3f:0b:08:63:f1:de:9a:4c:d0:bd:e4:f2:98:1b: 46:e1:d2:c1:f2:68:28:a1:67:a3:cf:2f:05:b2:58:dc:3f:ed: 96:3d:38:91:20:36:dd:0f:3f:46:b5:ec:c3:cc:de:ad:f0:0f: 73:8b:21:f2:85:fa:43:41:79:52:b2:b7:de:c7:64:23:d6:56: 86:06:ed:bb:c7:13:1c:cd:a6:bb:c9:1b:a5:54:3e:25:44:3f: 79:8f:e9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8Krw8lQ+9ZOtEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NjYxZmVlMjEtMmE2Mi00OGIxLTkxNzMtNDU3NmM0N2ZmYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbBPMbpr/9FOqqtCt4qQFMHg8w6aq8wdUAn0 +fyI2exWFt8i1+s7i+GRX6KS1/mY0C1I32rOkEGWLIfHDGnuE46ntXpyYRiYDKz1 O96XQt2CyfiSW89EEP483QNAHlJnKvVh/4RRUdm01vspBSkGzZ3ziWXjo/D0yRaH h6R3+kRS065RrREfPHvaVVZzrNYVTPeUzROlb/uvXEkIEggQW6vUOEAV1KMs2az1 u683Y1OrI+ujKlGOqPppi+TY1jwx3hojKx1fVLT7a1UIwUDCUoqCm9jxHo9DPUN5 FgpD8csTx3Qrhiwqi3MLmbwRlZxiDKnV0KCcfUpyL478tDiGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+osnyYhMTjDopWQYdzGI5JoIP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzgxYmNiODktY2QxNC0z YmExLWJjZWItMjYwZjk3ZmY2MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKvwOUpQT/oTKhdSUycm3MsnR4SO/rlC2usvvEYxenAF0cHLxuARg2E oAModjFLQVtP2ksDyEVnz6zl6DfyXpgX3UanqM/0qoXNNxQiEjbdZRbg7qAOFK74 X8HP4D/+nKggzOfK1T07StbMkHBoYvfqSZjkCC7MUkISWZ9gqmNfxImrLVmoyG7R TJfA14y97iPkuG4thw5P5RbNJ15QoncO4xhcVf0/Cwhj8d6aTNC95PKYG0bh0sHy aCihZ6PPLwWyWNw/7ZY9OJEgNt0PP0a17MPM3q3wD3OLIfKF+kNBeVKyt97HZCPW VoYG7bvHExzNprvJG6VUPiVEP3mP6XA= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org