$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa File: 3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa (raw, json) Hash identifier: 1AjCN3GOEae1spxR8qKpwGQKkpDI46yYGNea8MCx8g4= Subject key identifier: 6E:D7:67:47:29:96:80:88:12:08:98:BB:90:A4:7A:CF:AF:1E:2E:11 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584785BBB0E6FF340057A61A2640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa Signing time: Sun 13 Oct 2024 01:00:31 +0000 ROA not before: Sun 13 Oct 2024 01:00:31 +0000 ROA not after: Sat 11 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:bb:b0:e6:ff:34:00:57:a6:1a:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 13 01:00:31 2024 GMT Not After : Jan 11 02:00:31 2025 GMT Subject: CN=fc05ede5-6600-4bbb-8c71-99e3ce40236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:af:ff:ff:ab:b0:89:0e:63:7e:10:81:11: a1:69:d1:95:5d:e9:73:ea:da:8d:9e:2e:fb:b9:11: e1:4c:36:80:ea:4f:3e:00:96:57:15:ca:19:72:55: b3:9e:ee:a9:37:92:ed:54:5a:cd:07:b5:3b:0b:8e: 7e:73:16:84:c7:fb:49:d8:7e:c4:46:af:41:6f:3c: c9:fc:42:99:98:a8:7e:65:f7:e7:a7:e5:ee:f2:34: aa:ff:06:83:20:5e:2e:26:5e:1b:34:a7:23:bd:5b: af:8f:41:17:6f:ba:d7:ec:19:82:4c:ce:c4:07:ca: 58:5a:84:c8:81:77:5f:df:f5:dc:dc:3d:ec:e0:8c: 5b:3f:fe:41:3c:59:d8:d1:9b:5c:22:98:54:d5:d1: 0b:cf:2e:97:42:ba:b8:c0:8b:f9:d1:80:2a:ee:79: d5:f6:b3:52:35:ea:54:72:07:4a:4e:ac:13:2b:df: f0:c3:95:d1:29:55:5f:c9:5c:29:1f:29:bd:b4:e0: 67:0e:16:ee:52:3b:df:2a:9c:93:ac:ad:42:74:ca: 3d:ea:2d:2e:44:e1:a0:87:f3:e5:43:87:9d:57:e5: 7b:73:63:99:0d:dd:1a:29:1a:db:a8:58:31:3c:93: 65:39:8f:9c:c9:24:17:ab:43:9a:ee:fa:1e:28:7c: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D7:67:47:29:96:80:88:12:08:98:BB:90:A4:7A:CF:AF:1E:2E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:32:77:db:7d:e1:3c:44:f2:81:d1:48:63:81:77:cb:6e:e0: b9:80:80:55:f8:f9:af:4a:e6:be:92:78:d6:36:3e:d2:23:52: ae:6f:af:0a:32:76:41:0c:b4:9d:ce:ee:71:ad:7e:f5:c2:3a: f9:47:90:1a:3f:9a:6d:c4:ff:54:a3:fb:6f:83:9d:9f:bf:c4: df:1b:45:c6:76:95:93:29:ac:22:2f:f1:d3:37:de:e6:57:41: 31:7d:a1:ad:f0:1b:fd:ad:3b:9d:d8:72:b6:75:de:c6:26:67: 59:fa:e7:8e:25:37:8e:fd:16:0e:03:2b:e2:68:2d:47:fb:39: b8:be:85:5d:63:be:7b:cc:9d:85:23:20:ca:f4:0c:aa:06:6c: e6:15:87:3e:20:bd:02:1a:03:09:01:ec:14:1c:9f:50:53:73: 64:f1:d5:8a:04:67:71:23:2f:6e:2a:d9:64:0d:41:29:65:6a: fe:7f:90:4b:7c:5d:a5:46:64:89:f6:93:15:c5:65:01:df:57: 1f:8f:6b:20:09:d1:d8:f0:bf:51:42:00:df:58:b9:fb:b5:d4: fc:90:39:df:17:4e:32:36:07:77:f8:b4:aa:06:c3:8d:6b:06: 8d:68:cd:40:99:bf:4f:33:a5:a1:9f:0f:f4:45:90:db:e6:d2: e1:68:df:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu7Dm/zQAV6YaJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmMwNWVkZTUtNjYwMC00YmJiLThjNzEtOTllM2NlNDAyMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH+v//+rsIkOY34QgRGhadGVXelz6tqNni77 uRHhTDaA6k8+AJZXFcoZclWznu6pN5LtVFrNB7U7C45+cxaEx/tJ2H7ERq9BbzzJ /EKZmKh+Zffnp+Xu8jSq/waDIF4uJl4bNKcjvVuvj0EXb7rX7BmCTM7EB8pYWoTI gXdf3/Xc3D3s4IxbP/5BPFnY0ZtcIphU1dELzy6XQrq4wIv50YAq7nnV9rNSNepU cgdKTqwTK9/ww5XRKVVfyVwpHym9tOBnDhbuUjvfKpyTrK1CdMo96i0uROGgh/Pl Q4edV+V7c2OZDd0aKRrbqFgxPJNlOY+cySQXq0Oa7voeKHw7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7XZ0cploCIEgiYu5Ckes+vHi4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FkYTNjMTAtY2JjMi0z NThhLWFkYjktMzcwYTE2YjEzYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkyd9t94TxE8oHRSGOBd8tu4LmAgFX4+a9K5r6SeNY2PtIjUq5vrwoy dkEMtJ3O7nGtfvXCOvlHkBo/mm3E/1Sj+2+DnZ+/xN8bRcZ2lZMprCIv8dM33uZX QTF9oa3wG/2tO53YcrZ13sYmZ1n6544lN479Fg4DK+JoLUf7Obi+hV1jvnvMnYUj IMr0DKoGbOYVhz4gvQIaAwkB7BQcn1BTc2Tx1YoEZ3EjL24q2WQNQSllav5/kEt8 XaVGZIn2kxXFZQHfVx+PayAJ0djwv1FCAN9Yufu11PyQOd8XTjI2B3f4tKoGw41r Bo1ozUCZv08zpaGfD/RFkNvm0uFo32E= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org