$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa File: 3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa (raw, json) Hash identifier: FIy5S04eqvRzK++ZLZ9NOlALKKRvKygUyUnS/Kcbx9k= Subject key identifier: D6:0A:B0:F2:CF:4B:23:0A:F8:EC:C0:68:2C:41:BD:1E:2F:9D:0D:45 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858478E1BD27CE57FABD12E9D0E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.157.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d2:7c:e5:7f:ab:d1:2e:9d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=0e7f7ecd-6183-4caf-81b4-0b67f9accb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:9b:00:25:bc:3b:f1:ab:de:e9:bf:e6:fa: d1:b4:cb:d5:28:20:fe:7b:1e:2c:9b:e2:7a:85:c5: e9:86:d2:af:b6:ef:0b:62:ba:05:24:2c:db:01:5b: fb:30:ee:79:a8:3b:99:7c:1f:87:92:c0:c2:63:68: 76:28:32:81:72:91:d7:e4:47:57:8a:3e:99:97:ff: 61:7a:c8:0d:17:b6:fb:cf:c9:1f:4b:ce:55:92:bd: c6:a8:c1:a8:da:c4:eb:26:e1:0b:23:49:02:bd:19: d5:da:db:04:5c:a3:9c:1b:ce:5c:0b:0b:10:e6:49: d1:60:5c:b1:48:63:ae:ff:bf:54:9a:4d:5c:ae:e8: 5f:0e:1f:60:49:a4:a5:09:62:64:d1:39:81:30:2e: c2:2a:1c:f1:df:ba:61:a0:51:3b:74:e5:fa:14:ac: 56:0d:ef:ca:60:8b:88:67:dc:50:3e:13:97:b5:25: 46:db:f8:75:8b:3b:51:06:b8:4c:6d:5a:09:68:f1: 82:66:d3:b7:6a:bd:1e:db:0b:7e:57:0e:9b:09:e0: 12:69:8e:66:a8:73:e9:17:d1:84:79:f1:3a:8f:a3: 37:8f:b2:c6:dd:8d:27:3c:98:00:d1:19:61:75:71: d1:dd:7e:f3:cf:43:e1:13:88:fb:b1:c8:62:e4:0a: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:B0:F2:CF:4B:23:0A:F8:EC:C0:68:2C:41:BD:1E:2F:9D:0D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:aa:2a:a2:08:a7:c3:0f:4e:07:26:e0:58:9a:76:f1:5d:9b: 28:08:76:0a:48:a0:31:54:73:0f:16:ee:34:93:1a:9b:49:42: 66:e3:34:97:a2:d6:ec:4f:7a:c8:39:d2:f9:07:db:fa:d6:12: 97:84:01:2c:a1:92:82:a7:1f:de:a6:96:bc:37:ab:a4:1a:13: e9:70:19:d9:b8:fa:d9:ef:ca:b0:d4:d7:c7:9e:13:a0:17:ea: bd:e8:43:95:d9:6c:90:61:10:6f:9a:2f:db:7e:44:f7:ae:1f: b8:4b:7e:d3:6b:72:23:e3:7e:26:f8:a6:de:23:cc:46:65:59: f1:5a:93:bb:a1:47:31:94:3b:4c:c1:6b:1e:72:57:5f:98:bd: 0b:16:ec:cd:77:a6:ca:77:f2:66:2a:41:42:50:8d:ef:eb:bc: 6f:6d:69:ea:c2:84:93:96:75:93:35:4b:13:35:93:0e:e7:f0: fb:45:a5:e5:2b:bb:b3:a0:d3:e2:8e:32:d0:b1:d1:c5:81:d6: 12:48:d7:bb:30:8f:e1:8a:00:a5:08:46:62:ed:ee:4b:41:eb: 3a:75:6a:84:f9:c7:f6:f1:4d:27:10:4a:62:81:8c:25:55:d3: bf:65:cc:5e:f2:a3:27:07:e1:e4:38:a7:18:a9:c8:62:ad:f8: 8d:ad:16:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9J85X+r0S6dDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MGU3ZjdlY2QtNjE4My00Y2FmLTgxYjQtMGI2N2Y5YWNjYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ybACW8O/Gr3um/5vrRtMvVKCD+ex4sm+J6 hcXphtKvtu8LYroFJCzbAVv7MO55qDuZfB+HksDCY2h2KDKBcpHX5EdXij6Zl/9h esgNF7b7z8kfS85Vkr3GqMGo2sTrJuELI0kCvRnV2tsEXKOcG85cCwsQ5knRYFyx SGOu/79Umk1cruhfDh9gSaSlCWJk0TmBMC7CKhzx37phoFE7dOX6FKxWDe/KYIuI Z9xQPhOXtSVG2/h1iztRBrhMbVoJaPGCZtO3ar0e2wt+Vw6bCeASaY5mqHPpF9GE efE6j6M3j7LG3Y0nPJgA0RlhdXHR3X7zz0PhE4j7schi5AqqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYKsPLPSyMK+OzAaCxBvR4vnQ1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FlYTJkNWEtYTBiZS0z Y2QwLWI5YTMtOGVlYzNhMTUwNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2qKqIIp8MPTgcm4FiadvFdmygIdgpIoDFUcw8W7jSTGptJQmbjNJei 1uxPesg50vkH2/rWEpeEASyhkoKnH96mlrw3q6QaE+lwGdm4+tnvyrDU18eeE6AX 6r3oQ5XZbJBhEG+aL9t+RPeuH7hLftNrciPjfib4pt4jzEZlWfFak7uhRzGUO0zB ax5yV1+YvQsW7M13psp38mYqQUJQje/rvG9taerChJOWdZM1SxM1kw7n8PtFpeUr u7Og0+KOMtCx0cWB1hJI17swj+GKAKUIRmLt7ktB6zp1aoT5x/bxTScQSmKBjCVV 079lzF7yoycH4eQ4pxipyGKt+I2tFis= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org