$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa File: 3c589ef7-d75d-3bfa-8141-2f00031c4044.roa (raw, json) Hash identifier: UjLJx000fz608bSlvonLfcfURC4hZY4IGE26/jx4yi4= Subject key identifier: 77:00:6F:25:42:69:F4:45:B5:67:74:16:E1:B9:2D:A9:7C:82:4B:45 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584776611762631C1DB89DFB8C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:17:62:63:1c:1d:b8:9d:fb:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=b078e417-bec2-4757-bbea-7079b6cd6fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:90:69:49:7a:40:44:79:b9:7e:82:75:56: 17:77:3f:ea:0c:cc:07:ca:14:a2:5c:3b:0f:24:80: 67:f3:19:ed:5c:54:fa:07:8f:ac:3c:1d:20:cc:77: 37:e3:50:17:91:3b:e4:9e:5a:ba:5e:81:d2:ed:90: a8:ea:d7:5e:1a:a5:17:dd:b1:f4:07:2e:dc:1b:84: d5:bc:91:75:c5:fc:4d:3e:e0:4c:3e:71:80:2b:46: 3a:86:61:7c:97:de:f8:83:49:58:22:9c:f1:8b:a5: f9:ef:e8:3e:f7:1d:c0:0f:b0:14:f4:92:98:9e:49: 35:5e:9b:e6:e7:d4:a3:72:c5:63:fb:3f:2d:d5:a5: a8:37:7f:24:65:24:b8:54:01:91:e4:42:31:bc:b2: fc:a1:2f:fb:d1:6c:70:b8:df:35:e7:9e:f0:ba:a8: 61:af:8d:82:83:b0:72:0c:95:6a:be:94:be:52:74: c9:c0:92:42:67:35:20:db:8f:ab:72:81:97:9e:d6: df:50:91:54:43:8e:a7:ef:5f:8d:8e:ac:97:9b:7a: 4e:a9:d0:ec:27:4a:f7:d2:f8:fb:ea:36:d9:ef:fe: 6e:6a:8b:7c:77:fa:9a:5d:a3:b5:45:9b:10:ac:a8: 06:e9:2f:3b:67:68:66:d9:ce:41:9e:b3:8a:11:2a: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:6F:25:42:69:F4:45:B5:67:74:16:E1:B9:2D:A9:7C:82:4B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0c:67:38:f8:40:35:04:f6:b0:21:0f:87:4d:15:06:64:e7: 5a:06:e0:35:e1:c0:e5:b2:69:31:d0:8d:fd:1d:31:ba:f4:72: 35:22:ab:60:bc:44:61:b0:46:bb:68:4c:68:74:17:0d:00:db: 44:62:1b:6a:db:64:68:94:5a:af:f4:db:48:fb:5d:83:28:05: 31:f7:ac:7e:c6:51:76:ac:3b:fd:bd:d0:f9:b2:12:87:02:25: 11:5c:a9:02:a7:03:21:2f:5f:42:52:de:27:2e:ad:bd:db:c0: 43:45:62:c5:e0:b6:d5:f6:87:bd:3f:b4:6a:9d:af:1f:cf:25: b1:12:ef:83:63:31:4f:e4:58:8d:2b:2e:c9:d3:83:c1:59:ea: 73:b3:94:95:f2:39:e5:dc:f3:da:53:3b:03:5b:63:64:b0:c3: de:c0:9d:d4:06:1e:89:44:f8:e6:8c:46:c4:bc:99:3b:ad:ed: 3c:29:b2:ea:09:be:06:7e:d5:6d:46:2f:d2:71:0b:71:2a:54: 77:45:8a:2b:62:b4:1d:9e:9c:7d:04:db:95:9a:2e:59:71:38: 4b:ac:54:50:30:a7:a1:3c:51:9f:f7:44:5a:e3:9b:62:cf:57: 6f:73:f5:9e:89:87:fe:c7:ea:21:9d:29:7d:df:a0:b6:af:62: c9:d2:85:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRdiYxwduJ37jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YjA3OGU0MTctYmVjMi00NzU3LWJiZWEtNzA3OWI2Y2Q2ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1mQaUl6QER5uX6CdVYXdz/qDMwHyhSiXDsP JIBn8xntXFT6B4+sPB0gzHc341AXkTvknlq6XoHS7ZCo6tdeGqUX3bH0By7cG4TV vJF1xfxNPuBMPnGAK0Y6hmF8l974g0lYIpzxi6X57+g+9x3AD7AU9JKYnkk1Xpvm 59SjcsVj+z8t1aWoN38kZSS4VAGR5EIxvLL8oS/70WxwuN81557wuqhhr42Cg7By DJVqvpS+UnTJwJJCZzUg24+rcoGXntbfUJFUQ46n71+NjqyXm3pOqdDsJ0r30vj7 6jbZ7/5uaot8d/qaXaO1RZsQrKgG6S87Z2hm2c5BnrOKESpzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcAbyVCafRFtWd0FuG5Lal8gktFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2M1ODllZjctZDc1ZC0z YmZhLTgxNDEtMmYwMDAzMWM0MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4MZzj4QDUE9rAhD4dNFQZk51oG4DXhwOWyaTHQjf0dMbr0cjUiq2C8 RGGwRrtoTGh0Fw0A20RiG2rbZGiUWq/020j7XYMoBTH3rH7GUXasO/290PmyEocC JRFcqQKnAyEvX0JS3icurb3bwENFYsXgttX2h70/tGqdrx/PJbES74NjMU/kWI0r LsnTg8FZ6nOzlJXyOeXc89pTOwNbY2Sww97AndQGHolE+OaMRsS8mTut7TwpsuoJ vgZ+1W1GL9JxC3EqVHdFiititB2enH0E25WaLllxOEusVFAwp6E8UZ/3RFrjm2LP V29z9Z6Jh/7H6iGdKX3foLavYsnShW8= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org