$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa File: 3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa (raw, json) Hash identifier: zoSwT2v+z3LruCaSh1wVNjuwt/dMPVdzXSVFtzOR20U= Subject key identifier: BD:09:8B:7B:C2:62:57:AE:99:AD:4F:4D:4C:3A:F6:C7:6C:A0:39:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847BD91594EB1890DC4E6B3A840 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa Signing time: Sat 02 Nov 2024 01:00:31 +0000 ROA not before: Sat 02 Nov 2024 01:00:31 +0000 ROA not after: Fri 31 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bd:91:59:4e:b1:89:0d:c4:e6:b3:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 2 01:00:31 2024 GMT Not After : Jan 31 02:00:31 2025 GMT Subject: CN=961099a2-bfae-47e1-82f7-3d7da8fa8390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:8b:b7:a3:ef:8f:6a:78:ac:5e:47:1d:6d: 82:90:dc:39:4a:88:57:f9:02:13:58:90:61:d0:b5: 2d:d1:8d:42:35:6a:ed:85:88:f1:e9:07:88:36:1d: ca:4b:0a:5d:ad:07:64:78:26:35:2d:29:72:62:6f: a9:ed:8d:93:49:ab:29:6a:18:f6:1d:1d:ea:19:9b: 5e:22:0a:bf:69:8b:bc:f2:e2:50:f9:2a:f2:3c:b7: 3a:09:ca:87:e0:8b:d5:2e:7f:b6:25:de:9b:0b:ee: 0a:c7:52:55:69:f9:76:31:84:3b:da:2a:0e:26:16: 2e:e4:c3:1e:63:e7:ba:2a:b3:5a:8f:ac:f7:0d:8b: 57:5c:7e:89:2b:45:1f:92:53:b0:ed:5b:5b:96:84: 4e:c4:4e:ba:44:e1:06:e4:dd:87:c5:25:14:1a:c2: 1c:58:36:8a:a2:9e:4d:1f:9a:1f:2b:6f:16:9b:48: 1f:8d:42:c3:b6:be:23:71:67:07:a5:0d:55:3e:ad: 36:ba:86:18:bd:47:0a:bd:b9:4c:06:55:5e:95:eb: c9:8c:b3:87:e2:62:20:da:cb:78:60:47:1d:a5:dd: 70:0d:b6:3c:ed:00:df:1b:7f:59:69:99:30:80:a8: 1f:58:23:bf:ea:c0:6d:42:ea:17:ce:2b:78:a6:bb: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:09:8B:7B:C2:62:57:AE:99:AD:4F:4D:4C:3A:F6:C7:6C:A0:39:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:22:8f:40:07:06:64:df:3c:67:89:8a:b8:17:0a:08:d3:ad: 24:78:d3:39:0d:b1:e0:fd:6b:03:79:5d:bd:c8:f7:e9:9e:b7: 4c:60:24:fc:60:2d:c5:c9:69:48:4e:a8:d1:a8:f1:d2:98:b9: 27:ee:c5:41:e4:f8:b1:ec:70:f9:15:01:65:e0:7c:4c:b1:82: 4b:ba:2d:bb:fb:f9:f4:5d:40:db:93:74:1f:4d:0b:13:cd:26: 86:29:31:55:45:16:6d:5b:c0:93:8c:6e:62:e5:99:51:0a:52: 38:68:07:0c:05:ee:75:b7:c6:59:86:de:68:97:b9:16:ea:ad: 8f:c7:7e:2a:cf:06:f0:87:3b:ee:a1:c5:d4:30:2a:73:c5:14: 15:e7:a8:29:b6:a1:e8:e6:74:cf:b4:55:04:56:16:31:9c:4c: 3b:0f:17:76:93:51:e8:c0:59:1c:74:96:4c:94:c4:e6:26:49: d1:a7:f4:b9:c9:15:04:a2:66:4a:99:93:03:46:b0:f6:a6:50: ed:f9:fc:68:b0:29:b4:7f:b0:52:9b:c2:7d:a7:14:d0:83:9b: 2d:6c:38:d1:da:c6:b6:38:cf:dc:b0:66:3b:0a:2d:a2:a8:66: 2a:96:92:f8:1a:a0:28:01:de:2e:8d:03:16:7d:1e:66:5c:f1: 48:3d:63:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVlOsYkNxOazqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTYxMDk5YTItYmZhZS00N2UxLTgyZjctM2Q3ZGE4ZmE4MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSyLt6Pvj2p4rF5HHW2CkNw5SohX+QITWJBh 0LUt0Y1CNWrthYjx6QeINh3KSwpdrQdkeCY1LSlyYm+p7Y2TSaspahj2HR3qGZte Igq/aYu88uJQ+SryPLc6CcqH4IvVLn+2Jd6bC+4Kx1JVafl2MYQ72ioOJhYu5MMe Y+e6KrNaj6z3DYtXXH6JK0UfklOw7VtbloROxE66ROEG5N2HxSUUGsIcWDaKop5N H5ofK28Wm0gfjULDtr4jcWcHpQ1VPq02uoYYvUcKvblMBlVelevJjLOH4mIg2st4 YEcdpd1wDbY87QDfG39ZaZkwgKgfWCO/6sBtQuoXzit4prsCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0Ji3vCYleuma1PTUw69sdsoDmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2RjMGZhZDctN2ZiNi0z ZGRkLTlhMTEtZTdhZWFmOTE2NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0ij0AHBmTfPGeJirgXCgjTrSR40zkNseD9awN5Xb3I9+met0xgJPxg LcXJaUhOqNGo8dKYuSfuxUHk+LHscPkVAWXgfEyxgku6Lbv7+fRdQNuTdB9NCxPN JoYpMVVFFm1bwJOMbmLlmVEKUjhoBwwF7nW3xlmG3miXuRbqrY/HfirPBvCHO+6h xdQwKnPFFBXnqCm2oejmdM+0VQRWFjGcTDsPF3aTUejAWRx0lkyUxOYmSdGn9LnJ FQSiZkqZkwNGsPamUO35/GiwKbR/sFKbwn2nFNCDmy1sONHaxrY4z9ywZjsKLaKo ZiqWkvgaoCgB3i6NAxZ9HmZc8Ug9Y7k= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org