$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa File: 41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa (raw, json) Hash identifier: qEvI3siggBZ8KlsFCSwoyTbVhoq05HR79xkKw59NoDU= Subject key identifier: 09:1F:B8:BE:55:2A:58:0A:15:AC:39:0C:0C:91:F1:88:43:AE:78:36 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858478E1BD1B10C76052A53D615C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d1:b1:0c:76:05:2a:53:d6:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=b9324b2f-46e0-4e48-9607-49d11e208f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:dc:48:a7:d2:15:c4:fd:a4:5e:1e:75:5b: 6b:04:b5:1d:00:26:46:53:c0:dc:d4:b5:ef:00:74: 89:90:9b:0c:5c:ca:72:8b:12:c6:33:42:b0:e2:32: f5:81:78:1e:a5:28:0a:31:1c:ca:a4:0f:c2:03:b2: b3:cf:36:3d:fd:63:0b:5e:7a:15:95:4b:ad:60:85: 67:15:aa:25:f2:a0:6a:81:44:98:70:5f:19:71:ca: 97:53:fb:22:bf:e9:5d:a3:7b:62:a4:cf:83:3a:60: aa:f8:31:9d:6a:32:d6:9d:97:d6:b5:64:82:b0:ae: 37:9a:f6:f8:8a:4c:1a:20:b9:e0:b0:c3:ca:b9:a5: 9f:6d:5e:ac:6c:88:40:60:c4:42:3e:96:3d:69:47: 78:be:ab:ce:14:a3:fc:aa:18:5a:56:b8:49:cb:88: 4a:64:85:f0:4f:f0:fe:c8:b1:2b:13:9b:65:a5:ee: 57:e0:9a:ba:f2:7d:ef:83:71:92:79:3e:a3:d2:f5: 91:3d:c2:76:15:ad:5c:ca:00:5a:ed:1f:b9:a8:6b: 84:e5:cb:a6:73:ea:03:90:69:bc:26:9e:61:82:de: c0:93:77:9b:29:c5:7b:ea:8c:bc:32:18:61:3f:19: 86:cb:1c:00:ad:cd:76:08:dc:62:b3:cc:b5:03:99: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:B8:BE:55:2A:58:0A:15:AC:39:0C:0C:91:F1:88:43:AE:78:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c3:8a:bd:f7:29:fa:bb:8a:48:4b:cf:16:1b:3f:2c:8a:29: 76:f2:46:3f:86:bd:03:8a:da:0e:b6:ac:8e:88:69:b6:38:1a: d8:a4:69:e6:72:e1:97:79:63:38:a3:53:ab:f2:06:1d:b0:68: 21:e6:13:54:74:17:48:30:f5:31:d3:2a:8b:5f:e9:b6:e9:72: 03:fd:91:4c:58:2b:4d:5f:20:4e:31:41:ad:a9:7b:48:4e:9c: 0e:15:8c:ca:6a:3c:4f:ed:21:97:61:da:1c:f8:56:fe:4c:80: 73:26:ad:d7:7f:3a:85:0d:bd:4f:81:56:e4:b6:71:08:44:1e: e7:3e:b1:8a:6b:73:6e:e2:c8:d7:98:da:fd:15:04:98:8a:7b: 12:ef:05:20:14:9a:47:db:50:16:0f:19:bc:d1:04:3c:c1:88: 64:91:ef:65:51:82:a8:62:7d:a1:cb:97:a0:a3:30:df:43:8e: 5c:85:fe:04:21:20:b6:0c:3c:27:65:a8:ad:87:07:87:d3:02: f1:9c:3b:d2:54:e0:a4:42:9f:df:d3:a7:a8:04:99:6d:c5:82: 98:8d:23:be:95:ef:f2:02:c6:6b:90:53:43:ef:dc:63:a8:26: a1:1d:4f:d3:98:84:a1:bf:8c:3d:aa:6a:b6:49:12:4a:b5:ce: 5b:a9:d5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9GxDHYFKlPWFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk YjkzMjRiMmYtNDZlMC00ZTQ4LTk2MDctNDlkMTFlMjA4ZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRPcSKfSFcT9pF4edVtrBLUdACZGU8Dc1LXv AHSJkJsMXMpyixLGM0Kw4jL1gXgepSgKMRzKpA/CA7KzzzY9/WMLXnoVlUutYIVn Faol8qBqgUSYcF8ZccqXU/siv+ldo3tipM+DOmCq+DGdajLWnZfWtWSCsK43mvb4 ikwaILngsMPKuaWfbV6sbIhAYMRCPpY9aUd4vqvOFKP8qhhaVrhJy4hKZIXwT/D+ yLErE5tlpe5X4Jq68n3vg3GSeT6j0vWRPcJ2Fa1cygBa7R+5qGuE5cumc+oDkGm8 Jp5hgt7Ak3ebKcV76oy8MhhhPxmGyxwArc12CNxis8y1A5nHfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkfuL5VKlgKFaw5DAyR8YhDrng2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDFkNzU5MjMtNGZlZC0z NTI5LTljNWYtYzVlOWZmNDBkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXDir33Kfq7ikhLzxYbPyyKKXbyRj+GvQOK2g62rI6IabY4GtikaeZy 4Zd5YzijU6vyBh2waCHmE1R0F0gw9THTKotf6bbpcgP9kUxYK01fIE4xQa2pe0hO nA4VjMpqPE/tIZdh2hz4Vv5MgHMmrdd/OoUNvU+BVuS2cQhEHuc+sYprc27iyNeY 2v0VBJiKexLvBSAUmkfbUBYPGbzRBDzBiGSR72VRgqhifaHLl6CjMN9DjlyF/gQh ILYMPCdlqK2HB4fTAvGcO9JU4KRCn9/Tp6gEmW3FgpiNI76V7/ICxmuQU0Pv3GOo JqEdT9OYhKG/jD2qarZJEkq1zlup1Sc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org