$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa File: 437bc310-8748-3d28-b170-0b50da76f3c2.roa (raw, json) Hash identifier: h9YFuY3olEiGPjUOItF+uvmtGaXjV01SLArihKN1gqo= Subject key identifier: 32:16:AC:97:79:50:EF:63:D2:90:39:7D:88:2C:BC:DB:01:52:6E:85 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847BD9159BF798A45F239EB6300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa Signing time: Sat 02 Nov 2024 01:00:31 +0000 ROA not before: Sat 02 Nov 2024 01:00:31 +0000 ROA not after: Fri 31 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bd:91:59:bf:79:8a:45:f2:39:eb:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 2 01:00:31 2024 GMT Not After : Jan 31 02:00:31 2025 GMT Subject: CN=dd6c243d-31f8-4b9d-b81d-cc9dd81ea4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:28:16:51:8b:70:c8:ed:03:53:98:94:66: 94:2f:ff:f6:04:7d:fc:2c:cd:10:95:88:00:9d:4b: 00:28:e4:af:ea:76:c9:5d:c3:50:40:16:a2:cc:9c: 5f:30:2e:43:01:3c:b7:51:9b:99:78:ec:0b:61:9e: 8f:ac:ae:dc:b8:7a:38:3a:94:72:0b:67:b9:3e:d3: 5a:68:3d:fa:c9:ac:e6:9c:d6:f9:e2:10:2e:aa:41: cc:96:f8:0c:98:39:04:5c:a8:4b:86:b5:23:bb:a0: cf:c5:d2:5c:a9:a5:21:bf:e3:f2:11:5c:48:5c:c7: d3:f8:f1:70:1b:6f:59:85:fe:a2:ea:b7:c5:8f:db: e6:ae:f8:8a:14:3e:47:f8:09:94:42:b0:c2:85:e2: a1:f9:99:b8:38:39:58:41:a3:ee:d3:10:10:cf:1b: f1:bf:59:9f:1a:fd:8d:2d:9f:25:e8:08:0a:3a:a1: 40:3a:85:6c:82:04:d7:e9:84:a7:ad:f0:9a:2c:d3: 01:4a:f8:ad:14:25:f1:c8:42:57:b6:dd:9e:3e:fe: 22:35:8c:88:6f:62:9d:21:09:69:e5:1d:79:c3:ac: 4f:96:f2:ed:bf:7b:2b:d9:f5:f5:3e:37:1e:69:9b: d6:27:33:1e:c2:e1:8f:e0:d9:a5:24:a7:70:20:59: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:16:AC:97:79:50:EF:63:D2:90:39:7D:88:2C:BC:DB:01:52:6E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:cd:f1:3d:01:c9:77:a7:d8:3e:d5:9d:2d:df:2b:83:be:0f: a2:a9:b2:7c:42:46:41:31:4e:ac:82:ca:91:b5:5d:17:db:4a: a7:e6:4d:76:5d:5d:f2:45:bc:58:42:31:8d:a4:01:6a:dc:8c: 60:29:f0:a7:34:fc:ef:27:bf:cb:71:84:da:5f:02:d5:31:25: 36:f5:30:75:33:e9:89:62:59:c4:85:f8:e9:4c:f6:23:a0:fd: 35:93:f0:64:b1:37:58:2c:2b:33:5b:8f:92:3e:09:a6:83:e6: 94:bc:16:f9:f2:58:cb:9a:ae:90:1e:f4:ac:15:94:b3:a9:a1: e2:b8:6d:49:ad:15:81:d9:89:f7:5a:f2:fd:05:29:c6:db:83: 57:ff:4e:de:7a:50:a6:48:41:2e:e0:3d:74:f0:23:3b:55:55: 63:ac:4d:0b:d3:23:cd:db:d2:88:3b:b7:49:75:3a:d7:76:b7: 09:3b:83:22:36:cb:8a:b9:5e:01:76:3a:63:7a:5e:f8:68:83: e4:c3:b4:27:f4:b7:8a:74:44:d9:97:b5:e7:32:24:03:16:c5: a4:18:05:1a:2f:8c:ad:f3:d4:60:6e:a8:d1:88:90:16:85:9a: db:ba:1c:a1:56:23:d0:41:33:86:e7:6d:0c:fb:5c:80:5f:d1: 96:43:1e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVm/eYpF8jnrYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGQ2YzI0M2QtMzFmOC00YjlkLWI4MWQtY2M5ZGQ4MWVhNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMIoFlGLcMjtA1OYlGaUL//2BH38LM0QlYgA nUsAKOSv6nbJXcNQQBaizJxfMC5DATy3UZuZeOwLYZ6PrK7cuHo4OpRyC2e5PtNa aD36yazmnNb54hAuqkHMlvgMmDkEXKhLhrUju6DPxdJcqaUhv+PyEVxIXMfT+PFw G29Zhf6i6rfFj9vmrviKFD5H+AmUQrDCheKh+Zm4ODlYQaPu0xAQzxvxv1mfGv2N LZ8l6AgKOqFAOoVsggTX6YSnrfCaLNMBSvitFCXxyEJXtt2ePv4iNYyIb2KdIQlp 5R15w6xPlvLtv3sr2fX1PjceaZvWJzMewuGP4NmlJKdwIFnpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIWrJd5UO9j0pA5fYgsvNsBUm6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM3YmMzMTAtODc0OC0z ZDI4LWIxNzAtMGI1MGRhNzZmM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnN8T0ByXen2D7VnS3fK4O+D6KpsnxCRkExTqyCypG1XRfbSqfmTXZd XfJFvFhCMY2kAWrcjGAp8Kc0/O8nv8txhNpfAtUxJTb1MHUz6YliWcSF+OlM9iOg /TWT8GSxN1gsKzNbj5I+CaaD5pS8FvnyWMuarpAe9KwVlLOpoeK4bUmtFYHZifda 8v0FKcbbg1f/Tt56UKZIQS7gPXTwIztVVWOsTQvTI83b0og7t0l1Otd2twk7gyI2 y4q5XgF2OmN6Xvhog+TDtCf0t4p0RNmXtecyJAMWxaQYBRovjK3z1GBuqNGIkBaF mtu6HKFWI9BBM4bnbQz7XIBf0ZZDHoE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org