$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json) Hash identifier: OXAjYgqLh508rJzc6/X2N2lSCYoZZFLJMQD2gCVWblQ= Subject key identifier: A2:DD:45:23:4E:EA:8F:9F:C3:F6:5A:E7:52:E2:77:F9:E4:57:C1:60 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584731FB20780B5E4D30413EFD60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa Signing time: Fri 13 Sep 2024 01:00:32 +0000 ROA not before: Fri 13 Sep 2024 01:00:32 +0000 ROA not after: Thu 12 Dec 2024 02:00:32 +0000 asID: 8069 IP address blocks: 20.157.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:fb:20:78:0b:5e:4d:30:41:3e:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 01:00:32 2024 GMT Not After : Dec 12 02:00:32 2024 GMT Subject: CN=b805ca03-a9de-4838-bbd6-a369e4db7da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:f9:6f:14:07:ab:cd:e8:ab:ee:b6:44:97: bc:b7:98:78:85:49:ae:0d:fb:e3:38:38:ca:bf:22: 80:89:81:64:0f:19:55:16:a7:72:65:77:6c:06:d4: af:21:e7:96:be:41:f6:1f:01:f5:c9:56:75:d3:ce: bb:48:5e:a3:c9:d3:d5:2f:88:d2:26:49:55:ec:29: 6d:f2:10:42:9e:0e:e0:b7:53:d4:c7:fc:5d:a0:3f: 70:0e:28:1c:b2:2c:23:3a:fb:1c:0b:fd:8d:b2:9a: fd:35:03:87:3f:e9:0b:b4:6d:33:f4:0b:eb:2f:7c: c6:f7:97:41:5e:2e:31:ec:e2:3a:0b:c6:13:66:6b: a1:a6:a2:2b:b9:be:14:97:bb:f3:6a:53:12:42:65: ef:0c:92:2d:7c:3f:15:6c:fa:3d:a2:61:b0:c4:27: dc:8d:f8:00:42:c2:96:e3:da:1c:86:67:a5:65:ed: f1:3b:da:e7:ba:b0:7d:9a:4b:56:76:c9:c3:06:a1: 05:cb:75:57:34:03:71:43:0c:2d:f5:80:0f:03:b9: af:fd:13:cf:7b:45:1b:d0:4a:31:63:9b:f5:53:71: 05:8d:dd:bf:d8:9c:9d:81:dc:bd:90:f3:fc:c3:73: f9:83:2c:9a:8c:db:fc:72:b1:08:b7:05:3e:38:10: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DD:45:23:4E:EA:8F:9F:C3:F6:5A:E7:52:E2:77:F9:E4:57:C1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:49:f5:7e:d4:4e:93:10:be:ca:1e:de:d2:d0:ee:d0:fb:9c: 17:14:19:6c:80:a6:08:fe:64:c1:eb:c9:fb:21:02:48:a4:00: b5:a9:98:98:f3:f3:a1:77:d3:4a:31:62:61:c9:b6:8b:9b:8a: b0:54:8d:17:a3:93:91:65:4a:d7:9f:c5:41:2e:e8:a4:5e:5d: 39:93:16:2e:8a:58:9b:bb:0d:9b:d1:27:a3:91:94:c3:fa:89: d9:77:e5:62:ab:81:5a:24:5e:c5:f1:84:27:c2:48:4d:18:5f: d0:c1:0b:42:40:6d:26:fa:4a:78:0b:0c:f8:cf:c4:96:9a:5e: 42:6a:f5:04:9b:81:10:93:9f:0f:98:0b:28:08:f2:46:26:9f: ed:24:5b:2d:ae:61:3f:97:ab:e8:37:47:55:05:c3:7e:e3:32: 85:43:a8:cc:a6:25:39:11:ac:af:a3:ae:52:6b:b5:50:17:09: 05:c2:39:8d:3f:84:59:39:ee:c1:75:6f:95:6b:08:e9:77:5c: 2f:11:b3:de:22:0d:7b:3b:ae:de:05:27:fa:e8:de:54:eb:9a: 99:64:e0:2d:dd:86:70:4a:2d:52:16:fb:37:38:ab:28:a0:18: e8:9a:3f:13:94:46:0b:98:55:a8:a6:7f:be:22:34:e8:8e:05: 49:23:9b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+yB4C15NMEE+/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk YjgwNWNhMDMtYTlkZS00ODM4LWJiZDYtYTM2OWU0ZGI3ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBn5bxQHq83oq+62RJe8t5h4hUmuDfvjODjK vyKAiYFkDxlVFqdyZXdsBtSvIeeWvkH2HwH1yVZ10867SF6jydPVL4jSJklV7Clt 8hBCng7gt1PUx/xdoD9wDigcsiwjOvscC/2Nspr9NQOHP+kLtG0z9AvrL3zG95dB Xi4x7OI6C8YTZmuhpqIrub4Ul7vzalMSQmXvDJItfD8VbPo9omGwxCfcjfgAQsKW 49ochmelZe3xO9rnurB9mktWdsnDBqEFy3VXNANxQwwt9YAPA7mv/RPPe0Ub0Eox Y5v1U3EFjd2/2Jydgdy9kPP8w3P5gyyajNv8crEItwU+OBACiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLdRSNO6o+fw/Za51Lid/nkV8FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU2N2Q0OTQtYWNhYi0z MDQ3LTg5NmUtODNlMDgyZWU0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFJ9X7UTpMQvsoe3tLQ7tD7nBcUGWyApgj+ZMHryfshAkikALWpmJjz 86F300oxYmHJtoubirBUjRejk5FlStefxUEu6KReXTmTFi6KWJu7DZvRJ6ORlMP6 idl35WKrgVokXsXxhCfCSE0YX9DBC0JAbSb6SngLDPjPxJaaXkJq9QSbgRCTnw+Y CygI8kYmn+0kWy2uYT+Xq+g3R1UFw37jMoVDqMymJTkRrK+jrlJrtVAXCQXCOY0/ hFk57sF1b5VrCOl3XC8Rs94iDXs7rt4FJ/ro3lTrmplk4C3dhnBKLVIW+zc4qyig GOiaPxOURguYVaimf74iNOiOBUkjm+M= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:49 2024 by rpki-client on console-fra.rpki-client.org