$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json) Hash identifier: Qmyu4Um/aieo/vIh4+H9ofpi4wCoPb5AZyp8WXC3NiY= Subject key identifier: F1:F4:21:1B:56:A1:B9:DE:0D:4D:43:C9:2A:C4:DC:1B:D5:EC:16:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584726D08FA2A7B7C0DF121B5280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:8f:a2:a7:b7:c0:df:12:1b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=e5423914-4f55-42f3-93b1-a80171df1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:75:a3:7f:cc:b1:0a:a9:bd:1a:ad:ac:77:5b: 2d:61:2e:31:1f:b9:fa:91:a4:5c:51:36:da:5f:d4: af:6e:8a:37:af:a8:76:f8:3d:f0:04:76:93:1f:33: dd:32:f0:bb:64:bc:ed:61:64:8d:1d:1d:bb:1f:14: 9d:9e:7b:42:f4:25:b0:27:33:27:38:10:50:04:1c: 9a:bb:65:c0:8c:97:69:65:aa:60:de:3f:9f:28:fe: fe:6d:03:0a:01:a4:af:96:54:e7:3d:a2:3d:cd:ad: 83:e6:fb:e6:fb:2f:cb:1f:3f:1b:c8:51:b9:50:26: 76:4a:fb:eb:04:31:4c:72:1a:c8:b5:cc:c7:52:bf: c6:43:28:be:68:34:ed:de:70:26:1c:9e:3d:08:1d: 3e:96:75:de:74:c2:e3:f6:53:48:76:95:7d:54:d8: d1:a8:e8:f1:c4:68:03:09:2d:8d:38:32:de:a8:0f: 6e:e8:f6:b8:23:69:59:57:b6:53:57:0c:8b:12:ee: e3:66:e3:fd:0f:0b:4e:a9:da:d7:66:ea:39:3c:8f: d6:fc:c7:24:e5:58:79:59:d7:b7:78:a7:a7:54:b1: 18:ad:31:6d:82:32:6a:2d:a9:5f:8e:21:14:80:db: ac:ba:cd:60:99:d5:51:eb:aa:49:79:fb:fc:5d:a4: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:21:1B:56:A1:B9:DE:0D:4D:43:C9:2A:C4:DC:1B:D5:EC:16:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7e:9c:a4:f5:85:c2:e6:59:c7:7a:0d:00:c0:2d:9a:bb:de: 75:e4:18:5f:f4:be:51:8d:45:eb:2a:ce:49:05:5c:97:43:b4: a5:94:e4:f8:c0:89:9b:00:73:97:67:79:76:de:85:50:1c:c2: cb:f5:51:8d:21:6f:fb:70:26:56:65:d1:88:2d:27:dc:fa:3f: 4c:cd:7c:1a:17:9f:57:66:11:10:d8:ef:36:c4:62:a3:6e:a2: f5:e8:7a:2f:a7:7a:86:9d:c6:b3:5f:de:0c:3a:49:ac:7e:dd: 35:43:27:0b:65:c3:73:f6:85:b3:51:18:27:da:40:c7:05:44: 25:a7:6b:4b:e5:bc:5b:33:ea:f0:d0:04:cd:cd:84:6f:56:37: 56:55:7e:ee:33:ce:61:cc:d1:84:35:b7:26:fc:27:17:51:d4: 6a:ea:49:0e:3d:3d:a4:fd:c2:20:ea:f0:a1:54:c8:e6:2e:b5: 76:d7:a5:0f:6b:93:c5:fd:b2:6d:22:db:6e:71:b4:11:43:99: 7d:6c:fa:f5:05:ac:1c:7c:70:86:62:eb:b5:65:aa:42:53:3a: d0:6f:c5:d1:0a:95:36:d5:fc:5b:cc:b5:2b:de:52:93:9d:44: 73:b4:e6:d5:9b:3d:79:59:6a:29:89:1b:a0:c3:ab:99:fa:28: 31:83:95:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0I+ip7fA3xIbUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZTU0MjM5MTQtNGY1NS00MmYzLTkzYjEtYTgwMTcxZGYxYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHWjf8yxCqm9Gq2sd1stYS4xH7n6kaRcUTba X9Svboo3r6h2+D3wBHaTHzPdMvC7ZLztYWSNHR27HxSdnntC9CWwJzMnOBBQBBya u2XAjJdpZapg3j+fKP7+bQMKAaSvllTnPaI9za2D5vvm+y/LHz8byFG5UCZ2Svvr BDFMchrItczHUr/GQyi+aDTt3nAmHJ49CB0+lnXedMLj9lNIdpV9VNjRqOjxxGgD CS2NODLeqA9u6Pa4I2lZV7ZTVwyLEu7jZuP9DwtOqdrXZuo5PI/W/Mck5Vh5Wde3 eKenVLEYrTFtgjJqLalfjiEUgNusus1gmdVR66pJefv8XaTCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH0IRtWobneDU1DySrE3BvV7BZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF+nKT1hcLmWcd6DQDALZq73nXkGF/0vlGNResqzkkFXJdDtKWU5PjA iZsAc5dneXbehVAcwsv1UY0hb/twJlZl0YgtJ9z6P0zNfBoXn1dmERDY7zbEYqNu ovXoei+neoadxrNf3gw6Sax+3TVDJwtlw3P2hbNRGCfaQMcFRCWna0vlvFsz6vDQ BM3NhG9WN1ZVfu4zzmHM0YQ1tyb8JxdR1GrqSQ49PaT9wiDq8KFUyOYutXbXpQ9r k8X9sm0i225xtBFDmX1s+vUFrBx8cIZi67VlqkJTOtBvxdEKlTbV/FvMtSveUpOd RHO05tWbPXlZaimJG6DDq5n6KDGDlfk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org