$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa File: 54229034-9041-3ee3-bfcd-6d8d02da3700.roa (raw, json) Hash identifier: 8znYF+oE5A1OG7foW7q9+bfAnv0VBuwtsy6A/G5PrRg= Subject key identifier: FB:B5:EE:37:50:98:C6:E6:07:F8:7A:C8:63:29:DE:D4:62:59:17:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858473FF0AACEC8A07861578DA780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:aa:ce:c8:a0:78:61:57:8d:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=2a7497c7-efae-4665-9fce-67ad3fa97f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:13:de:0c:6c:cc:95:c3:d4:4b:dc:c3:bd: b5:11:77:3c:f1:eb:18:f7:4d:fc:81:b4:37:ac:c5: ee:db:93:d6:be:c7:a0:b3:fd:bb:a5:14:07:d1:77: 22:64:dc:4c:02:4c:15:b5:57:08:86:1e:ef:29:5b: a5:28:e7:60:54:5c:dd:0b:8d:b2:1e:7f:a1:2b:01: 98:f9:18:25:c3:ef:86:42:a5:40:06:af:11:b9:17: 2c:49:45:58:5b:6c:fa:d5:d6:fd:e7:b4:ac:d3:fd: d2:a0:5f:0d:42:cc:96:f9:d2:cb:52:81:22:39:31: 7e:53:73:8b:fa:9c:54:67:74:79:6d:b2:d9:66:e1: f5:50:e2:37:32:f8:36:a3:59:a9:95:81:c3:0c:d3: 80:2b:00:3a:bd:0a:84:9d:0a:94:66:f9:24:e8:3a: 3a:e0:f0:c3:1d:b9:23:8c:8e:46:8d:1b:33:b2:31: b0:c1:66:5a:89:5e:27:92:8a:97:b5:9d:9c:b7:14: 65:3c:b7:f4:f2:75:56:68:4e:18:a0:7c:69:d4:b2: ce:9d:c1:8e:ac:39:a9:03:1a:4d:94:05:7c:41:02: 41:1f:89:3c:2f:07:95:97:79:85:4b:01:4a:4e:1f: 26:ff:63:b9:d6:45:8e:a5:cc:9c:55:7f:a3:ea:3a: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:EE:37:50:98:C6:E6:07:F8:7A:C8:63:29:DE:D4:62:59:17:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:82:6d:7b:f4:90:b1:16:0d:aa:8f:c2:03:ec:c5:51:99:8b: 5b:e2:bd:c1:bf:11:4d:9f:45:68:30:f1:de:33:c4:b1:0d:8d: 89:03:44:f3:e2:32:6f:80:c7:a3:b2:77:e2:2f:5a:27:dc:36: 60:d8:a9:b5:5b:22:19:48:11:6d:e6:f1:a6:23:74:98:08:c8: d1:7c:4f:12:85:20:51:be:e5:27:e7:f3:72:95:ec:b6:16:51: b0:f9:0d:7d:5a:5e:4f:8c:04:71:bc:2a:4b:a3:e2:da:e5:37: ec:5c:6f:6e:43:c9:46:73:b6:83:5f:a8:e0:66:76:8c:5f:38: 1f:87:c7:00:c8:37:99:1b:34:68:4e:b2:44:dc:1c:1d:1f:e0: f7:e2:de:c2:9f:c5:b4:98:3b:8f:1e:27:82:be:22:7b:ba:82: ed:fe:d6:af:9a:6e:88:83:13:bc:e8:ca:22:d5:8e:11:bd:61: 46:69:79:93:0f:3f:37:62:5c:09:7c:4d:e6:05:42:7c:96:5b: 8f:d7:be:f5:5b:02:7d:63:c9:67:db:61:7f:b3:67:7b:80:fe: 09:af:f4:3c:e9:48:40:88:30:10:40:41:77:12:27:41:ed:03: 0f:25:3a:df:41:d3:47:94:dd:8c:8c:c8:de:64:35:0d:bf:60: a5:d0:16:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KrOyKB4YVeNp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MmE3NDk3YzctZWZhZS00NjY1LTlmY2UtNjdhZDNmYTk3ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ET3gxszJXD1Evcw721EXc88esY9038gbQ3 rMXu25PWvsegs/27pRQH0XciZNxMAkwVtVcIhh7vKVulKOdgVFzdC42yHn+hKwGY +Rglw++GQqVABq8RuRcsSUVYW2z61db957Ss0/3SoF8NQsyW+dLLUoEiOTF+U3OL +pxUZ3R5bbLZZuH1UOI3Mvg2o1mplYHDDNOAKwA6vQqEnQqUZvkk6Do64PDDHbkj jI5GjRszsjGwwWZaiV4nkoqXtZ2ctxRlPLf08nVWaE4YoHxp1LLOncGOrDmpAxpN lAV8QQJBH4k8LweVl3mFSwFKTh8m/2O51kWOpcycVX+j6jqRdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu17jdQmMbmB/h6yGMp3tRiWRePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQyMjkwMzQtOTA0MS0z ZWUzLWJmY2QtNmQ4ZDAyZGEzNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImCbXv0kLEWDaqPwgPsxVGZi1vivcG/EU2fRWgw8d4zxLENjYkDRPPi Mm+Ax6Oyd+IvWifcNmDYqbVbIhlIEW3m8aYjdJgIyNF8TxKFIFG+5Sfn83KV7LYW UbD5DX1aXk+MBHG8Kkuj4trlN+xcb25DyUZztoNfqOBmdoxfOB+HxwDIN5kbNGhO skTcHB0f4Pfi3sKfxbSYO48eJ4K+Inu6gu3+1q+aboiDE7zoyiLVjhG9YUZpeZMP PzdiXAl8TeYFQnyWW4/XvvVbAn1jyWfbYX+zZ3uA/gmv9DzpSECIMBBAQXcSJ0Ht Aw8lOt9B00eU3YyMyN5kNQ2/YKXQFn8= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org