$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa File: 5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa (raw, json) Hash identifier: PnghVFlk/omNXqLnjhFOjsXkijzMt85reRIQojM151E= Subject key identifier: A9:56:2B:95:54:5F:C7:F8:FF:FB:34:3E:A0:FF:23:94:EC:9F:87:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847CA3F8AFCE70DBACCA35F8AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:8a:fc:e7:0d:ba:cc:a3:5f:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=9cddd28d-e49a-4cb0-aa7f-1af5bfb8c310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:e2:14:75:32:16:72:96:c5:ca:f4:70:64: f1:1c:d1:40:89:d6:de:9e:ba:71:d8:1d:93:dd:05: 87:ef:17:70:1e:18:13:01:7b:3c:27:41:9e:e6:32: 26:a9:9d:06:43:62:62:76:09:79:56:04:21:6d:56: d7:ec:9d:a4:56:38:b1:a6:91:36:1b:71:d7:43:68: 00:cc:69:82:6d:e1:bd:8c:b4:80:e5:36:66:28:d9: bf:30:14:47:70:8a:4d:a2:6e:87:9c:6c:e6:71:8f: 20:99:a7:64:3d:56:a7:04:a4:cc:45:ba:2f:aa:82: de:8c:6d:d1:da:64:b1:af:c3:66:31:e2:a2:22:db: 28:3d:24:8c:9e:81:e9:da:ac:34:3e:d7:66:c3:00: b2:37:03:43:70:ed:ab:75:53:ff:bc:ee:eb:67:a5: ff:78:d7:3b:23:9b:87:65:81:46:34:58:1d:26:90: 21:50:b3:7e:98:57:9e:40:b9:e1:43:97:ce:f4:37: ac:5e:e5:88:17:db:81:55:41:fc:04:5b:df:b0:a3: 56:cd:ea:d7:79:42:38:ff:02:a5:65:1f:0a:e7:36: e5:7c:74:82:1e:c5:e9:c8:6c:73:24:db:f6:32:1e: b1:2b:a0:98:ac:e2:15:79:91:75:f8:75:73:cb:d1: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:56:2B:95:54:5F:C7:F8:FF:FB:34:3E:A0:FF:23:94:EC:9F:87:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:47:d6:6f:83:1e:30:a9:13:12:6d:2c:0d:de:d9:10:d3:89: 43:b4:e3:58:f9:2b:b1:91:9f:b4:d3:51:97:90:a0:3a:0b:7f: 75:c1:67:05:de:8e:30:48:4b:04:d1:eb:e8:02:51:99:c2:cf: a8:24:2b:4b:26:9d:81:40:d2:c6:57:00:6f:3d:ab:2a:eb:d1: 19:55:3b:d8:20:d5:22:9d:7e:d4:4d:73:f5:16:d2:e1:37:84: c4:b5:2e:34:df:76:5f:55:68:39:ff:5a:4a:b5:cd:c7:99:0d: 1a:c5:5e:17:4e:39:4b:96:cd:56:f3:6e:c8:69:30:df:95:5f: f0:f7:65:a8:52:75:89:e5:bb:f9:f7:cd:d3:4a:47:74:9f:bd: 34:c8:5e:78:cd:0a:2a:97:38:41:6b:d9:03:30:f6:d2:94:70: c5:30:55:cc:c2:77:82:eb:33:00:3e:76:3e:31:fc:f8:cd:a9: bd:ed:e2:48:f8:d8:54:09:21:1a:46:d9:f4:e8:e5:34:f4:ce: 91:ee:c3:8c:fc:70:f5:b0:a6:30:b1:46:77:d9:1f:d5:36:58: 34:2c:98:ea:cd:74:36:88:01:21:64:02:72:7d:8e:68:8a:85: 18:56:82:24:1d:f2:e1:96:be:fd:12:29:06:fb:85:b9:31:36: a0:68:85:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4r85w26zKNfisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWNkZGQyOGQtZTQ5YS00Y2IwLWFhN2YtMWFmNWJmYjhjMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKbiFHUyFnKWxcr0cGTxHNFAidbenrpx2B2T 3QWH7xdwHhgTAXs8J0Ge5jImqZ0GQ2Jidgl5VgQhbVbX7J2kVjixppE2G3HXQ2gA zGmCbeG9jLSA5TZmKNm/MBRHcIpNom6HnGzmcY8gmadkPVanBKTMRbovqoLejG3R 2mSxr8NmMeKiItsoPSSMnoHp2qw0PtdmwwCyNwNDcO2rdVP/vO7rZ6X/eNc7I5uH ZYFGNFgdJpAhULN+mFeeQLnhQ5fO9DesXuWIF9uBVUH8BFvfsKNWzerXeUI4/wKl ZR8K5zblfHSCHsXpyGxzJNv2Mh6xK6CYrOIVeZF1+HVzy9H+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlWK5VUX8f4//s0PqD/I5Tsn4f8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0OWRhOWItMzgzOS0z ZDA3LWJjYWQtMGM5MWUxMWJhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5H1m+DHjCpExJtLA3e2RDTiUO041j5K7GRn7TTUZeQoDoLf3XBZwXe jjBISwTR6+gCUZnCz6gkK0smnYFA0sZXAG89qyrr0RlVO9gg1SKdftRNc/UW0uE3 hMS1LjTfdl9VaDn/Wkq1zceZDRrFXhdOOUuWzVbzbshpMN+VX/D3ZahSdYnlu/n3 zdNKR3SfvTTIXnjNCiqXOEFr2QMw9tKUcMUwVczCd4LrMwA+dj4x/PjNqb3t4kj4 2FQJIRpG2fTo5TT0zpHuw4z8cPWwpjCxRnfZH9U2WDQsmOrNdDaIASFkAnJ9jmiK hRhWgiQd8uGWvv0SKQb7hbkxNqBohRk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:05 2024 by rpki-client on console-ams.rpki-client.org