$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa File: 6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa (raw, json) Hash identifier: szFky3mpemYPKOZZfoJPu0heEUwliyr1LeOQY1OQSmc= Subject key identifier: BB:AA:87:60:5E:31:01:BA:B6:3A:73:B2:54:C2:A1:67:A7:32:08:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858478E1BD1DA3AA20CAAD667E550 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d1:da:3a:a2:0c:aa:d6:67:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=0efdc1e2-7dfd-43a6-b987-bb5ae520a513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:70:fa:87:a8:2e:70:8c:d7:2c:da:40:16: 0d:f5:44:6a:ea:e7:f7:7a:09:1a:b8:90:a0:5b:f6: 46:10:a8:57:cc:5e:33:01:0d:22:1c:10:47:2e:80: 4e:17:32:71:e4:7c:74:e4:c6:a1:be:b5:ec:e9:bc: b9:6b:0b:6e:44:f2:d1:33:f8:e5:a6:96:b7:b8:4b: 6b:cf:65:42:2a:16:cf:7d:b8:c2:b0:80:cd:1c:74: 7f:e8:68:c1:66:06:0e:6e:d5:62:aa:b9:f1:f2:a2: 01:9a:ba:63:17:63:c7:31:bf:3a:0e:ff:ab:11:bc: 9e:b5:53:b9:f7:8a:d4:86:fc:83:fb:f0:76:d3:b8: e3:5f:86:a6:54:3d:2a:42:32:12:a3:b1:2d:2d:d3: e1:73:49:5b:e7:b3:7f:a6:34:74:c8:c6:55:c9:ab: 28:3a:6b:2e:c6:76:f0:60:e4:40:0e:e9:ce:81:e6: f9:cf:9d:9d:b8:8f:ae:16:07:65:c6:63:d4:de:ed: ce:0a:0e:2a:e2:23:c1:1e:93:70:0d:84:77:63:85: e8:55:b2:b5:d0:05:47:e5:94:76:96:9b:2b:47:0a: 1b:c7:cb:f6:55:e1:f3:f8:86:27:8c:42:a6:9c:59: 5d:27:cd:77:42:2d:6c:3e:b1:50:b8:b5:58:11:30: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:87:60:5E:31:01:BA:B6:3A:73:B2:54:C2:A1:67:A7:32:08:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:dd:fb:14:47:d6:81:07:55:91:f5:b8:24:fb:36:ac:b6: 23:a1:af:5f:12:b3:0b:44:2e:0b:82:b9:26:43:28:69:d5:ff: f4:05:ea:1c:5b:d0:47:2a:c2:ff:38:6a:57:b8:cc:02:e3:5b: 26:7b:3c:19:99:8e:24:92:83:7b:d9:1b:56:f9:03:73:bf:a6: 0b:b9:fd:44:7f:1a:71:3c:88:0b:6b:72:55:f4:a8:7b:d8:f6: bb:66:4b:87:eb:b7:6c:04:f6:73:13:6a:6e:ad:02:2c:17:3a: 98:86:18:b8:21:45:9c:cc:eb:02:da:69:fb:6d:22:6c:ca:90: 10:ca:2e:20:d9:f9:31:88:19:b5:9e:29:b9:41:88:89:dc:17: d0:e8:14:4f:03:07:0d:8a:bf:2f:45:1c:f9:07:3a:5e:b7:5c: 3a:0e:c7:45:81:71:59:89:18:00:24:ec:cc:b8:6b:3f:49:3c: fa:ca:33:c6:d7:df:4d:64:52:d6:0e:eb:44:08:e6:ca:45:02: 3f:39:73:bc:5f:7f:7c:ed:d5:e6:02:b8:2b:8f:a0:3b:7e:05: c6:b1:e7:1f:a7:96:8b:e2:2c:f4:12:a0:2b:cd:c6:1e:a2:c1: 64:c1:27:75:85:8d:3c:75:fa:46:69:90:19:cd:b4:7e:05:f7: 7f:06:16:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9HaOqIMqtZn5VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MGVmZGMxZTItN2RmZC00M2E2LWI5ODctYmI1YWU1MjBhNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivBw+oeoLnCM1yzaQBYN9URq6uf3egkauJCg W/ZGEKhXzF4zAQ0iHBBHLoBOFzJx5Hx05MahvrXs6by5awtuRPLRM/jlppa3uEtr z2VCKhbPfbjCsIDNHHR/6GjBZgYObtViqrnx8qIBmrpjF2PHMb86Dv+rEbyetVO5 94rUhvyD+/B207jjX4amVD0qQjISo7EtLdPhc0lb57N/pjR0yMZVyasoOmsuxnbw YORADunOgeb5z52duI+uFgdlxmPU3u3OCg4q4iPBHpNwDYR3Y4XoVbK10AVH5ZR2 lpsrRwobx8v2VeHz+IYnjEKmnFldJ813Qi1sPrFQuLVYETDV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuqh2BeMQG6tjpzslTCoWenMgjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmJkNWRiOWEtZjM2Zi0z MTc2LTlkNTYtMGNkOTNhY2Y4NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4T3fsUR9aBB1WR9bgk+zastiOhr18SswtELguCuSZDKGnV//QF6hxb 0Ecqwv84ale4zALjWyZ7PBmZjiSSg3vZG1b5A3O/pgu5/UR/GnE8iAtrclX0qHvY 9rtmS4frt2wE9nMTam6tAiwXOpiGGLghRZzM6wLaafttImzKkBDKLiDZ+TGIGbWe KblBiIncF9DoFE8DBw2Kvy9FHPkHOl63XDoOx0WBcVmJGAAk7My4az9JPPrKM8bX 301kUtYO60QI5spFAj85c7xff3zt1eYCuCuPoDt+Bcax5x+nloviLPQSoCvNxh6i wWTBJ3WFjTx1+kZpkBnNtH4F938GFig= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org