$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa File: 70cbfac7-7845-3c22-8003-b419f184ca4b.roa (raw, json) Hash identifier: tB2h1wKDBGH1kR++bpGG5eh5fJkPH9f5UUGZrVYTuRI= Subject key identifier: 48:35:28:3C:AC:2F:59:3D:65:D9:67:6A:C4:91:A3:27:E2:E4:DB:EE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584785BBB15620949624AD5C8280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa Signing time: Sun 13 Oct 2024 01:00:31 +0000 ROA not before: Sun 13 Oct 2024 01:00:31 +0000 ROA not after: Sat 11 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:bb:b1:56:20:94:96:24:ad:5c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 13 01:00:31 2024 GMT Not After : Jan 11 02:00:31 2025 GMT Subject: CN=4cad8656-d757-4755-8573-c900793214e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:66:36:5c:62:90:e8:1c:2a:a6:09:0c:b0: 77:ff:65:a7:e1:ba:9f:f4:47:fb:35:36:14:50:7c: 09:18:a8:66:30:ce:cb:4b:d9:b6:b0:65:0f:d3:6b: 9e:f7:d2:6e:65:00:6d:07:76:38:5d:00:8c:af:9d: 7d:66:c6:2a:c2:ad:17:5a:e9:4f:83:5f:e4:2f:6e: 6f:ea:c0:30:ac:fb:94:d5:29:b7:cb:4f:38:7b:f5: 13:38:1c:9a:da:c1:43:54:29:4f:39:fe:04:12:ef: 27:d7:25:59:53:a7:9a:47:43:f3:30:99:5b:83:46: 0b:36:49:15:1f:d5:fe:33:d6:4a:8d:f5:f8:d4:95: bb:81:56:9f:23:60:9d:d1:37:aa:06:4b:c2:fd:98: 41:27:92:fa:00:bb:4c:96:34:ef:a9:14:ad:79:a8: 9f:78:8d:1c:2a:25:46:d2:6f:7b:90:42:25:fa:6c: c6:00:5f:08:da:e7:21:a9:60:69:87:56:08:6d:19: df:97:88:52:de:90:bf:63:52:82:c9:3f:cd:68:a4: 8d:0b:76:16:d2:74:79:3e:70:e4:60:35:e4:8c:ab: 1f:57:ca:56:57:0a:cd:6e:6c:56:02:b3:86:38:6c: b9:88:52:fe:e1:6d:dc:9f:ff:5c:c1:6f:cb:93:ab: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:28:3C:AC:2F:59:3D:65:D9:67:6A:C4:91:A3:27:E2:E4:DB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:42:cb:4b:28:b7:3e:87:95:b6:13:d9:58:8e:bb:bc:92:51: f2:a6:b1:70:f3:19:b7:14:92:33:66:14:05:0c:cb:b4:7e:b5: c9:e9:62:d8:45:61:bb:4b:8f:2a:be:7b:37:13:b1:01:0a:19: 25:90:6f:83:cf:c9:c8:e1:c7:9a:bf:d7:59:9e:1c:0d:e6:a3: e8:d3:62:c8:af:76:93:63:25:c7:e9:29:6a:17:a8:6a:f3:70: 6d:6f:e1:28:74:56:86:60:b6:a1:d8:bd:2b:eb:15:5d:ce:55: 7f:14:8d:d3:4c:f8:5a:bc:05:c2:db:e5:a2:b5:68:db:60:c9: 7f:6e:27:ba:62:88:11:4d:89:d4:72:11:e9:43:f3:8c:9e:b6: 59:83:4f:43:14:ea:3c:f2:25:30:48:fc:25:08:39:6a:ac:ae: 43:c4:69:b0:f6:e1:3d:7c:90:be:18:14:8f:d2:ea:6f:e8:6e: 84:9c:bf:a2:89:32:23:97:57:2f:18:ac:80:47:ff:6b:80:28: 20:92:8a:69:83:8f:25:68:b9:47:6c:49:a9:a8:a4:a1:62:9f: 2b:81:fc:01:4d:16:e2:5d:4f:e8:1c:1e:a7:30:2d:60:bc:85: 36:d9:0c:74:26:4a:9d:02:34:8b:f6:c0:02:66:75:53:13:a5: af:f0:fd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu7FWIJSWJK1cgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk NGNhZDg2NTYtZDc1Ny00NzU1LTg1NzMtYzkwMDc5MzIxNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRRmNlxikOgcKqYJDLB3/2Wn4bqf9Ef7NTYU UHwJGKhmMM7LS9m2sGUP02ue99JuZQBtB3Y4XQCMr519ZsYqwq0XWulPg1/kL25v 6sAwrPuU1Sm3y084e/UTOBya2sFDVClPOf4EEu8n1yVZU6eaR0PzMJlbg0YLNkkV H9X+M9ZKjfX41JW7gVafI2Cd0TeqBkvC/ZhBJ5L6ALtMljTvqRSteaifeI0cKiVG 0m97kEIl+mzGAF8I2uchqWBph1YIbRnfl4hS3pC/Y1KCyT/NaKSNC3YW0nR5PnDk YDXkjKsfV8pWVwrNbmxWArOGOGy5iFL+4W3cn/9cwW/Lk6vc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg1KDysL1k9ZdlnasSRoyfi5NvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBjYmZhYzctNzg0NS0z YzIyLTgwMDMtYjQxOWYxODRjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCExMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpCy0sotz6HlbYT2ViOu7ySUfKmsXDzGbcUkjNmFAUMy7R+tcnpYthF YbtLjyq+ezcTsQEKGSWQb4PPycjhx5q/11meHA3mo+jTYsivdpNjJcfpKWoXqGrz cG1v4Sh0VoZgtqHYvSvrFV3OVX8UjdNM+Fq8BcLb5aK1aNtgyX9uJ7piiBFNidRy EelD84yetlmDT0MU6jzyJTBI/CUIOWqsrkPEabD24T18kL4YFI/S6m/oboScv6KJ MiOXVy8YrIBH/2uAKCCSimmDjyVouUdsSamopKFinyuB/AFNFuJdT+gcHqcwLWC8 hTbZDHQmSp0CNIv2wAJmdVMTpa/w/do= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:23 2024 by rpki-client on console-ams.rpki-client.org