$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa File: 7156ddac-0037-381d-b03c-e9232ac59dea.roa (raw, json) Hash identifier: 0AbzVe81vwLFKYyvufYLmeWuUHbtqYCRvCwkX5nrmEI= Subject key identifier: 1C:BD:03:EF:CC:64:EC:31:40:3E:20:9C:70:04:93:D0:7F:F9:A5:FD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847D40497D0230FB8A30F242A40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 8069 IP address blocks: 20.33.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:97:d0:23:0f:b8:a3:0f:24:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=3b818007-5221-442c-a624-9f11586112b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:b8:b4:f6:20:16:4e:65:c1:11:f1:e7:81: 23:2f:2a:d2:32:60:64:4f:ef:67:72:b4:d2:3e:08: a9:d6:50:0f:77:6b:41:77:77:77:44:fe:a3:3a:30: 8a:17:18:05:c4:12:f1:ec:28:13:e0:d7:5c:fd:91: 36:65:2e:e1:7c:9c:1e:7e:22:9b:e1:3d:d7:66:df: 1a:64:e8:f9:c4:6f:7b:5a:76:e1:55:94:2d:e6:24: 3b:ac:fd:2a:85:8e:0a:ec:c3:12:13:a0:a2:71:2f: ff:4e:0c:13:3f:c1:13:d4:68:f9:6d:86:54:d4:ba: d4:0d:a0:bb:dd:1d:a3:76:f4:87:72:33:d9:a2:e3: 90:d2:ad:03:af:a1:24:63:8a:0d:f9:e7:49:4a:77: 90:67:eb:41:95:99:9b:69:aa:9a:da:39:4a:db:64: c7:fd:b6:ed:da:9d:c4:84:06:ab:23:27:d1:93:23: dd:9f:08:a4:f3:3f:bd:a4:43:8f:c3:cc:24:5c:5e: 4c:7b:cc:de:8f:21:82:24:44:db:74:7b:5d:2e:47: bc:e0:3d:49:8b:eb:91:98:67:8d:10:a3:3c:7c:09: 03:12:94:20:73:5a:69:4a:af:a7:f8:5a:a8:0f:b7: d7:d0:6b:41:f6:c5:15:d8:c1:49:72:bc:e8:44:8c: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BD:03:EF:CC:64:EC:31:40:3E:20:9C:70:04:93:D0:7F:F9:A5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:13:c6:29:86:12:2c:20:21:01:5a:7e:25:40:b7:16:6d:7a: 05:51:37:07:64:ff:dd:16:6a:6e:7c:2d:4e:db:13:b3:1f:13: fb:72:b4:6a:23:02:01:af:b6:88:88:81:a5:ff:28:9c:9b:c8: c3:08:fa:5a:65:51:62:61:85:0c:96:2b:8d:65:78:23:ed:3d: d2:bc:68:8b:9b:82:cc:55:dc:2d:92:75:16:ed:53:e7:74:1b: 9b:98:30:cc:15:37:6a:60:e8:3f:dd:e2:98:19:8e:b2:2b:3c: 43:49:6a:7e:de:fb:42:17:77:0a:22:a5:fd:fe:d4:56:4d:42: e7:44:67:88:4f:2b:91:52:2f:c1:63:00:d2:e6:2a:19:a0:c7: 5c:7b:35:bf:48:f7:8b:05:fb:26:02:4d:f3:a5:6e:c9:55:8d: c2:90:e3:39:1d:36:b4:02:5b:5d:f6:a9:b1:c7:85:77:b5:d6: 18:c2:66:5c:c9:cb:10:ee:9a:7c:d1:93:69:4f:58:8c:fc:df: a6:1a:a0:ae:a6:c7:ed:4f:b0:28:3c:05:03:62:b4:95:57:cf: 42:80:26:42:d6:ce:38:60:34:4f:09:0b:c0:4c:06:f4:84:17: 74:df:c4:6a:c5:d0:36:bb:dd:b2:eb:58:95:e4:09:1c:52:02: 0b:37:c5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJfQIw+4ow8kKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk M2I4MTgwMDctNTIyMS00NDJjLWE2MjQtOWYxMTU4NjExMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qe4tPYgFk5lwRHx54EjLyrSMmBkT+9ncrTS Pgip1lAPd2tBd3d3RP6jOjCKFxgFxBLx7CgT4Ndc/ZE2ZS7hfJwefiKb4T3XZt8a ZOj5xG97WnbhVZQt5iQ7rP0qhY4K7MMSE6CicS//TgwTP8ET1Gj5bYZU1LrUDaC7 3R2jdvSHcjPZouOQ0q0Dr6EkY4oN+edJSneQZ+tBlZmbaaqa2jlK22TH/bbt2p3E hAarIyfRkyPdnwik8z+9pEOPw8wkXF5Me8zejyGCJETbdHtdLke84D1Ji+uRmGeN EKM8fAkDEpQgc1ppSq+n+FqoD7fX0GtB9sUV2MFJcrzoRIwUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy9A+/MZOwxQD4gnHAEk9B/+aX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzE1NmRkYWMtMDAzNy0z ODFkLWIwM2MtZTkyMzJhYzU5ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYTximGEiwgIQFafiVAtxZtegVRNwdk/90Wam58LU7bE7MfE/tytGoj AgGvtoiIgaX/KJybyMMI+lplUWJhhQyWK41leCPtPdK8aIubgsxV3C2SdRbtU+d0 G5uYMMwVN2pg6D/d4pgZjrIrPENJan7e+0IXdwoipf3+1FZNQudEZ4hPK5FSL8Fj ANLmKhmgx1x7Nb9I94sF+yYCTfOlbslVjcKQ4zkdNrQCW132qbHHhXe11hjCZlzJ yxDumnzRk2lPWIz836YaoK6mx+1PsCg8BQNitJVXz0KAJkLWzjhgNE8JC8BMBvSE F3TfxGrF0Da73bLrWJXkCRxSAgs3xSk= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org