$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa File: 71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa (raw, json) Hash identifier: sfw73kLe9fDAZYGrlJW2IcrGAvW0w/HD+7bHziyo/XI= Subject key identifier: 22:3D:85:4C:44:85:1E:AA:3E:39:85:81:89:B8:FE:27:21:10:D3:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584779AB6584CD2BA6FFF827D580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa Signing time: Tue 08 Oct 2024 17:18:06 +0000 ROA not before: Tue 08 Oct 2024 17:18:06 +0000 ROA not after: Mon 06 Jan 2025 18:18:06 +0000 asID: 8069 IP address blocks: 20.33.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:ab:65:84:cd:2b:a6:ff:f8:27:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 8 17:18:06 2024 GMT Not After : Jan 6 18:18:06 2025 GMT Subject: CN=c34296ed-a4a9-4692-9e68-d25438fd3073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:07:f7:c9:85:1a:d1:6a:09:1c:4f:4a:fe: 8a:78:49:ca:51:23:61:ec:a9:af:9d:9d:a4:41:d9: 5e:00:34:df:69:f0:21:85:14:1c:a8:04:0c:d9:d4: 60:ad:91:52:97:2d:53:21:de:6d:d7:4e:8e:ca:52: 77:8d:37:6d:14:54:c8:0c:1a:9e:fe:3c:19:74:6b: 79:e2:0f:41:b1:54:a2:05:8b:f0:53:a5:3e:51:c7: 88:a3:d1:5d:eb:46:64:c2:52:56:4a:8c:c1:62:c0: 37:10:b5:e1:26:04:9c:ef:5f:9c:b9:a4:d7:3c:6f: 61:24:fb:39:0b:d3:89:b8:a5:c3:b3:c2:ec:4e:6c: 64:a4:5e:66:74:72:0f:25:bd:a4:1e:c1:b0:84:94: 1b:46:43:13:ca:24:73:07:ef:7a:8b:fb:00:34:ec: 2c:9c:dc:13:9f:4c:47:3e:7d:d8:9b:2f:1e:01:19: 83:93:98:b1:c9:f9:b2:87:a0:d6:d1:c5:a8:b4:8c: dd:11:ee:4d:25:3c:71:c6:95:3e:02:1b:99:3c:d9: ee:88:3c:ed:39:75:be:c9:54:cc:21:37:63:3d:43: c5:38:41:e2:65:d5:b7:34:07:48:f6:49:60:43:ac: 5c:7a:ea:fd:4c:b5:20:8d:a1:eb:35:63:6c:ee:44: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:85:4C:44:85:1E:AA:3E:39:85:81:89:B8:FE:27:21:10:D3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e2:75:92:24:df:58:20:2a:9f:80:fe:d9:c5:9a:65:b2:02: ea:7f:f3:e1:6e:15:74:41:be:9d:c7:c7:f4:30:70:0f:2a:b9: 3f:37:0d:bc:8a:06:35:5a:cb:f8:02:11:17:75:8b:63:6e:96: 2e:0d:c1:de:e4:5b:b8:76:64:80:70:63:b1:af:b0:c4:15:37: 80:12:25:e9:48:ce:19:2f:10:d7:fd:ff:60:5c:a0:71:37:ac: 2d:7a:9f:18:25:1c:17:cf:67:37:2a:35:78:1a:31:82:3c:6e: d4:a3:76:e3:a3:cd:eb:93:8f:f0:aa:bd:be:a1:51:a3:fd:54: 36:8e:96:e7:c7:74:29:53:2e:6b:06:73:9d:d0:ea:d7:8a:c1: e6:5a:49:ee:50:df:11:8e:23:6a:46:d8:83:56:b9:c1:c5:b9: 54:98:28:cf:a8:c4:71:48:5a:42:9c:01:d1:94:ef:ce:b7:ce: 81:3a:20:a4:f4:1d:54:db:bf:f0:b4:72:74:f9:62:83:85:06: b5:3f:73:80:81:95:20:54:6d:ff:53:33:22:9e:bb:1b:6c:51: ed:26:d2:70:1b:09:39:02:35:09:58:32:42:a0:fc:20:81:de: 79:34:1c:d3:5e:e4:b4:26:28:57:d3:3e:4c:79:06:b3:fd:c9: 8d:13:e3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5q2WEzSum//gn1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwODE3MTgwNloXDTI1MDEwNjE4MTgwNlowLzEtMCsGA1UEAxMk YzM0Mjk2ZWQtYTRhOS00NjkyLTllNjgtZDI1NDM4ZmQzMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhwH98mFGtFqCRxPSv6KeEnKUSNh7KmvnZ2k QdleADTfafAhhRQcqAQM2dRgrZFSly1TId5t106OylJ3jTdtFFTIDBqe/jwZdGt5 4g9BsVSiBYvwU6U+UceIo9Fd60ZkwlJWSozBYsA3ELXhJgSc71+cuaTXPG9hJPs5 C9OJuKXDs8LsTmxkpF5mdHIPJb2kHsGwhJQbRkMTyiRzB+96i/sANOwsnNwTn0xH Pn3Ymy8eARmDk5ixyfmyh6DW0cWotIzdEe5NJTxxxpU+AhuZPNnuiDztOXW+yVTM ITdjPUPFOEHiZdW3NAdI9klgQ6xceur9TLUgjaHrNWNs7kR5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI9hUxEhR6qPjmFgYm4/ichENPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzFkMGY3ZDYtOWFmZC0z MzhkLWJlMmItZjA1ZWViMzVmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfidZIk31ggKp+A/tnFmmWyAup/8+FuFXRBvp3Hx/QwcA8quT83DbyK BjVay/gCERd1i2Nuli4Nwd7kW7h2ZIBwY7GvsMQVN4ASJelIzhkvENf9/2BcoHE3 rC16nxglHBfPZzcqNXgaMYI8btSjduOjzeuTj/Cqvb6hUaP9VDaOlufHdClTLmsG c53Q6teKweZaSe5Q3xGOI2pG2INWucHFuVSYKM+oxHFIWkKcAdGU7863zoE6IKT0 HVTbv/C0cnT5YoOFBrU/c4CBlSBUbf9TMyKeuxtsUe0m0nAbCTkCNQlYMkKg/CCB 3nk0HNNe5LQmKFfTPkx5BrP9yY0T47M= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org