$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json) Hash identifier: Ho9FzzOavBhYw4ydoCFxavsP/LPKck+3uSpQ6bbOvZE= Subject key identifier: 06:3E:84:B2:2A:2F:01:44:32:6C:EB:A2:45:95:1C:0A:C2:B7:8A:41 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858472019881E644862FA2FE21D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa Signing time: Fri 06 Sep 2024 15:17:16 +0000 ROA not before: Fri 06 Sep 2024 15:17:16 +0000 ROA not after: Thu 05 Dec 2024 16:17:16 +0000 asID: 8069 IP address blocks: 20.33.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:19:88:1e:64:48:62:fa:2f:e2:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 15:17:16 2024 GMT Not After : Dec 5 16:17:16 2024 GMT Subject: CN=81e8318c-ce59-4bde-9ee3-6d8b30e8eabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:fc:0e:93:be:c3:04:c1:3c:c9:d4:bd:04: f0:2f:60:01:92:bc:c6:5e:32:2c:67:f5:66:39:b6: 6d:3c:ac:db:78:0d:b1:52:82:5e:68:31:28:50:37: dd:42:4f:72:06:2c:a3:77:d8:1c:53:eb:d0:a4:d3: 7f:82:7b:a4:98:a5:3f:77:7c:a8:f0:6f:3e:ce:a6: 23:ca:4b:80:6b:6e:f3:b1:fe:97:6b:b1:76:e7:d7: db:52:25:cf:99:c6:6e:37:f8:4f:91:64:78:88:00: 9f:25:ae:21:db:cb:57:8b:4b:ca:43:cc:2a:c2:d0: dc:70:95:a1:4a:d9:c5:28:3e:8b:08:ac:82:55:40: b2:af:42:fd:04:f8:af:59:a3:10:79:f5:29:09:93: 14:52:b2:02:4d:c8:42:e9:33:95:b7:4c:2f:4c:58: 12:e3:d8:20:92:9c:b5:0e:bc:5f:cf:40:47:f6:4b: 9f:c5:94:c1:dc:a8:88:38:60:f0:9f:0f:10:4c:f7: 78:aa:01:d6:ef:36:8f:ea:29:8c:82:84:b2:63:7c: 0c:c4:0a:fd:b4:a7:b3:64:c8:4e:71:29:b4:33:a3: 84:df:34:83:cb:02:3b:44:d3:2c:3b:40:61:f2:b1: 45:91:2d:31:d5:31:63:b8:cc:dd:90:9e:ac:78:b0: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3E:84:B2:2A:2F:01:44:32:6C:EB:A2:45:95:1C:0A:C2:B7:8A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d5:c8:10:5b:9e:7d:54:ce:b3:b6:28:d2:5d:16:84:73:73: 1e:4f:99:5d:1c:10:10:33:f3:dc:b3:12:73:f7:78:d2:1d:3f: 84:1e:74:07:24:c3:b8:66:99:60:bc:35:96:09:bd:06:0d:37: 25:7e:4e:24:59:be:cf:e4:16:64:24:2d:fb:86:96:14:fa:60: ea:d1:13:f0:97:15:cb:8d:dd:29:4b:4a:a2:02:00:65:6e:46: 3c:08:34:c3:83:f5:e4:ab:e1:51:71:76:80:56:8a:1e:78:fa: 48:cc:df:53:ff:c8:ae:39:26:15:54:06:70:cf:57:a9:fa:a9: d3:c1:ad:b3:80:b1:1f:32:76:6d:63:bf:bf:19:ef:2c:a8:79: 96:17:20:08:26:16:2f:35:de:3e:20:e2:6c:a9:aa:a9:d2:01: 34:87:44:35:e9:d5:ba:77:3e:9d:5b:7b:ac:4d:29:be:b5:68: ac:c7:c6:75:f1:36:47:52:e8:cf:04:ff:bd:c9:4b:cd:46:85: ae:b4:9f:fb:68:92:aa:a3:c8:cd:aa:82:35:20:48:3a:74:3a: 7c:94:df:3e:9b:83:01:ec:6a:59:d4:e0:5a:35:1c:cc:05:cf: 79:c2:f4:97:56:d9:5a:b9:9f:6b:fa:69:c0:4b:45:28:5c:ac: e7:75:67:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgGYgeZEhi+i/iHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkwNjE1MTcxNloXDTI0MTIwNTE2MTcxNlowLzEtMCsGA1UEAxMk ODFlODMxOGMtY2U1OS00YmRlLTllZTMtNmQ4YjMwZThlYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhf8DpO+wwTBPMnUvQTwL2ABkrzGXjIsZ/Vm ObZtPKzbeA2xUoJeaDEoUDfdQk9yBiyjd9gcU+vQpNN/gnukmKU/d3yo8G8+zqYj ykuAa27zsf6Xa7F259fbUiXPmcZuN/hPkWR4iACfJa4h28tXi0vKQ8wqwtDccJWh StnFKD6LCKyCVUCyr0L9BPivWaMQefUpCZMUUrICTchC6TOVt0wvTFgS49ggkpy1 Drxfz0BH9kufxZTB3KiIOGDwnw8QTPd4qgHW7zaP6imMgoSyY3wMxAr9tKezZMhO cSm0M6OE3zSDywI7RNMsO0Bh8rFFkS0x1TFjuMzdkJ6seLCRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY+hLIqLwFEMmzrokWVHArCt4pBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg3MThlNTYtNzk0YS0z OTdkLTgwZDYtMzM0ZTlmZDNlODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPVyBBbnn1UzrO2KNJdFoRzcx5PmV0cEBAz89yzEnP3eNIdP4QedAck w7hmmWC8NZYJvQYNNyV+TiRZvs/kFmQkLfuGlhT6YOrRE/CXFcuN3SlLSqICAGVu RjwINMOD9eSr4VFxdoBWih54+kjM31P/yK45JhVUBnDPV6n6qdPBrbOAsR8ydm1j v78Z7yyoeZYXIAgmFi813j4g4mypqqnSATSHRDXp1bp3Pp1be6xNKb61aKzHxnXx NkdS6M8E/73JS81Gha60n/tokqqjyM2qgjUgSDp0OnyU3z6bgwHsalnU4Fo1HMwF z3nC9JdW2Vq5n2v6acBLRShcrOd1Z4Q= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org