$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa File: 798adac3-d14c-35f6-92cf-8429aea1bb8e.roa (raw, json) Hash identifier: 1tc7VvWz/3PNDHfn7T96oOLY9ox0Qid5r/qKoWfDTzM= Subject key identifier: C4:95:FD:68:5F:69:D6:21:43:FB:6E:32:3F:03:37:B2:F7:4B:61:B2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584785BBB09B192E0226D6AB03A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa Signing time: Sun 13 Oct 2024 01:00:31 +0000 ROA not before: Sun 13 Oct 2024 01:00:31 +0000 ROA not after: Sat 11 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:bb:b0:9b:19:2e:02:26:d6:ab:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 13 01:00:31 2024 GMT Not After : Jan 11 02:00:31 2025 GMT Subject: CN=bd98c6e1-aa11-48b8-8c6e-57fbd81b7748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:96:8d:2d:cc:5f:82:66:bd:f7:6b:8a:33: 98:27:98:3b:de:e1:f8:3d:7a:30:91:0d:37:c5:ad: ef:12:e3:78:21:81:b9:a0:3d:45:31:7c:3d:32:e8: 66:ea:01:22:3a:d0:8e:a0:e0:15:42:27:33:b8:18: e6:d4:44:4d:8b:59:44:fe:aa:eb:ee:9c:e6:48:48: 14:f1:f9:76:1e:ea:fe:8b:2c:f9:35:08:67:86:ad: 69:6e:1b:30:6c:9b:d2:48:86:af:00:e1:00:cd:51: 58:b0:15:77:d4:c5:bc:da:39:9b:11:e5:62:98:4a: 9d:56:4d:14:43:ac:ee:f7:08:bf:81:cc:df:20:f6: a2:c0:fe:e5:69:83:85:15:e3:92:ff:28:b2:c8:88: 7c:e8:a7:8a:2e:8c:90:4c:c3:19:ae:a2:3f:90:e8: 76:5c:fc:15:6e:39:f4:0d:73:e3:59:08:9c:51:36: 16:f5:b9:86:7d:dc:92:46:15:6a:ab:e5:a3:3f:b5: ca:1f:94:62:c9:8e:24:88:0c:0a:84:45:6d:a2:3b: 45:21:85:56:8c:12:c2:b6:5c:83:e2:9b:73:d5:4b: 47:3b:d7:59:eb:c5:b0:ec:be:52:af:94:8e:aa:83: 2e:9d:6d:d9:5e:59:13:07:24:61:57:90:54:3c:bf: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:FD:68:5F:69:D6:21:43:FB:6E:32:3F:03:37:B2:F7:4B:61:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a3:35:eb:d8:40:54:3b:8f:40:73:b6:31:8a:bd:e1:94:4b: f8:95:4e:a9:a1:1d:84:1a:7d:6a:fc:35:bd:66:e8:1d:e7:2f: 64:7b:51:5a:97:c8:bc:6d:57:39:79:ed:bf:f9:9f:a6:86:18: 0c:ca:1f:6c:2b:14:8b:64:17:f8:9c:c8:fd:13:42:41:8a:39: d4:36:49:6e:83:59:37:d6:92:21:d9:e9:34:02:d8:ec:66:b7: a4:01:13:50:0b:fd:17:3f:d6:39:09:e3:63:14:55:15:b3:41: 3f:f0:ec:e3:68:b7:8a:0a:16:68:6a:19:57:0f:ca:76:a0:df: ca:a3:c7:48:b0:a6:46:47:6d:2d:75:d9:1e:65:b6:c7:9d:03: d2:21:27:99:d9:c4:39:b3:e0:12:b0:63:4a:a2:ac:c5:46:d9: d1:96:39:c6:da:b4:59:fd:10:6b:4d:e3:12:c1:f5:27:4b:e9: b0:ea:1d:ee:bf:e7:a7:88:55:50:68:a6:0f:07:ca:18:7e:9a: a3:ed:dd:53:9b:83:7d:58:65:f0:30:f5:1f:ca:e9:6c:fb:69: f8:1f:0c:32:10:9d:e9:57:71:3d:4e:72:8d:fc:c6:da:58:34: 32:1a:a0:1d:b4:d4:da:45:08:9d:6b:26:a9:9a:7f:75:81:a4: 65:87:35:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu7CbGS4CJtarA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk YmQ5OGM2ZTEtYWExMS00OGI4LThjNmUtNTdmYmQ4MWI3NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNWWjS3MX4JmvfdrijOYJ5g73uH4PXowkQ03 xa3vEuN4IYG5oD1FMXw9Muhm6gEiOtCOoOAVQiczuBjm1ERNi1lE/qrr7pzmSEgU 8fl2Hur+iyz5NQhnhq1pbhswbJvSSIavAOEAzVFYsBV31MW82jmbEeVimEqdVk0U Q6zu9wi/gczfIPaiwP7laYOFFeOS/yiyyIh86KeKLoyQTMMZrqI/kOh2XPwVbjn0 DXPjWQicUTYW9bmGfdySRhVqq+WjP7XKH5RiyY4kiAwKhEVtojtFIYVWjBLCtlyD 4ptz1UtHO9dZ68Ww7L5Sr5SOqoMunW3ZXlkTByRhV5BUPL//ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSV/WhfadYhQ/tuMj8DN7L3S2GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk4YWRhYzMtZDE0Yy0z NWY2LTkyY2YtODQyOWFlYTFiYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCjNevYQFQ7j0BztjGKveGUS/iVTqmhHYQafWr8Nb1m6B3nL2R7UVqX yLxtVzl57b/5n6aGGAzKH2wrFItkF/icyP0TQkGKOdQ2SW6DWTfWkiHZ6TQC2Oxm t6QBE1AL/Rc/1jkJ42MUVRWzQT/w7ONot4oKFmhqGVcPynag38qjx0iwpkZHbS11 2R5ltsedA9IhJ5nZxDmz4BKwY0qirMVG2dGWOcbatFn9EGtN4xLB9SdL6bDqHe6/ 56eIVVBopg8Hyhh+mqPt3VObg31YZfAw9R/K6Wz7afgfDDIQnelXcT1Oco38xtpY NDIaoB201NpFCJ1rJqmaf3WBpGWHNQ4= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org