$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa File: 7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa (raw, json) Hash identifier: ByrIhBhnGjSFGAjhqDvYYkJ9HF7ECVtQ2OH6UTZGw6E= Subject key identifier: 16:B0:02:F4:3D:A6:2E:7D:07:33:2A:58:5F:81:8A:5C:20:8D:A1:DC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584776610A9219035915648DBFA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.157.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0a:92:19:03:59:15:64:8d:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=b8e124fa-3905-4814-b657-83fb8adb2350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:4b:29:2b:f5:3b:bb:51:4f:27:f3:25:6c: af:64:a9:2b:a8:82:c5:ef:75:04:75:2f:95:59:97: 06:8a:25:d8:00:28:7f:f5:5c:a2:c3:2f:ab:17:96: ea:aa:cb:32:59:68:d1:42:49:25:e9:9a:cb:bd:1a: 50:bb:23:7f:8a:12:5c:5b:f7:57:5a:c2:3f:d9:00: e2:e2:55:34:19:45:df:9d:07:aa:ff:bb:58:bc:11: ce:ee:2e:81:1f:40:ed:71:b0:e7:aa:b3:25:81:11: 09:f0:06:1f:7b:58:01:61:4a:80:ba:d3:3c:50:78: da:e4:0b:34:eb:7c:11:0e:88:35:5e:45:b4:80:28: 73:fa:f5:d9:f9:d9:ef:92:e2:f4:89:0c:95:b0:df: 73:d6:fb:95:c4:29:e0:bc:5b:06:f6:8b:c3:4c:b3: d6:ab:c1:4f:a0:63:15:78:0f:1b:87:f7:eb:ca:53: 66:b9:1e:25:e6:ad:c5:ac:ed:1f:75:3a:11:f1:45: 34:c7:40:bf:12:aa:6b:b6:8c:41:25:24:6f:df:4c: 30:fc:be:d1:37:66:cd:68:cc:d1:63:be:a5:d6:96: 42:ce:2e:0b:f1:d0:f0:19:6b:8f:70:f0:7f:1e:97: ee:d4:9d:23:72:4b:c9:a5:f4:a5:56:13:5e:c2:62: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B0:02:F4:3D:A6:2E:7D:07:33:2A:58:5F:81:8A:5C:20:8D:A1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:af:a7:85:70:c2:b0:68:63:b9:47:c7:3a:39:43:7b:ca:f5: 25:51:83:c1:87:50:0d:69:a8:c6:b1:f9:53:5e:4c:1a:52:aa: 90:82:36:b3:3e:4e:48:eb:79:0b:bf:cd:36:41:b3:ec:2f:7c: a9:fa:a3:b7:14:8a:11:6f:33:48:31:48:73:d3:f1:fa:53:50: 5b:45:56:d7:1f:62:4b:2d:c0:bc:f5:21:07:be:e8:d0:bc:ec: 2a:18:d9:9e:0e:ed:b2:c5:e1:66:89:e3:8c:d2:33:ff:2a:f0: 31:76:28:a6:a6:41:c9:f7:27:8b:fc:39:3d:1b:0e:6c:9c:fc: ce:9a:e6:4c:96:0b:85:cc:22:89:63:b2:47:96:cc:16:75:5e: dd:57:50:97:22:8c:17:94:d4:68:b9:42:d1:88:d9:81:75:f9: ad:20:00:69:cc:63:79:b8:b7:db:dc:bc:d5:2b:84:f3:92:64: e0:52:3b:db:93:18:c6:bf:f2:ff:f0:fb:33:35:50:aa:87:9a: ff:57:50:bf:21:b9:c1:57:61:c4:39:f2:b2:27:55:b5:17:b0: 0e:ad:1a:f4:c7:48:0e:87:e2:ee:63:5c:7f:3b:7a:51:93:84: 56:9f:04:ee:2f:f8:88:7a:d3:f5:86:28:ac:2d:2a:fd:41:47: c8:19:c5:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQqSGQNZFWSNv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YjhlMTI0ZmEtMzkwNS00ODE0LWI2NTctODNmYjhhZGIyMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfxLKSv1O7tRTyfzJWyvZKkrqILF73UEdS+V WZcGiiXYACh/9Vyiwy+rF5bqqssyWWjRQkkl6ZrLvRpQuyN/ihJcW/dXWsI/2QDi 4lU0GUXfnQeq/7tYvBHO7i6BH0DtcbDnqrMlgREJ8AYfe1gBYUqAutM8UHja5As0 63wRDog1XkW0gChz+vXZ+dnvkuL0iQyVsN9z1vuVxCngvFsG9ovDTLPWq8FPoGMV eA8bh/frylNmuR4l5q3FrO0fdToR8UU0x0C/EqprtoxBJSRv30ww/L7RN2bNaMzR Y76l1pZCzi4L8dDwGWuPcPB/Hpfu1J0jckvJpfSlVhNewmKQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBawAvQ9pi59BzMqWF+BilwgjaHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2YzYmIxMmItNzY5MS0z MjQ0LTg1YjAtMTJkNWFiNmRiOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKivp4VwwrBoY7lHxzo5Q3vK9SVRg8GHUA1pqMax+VNeTBpSqpCCNrM+ TkjreQu/zTZBs+wvfKn6o7cUihFvM0gxSHPT8fpTUFtFVtcfYkstwLz1IQe+6NC8 7CoY2Z4O7bLF4WaJ44zSM/8q8DF2KKamQcn3J4v8OT0bDmyc/M6a5kyWC4XMIolj skeWzBZ1Xt1XUJcijBeU1Gi5QtGI2YF1+a0gAGnMY3m4t9vcvNUrhPOSZOBSO9uT GMa/8v/w+zM1UKqHmv9XUL8hucFXYcQ58rInVbUXsA6tGvTHSA6H4u5jXH87elGT hFafBO4v+Ih60/WGKKwtKv1BR8gZxYI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:12 2024 by rpki-client on console-fra.rpki-client.org