$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa File: 980bd9a5-a720-3958-9261-a727982ef901.roa (raw, json) Hash identifier: z1+4yfe3c/YVWAKtApV6O0ccjrMf4x/AFZ5jliGGZqg= Subject key identifier: C9:40:96:55:EF:49:73:26:E2:89:0E:83:CA:8A:67:4F:BA:D7:2B:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858479D76C42ACE6EC2CD17834A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c4:2a:ce:6e:c2:cd:17:83:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=f91038d2-b05a-4668-b0fd-2dcba89c701b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:75:0c:62:9c:19:a6:8f:23:5b:44:28:54:8c: 39:fb:fb:ea:4a:be:e7:76:54:f7:32:db:e5:c4:67: 82:90:5f:2d:95:90:3a:c7:e6:eb:8e:0c:6b:20:ec: 2d:0c:34:6a:90:bc:65:5b:28:f5:e5:9e:c3:c0:fe: f9:16:f0:5a:4d:f0:14:27:f9:58:63:26:7b:5d:ce: 68:1c:6a:bc:6b:71:d7:53:79:2a:00:22:3f:0f:91: 69:9a:5e:f7:bc:40:23:94:1b:2f:45:8e:ec:6c:15: 2b:e0:e9:0a:80:c2:df:e3:bd:88:55:5a:91:59:1a: 2d:a2:45:57:f0:81:69:65:b1:df:2b:41:c3:38:8c: e9:32:d2:bd:4f:df:aa:ff:43:34:0d:58:fa:b4:e7: 96:ff:05:b7:2f:b3:7a:74:dd:b8:f3:52:12:67:0f: 24:c8:69:05:3e:32:13:b2:cb:fe:67:f3:61:88:f2: 00:70:89:28:87:3f:85:ef:ab:4d:64:6c:94:d5:ca: de:c4:7f:9d:e8:d5:ef:f7:3a:6f:ea:14:c0:25:93: b9:b9:91:c1:75:03:a8:d1:a8:95:49:9e:07:dc:06: 17:9c:ee:5b:f8:db:b4:56:d2:a7:ee:c0:40:05:9a: 1f:2c:e7:e1:1a:7d:74:d2:56:9f:ea:5d:0d:d9:3f: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:96:55:EF:49:73:26:E2:89:0E:83:CA:8A:67:4F:BA:D7:2B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e8:1c:76:08:92:7c:46:d8:69:85:9a:fa:ec:5a:b1:a7:68: 94:6a:1a:9d:41:7d:45:e3:ff:86:6e:67:c6:da:7f:f0:f3:a0: 42:a1:c3:7f:7d:78:3b:a1:67:e7:0a:c7:1f:03:89:60:fe:c6: 53:a1:20:06:19:cf:e2:4f:f4:6d:9f:36:ea:cf:ec:8f:f1:03: c6:78:37:86:d6:a5:c7:6c:bb:87:d2:dd:7c:b6:47:bf:54:cc: c8:6b:7d:c4:f7:ae:47:d0:c9:d3:3e:d1:36:1d:16:e5:02:ee: ce:57:02:ea:50:09:1b:68:f5:ba:6e:e6:3d:d8:43:a2:61:b9: ac:f6:83:cf:f6:f9:03:bf:37:ce:bc:61:0c:39:be:5a:63:d6: 88:aa:3c:10:7d:92:b2:57:c3:98:9b:7e:7b:da:6a:1a:05:58: 08:60:59:fb:d6:0c:b5:9a:4c:83:c8:50:ec:9d:e6:6c:ec:8e: 4e:03:22:80:b8:5b:26:e6:9f:2d:fb:c0:1d:8e:bc:6d:03:be: 47:6e:81:d9:f8:b5:7a:01:07:97:e6:f4:70:1f:11:5f:52:4f: a0:79:fd:43:bc:49:01:96:5c:4f:f6:f2:da:d8:26:cf:8f:32: 47:91:96:42:be:e3:a1:08:0b:8d:1e:d1:e4:90:63:ec:01:0a: c8:d3:95:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsQqzm7CzReDSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjkxMDM4ZDItYjA1YS00NjY4LWIwZmQtMmRjYmE4OWM3MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHUMYpwZpo8jW0QoVIw5+/vqSr7ndlT3Mtvl xGeCkF8tlZA6x+brjgxrIOwtDDRqkLxlWyj15Z7DwP75FvBaTfAUJ/lYYyZ7Xc5o HGq8a3HXU3kqACI/D5Fpml73vEAjlBsvRY7sbBUr4OkKgMLf472IVVqRWRotokVX 8IFpZbHfK0HDOIzpMtK9T9+q/0M0DVj6tOeW/wW3L7N6dN2481ISZw8kyGkFPjIT ssv+Z/NhiPIAcIkohz+F76tNZGyU1crexH+d6NXv9zpv6hTAJZO5uZHBdQOo0aiV SZ4H3AYXnO5b+Nu0VtKn7sBABZofLOfhGn100laf6l0N2T/MxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlAllXvSXMm4okOg8qKZ0+61yshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgwYmQ5YTUtYTcyMC0z OTU4LTkyNjEtYTcyNzk4MmVmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHoHHYIknxG2GmFmvrsWrGnaJRqGp1BfUXj/4ZuZ8baf/DzoEKhw399 eDuhZ+cKxx8DiWD+xlOhIAYZz+JP9G2fNurP7I/xA8Z4N4bWpcdsu4fS3Xy2R79U zMhrfcT3rkfQydM+0TYdFuUC7s5XAupQCRto9bpu5j3YQ6Jhuaz2g8/2+QO/N868 YQw5vlpj1oiqPBB9krJXw5ibfnvaahoFWAhgWfvWDLWaTIPIUOyd5mzsjk4DIoC4 Wybmny37wB2OvG0Dvkdugdn4tXoBB5fm9HAfEV9ST6B5/UO8SQGWXE/28trYJs+P MkeRlkK+46EIC40e0eSQY+wBCsjTlTY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org