$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: CvRvcgiGZYlFKpgp22YfhEOIJ8au5xy3XMJkiiBTUkE= Subject key identifier: C1:FA:86:A6:67:35:25:DC:77:3B:73:53:3B:FA:23:85:DC:DE:01:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847CA3F8B0C9AE46C2F1D865360 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:8b:0c:9a:e4:6c:2f:1d:86:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=7e3d9d02-466b-45ad-ab86-a0c80dc42421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:05:d7:f9:30:02:ff:fa:c5:e3:b8:fd:64: 9a:e3:c4:db:bf:58:61:bc:ad:79:eb:a9:ef:fe:d0: 61:f0:a8:2a:6d:03:f5:fb:9f:82:38:e3:7f:6f:a9: 58:6b:f3:55:ed:5c:0e:b4:d4:25:ab:8c:97:e6:e1: 4e:3c:70:c8:c2:38:72:81:a4:76:82:6a:43:50:1e: d8:f0:94:2d:24:26:bd:44:e5:e4:3d:4b:5c:3d:c0: 98:a0:7b:94:dc:ae:11:d2:84:ec:1f:57:b3:47:64: 37:bf:9e:34:c4:9a:5d:5c:28:78:0e:d7:2d:02:00: 5a:40:91:ef:bb:da:b2:92:75:ba:75:95:ea:c4:99: 46:0e:d4:79:6d:c1:97:c8:50:0a:a8:3c:d6:2e:97: c4:7d:35:9f:31:f8:f5:00:2c:da:19:32:71:99:7a: b5:fc:9a:b9:38:54:48:ec:0f:04:55:78:d8:3c:a0: 17:19:61:ed:a5:2d:8d:19:22:39:ca:ca:2a:0b:12: 24:18:58:97:3b:0e:4a:9b:12:44:5c:a5:7d:8e:da: 30:d3:f7:fd:a2:26:8b:96:55:f9:7d:7f:c4:e2:b1: 3d:27:b1:80:b3:f0:2e:ea:92:d6:1e:2f:5a:b5:6e: 22:79:e3:0e:bd:f3:0b:2d:3a:aa:64:98:54:a3:03: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FA:86:A6:67:35:25:DC:77:3B:73:53:3B:FA:23:85:DC:DE:01:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:89:f7:de:17:f8:6e:08:c4:47:58:dc:eb:1d:e6:c9:16:84: 77:6c:8c:78:d3:f4:c1:74:9d:73:5e:86:4e:ee:55:b1:fa:b4: 74:08:b5:cc:79:af:29:a3:00:a6:e9:df:26:ff:10:41:55:52: 5b:35:20:57:e2:b3:f9:48:99:54:35:7b:89:f0:c7:fb:0e:37: b3:cd:3e:28:87:47:4d:1e:86:53:fe:35:c3:83:b3:1a:c7:c4: 2b:e1:4c:67:fd:fa:7f:4e:3d:c5:87:c1:25:47:28:ef:48:35: a2:60:d1:d8:f7:19:ef:37:9c:49:e9:bf:11:51:46:74:a3:d7: 85:54:3f:2e:47:7d:cf:89:f8:de:a3:aa:22:8f:1a:1f:19:7b: 19:5e:e4:66:60:c8:e9:ec:63:58:96:ec:28:27:cf:b5:62:92: f1:46:2e:91:0a:31:f8:74:c2:47:33:93:d9:a8:88:e9:b2:f7: 26:55:26:9e:d4:0d:cd:d8:d0:cf:d3:2c:48:d5:71:78:18:13: 81:d9:bb:95:82:00:5a:cf:da:f1:00:65:34:fc:06:fb:08:63: 80:08:7d:7f:c7:a2:94:5d:ac:19:88:9f:1e:4e:49:4e:0c:46: 29:99:1b:cd:0c:0f:52:31:8d:dc:0a:5f:9b:1f:dd:23:38:b9: d2:f6:0f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4sMmuRsLx2GU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2UzZDlkMDItNDY2Yi00NWFkLWFiODYtYTBjODBkYzQyNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul4F1/kwAv/6xeO4/WSa48Tbv1hhvK1566nv /tBh8KgqbQP1+5+COON/b6lYa/NV7VwOtNQlq4yX5uFOPHDIwjhygaR2gmpDUB7Y 8JQtJCa9ROXkPUtcPcCYoHuU3K4R0oTsH1ezR2Q3v540xJpdXCh4DtctAgBaQJHv u9qyknW6dZXqxJlGDtR5bcGXyFAKqDzWLpfEfTWfMfj1ACzaGTJxmXq1/Jq5OFRI 7A8EVXjYPKAXGWHtpS2NGSI5ysoqCxIkGFiXOw5KmxJEXKV9jtow0/f9oiaLllX5 fX/E4rE9J7GAs/Au6pLWHi9atW4ieeMOvfMLLTqqZJhUowNvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH6hqZnNSXcdztzUzv6I4Xc3gEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWJ994X+G4IxEdY3Osd5skWhHdsjHjT9MF0nXNehk7uVbH6tHQItcx5 rymjAKbp3yb/EEFVUls1IFfis/lImVQ1e4nwx/sON7PNPiiHR00ehlP+NcODsxrH xCvhTGf9+n9OPcWHwSVHKO9INaJg0dj3Ge83nEnpvxFRRnSj14VUPy5Hfc+J+N6j qiKPGh8Zexle5GZgyOnsY1iW7Cgnz7VikvFGLpEKMfh0wkczk9moiOmy9yZVJp7U Dc3Y0M/TLEjVcXgYE4HZu5WCAFrP2vEAZTT8BvsIY4AIfX/HopRdrBmInx5OSU4M RimZG80MD1IxjdwKX5sf3SM4udL2DyQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:06 2024 by rpki-client on console-ams.rpki-client.org