$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa File: b02ab758-700b-309e-a6f2-32462e5f6927.roa (raw, json) Hash identifier: gJ/dSoFqgApiX4YXIe2SERhlcvA89T7g2IDXE3QKldk= Subject key identifier: 0B:1B:DD:F3:A3:1F:C7:FF:42:57:AD:A8:59:41:37:F4:9F:4F:98:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584776610A5C70F300D7A6B27C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.157.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0a:5c:70:f3:00:d7:a6:b2:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=5862d7a5-5d70-4457-802e-6bb2787e28b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:06:f1:ff:23:94:ed:8e:c4:6b:c3:18:41: cc:a9:f5:50:cf:db:0e:9e:54:56:d3:55:dd:86:f2: e9:fd:81:e6:d3:f6:4a:79:7a:a0:49:c6:9d:d0:d0: 9b:e5:30:98:b9:f4:eb:4b:57:2a:9f:cf:45:09:50: f9:51:42:13:c4:18:0e:80:46:20:a3:4d:ad:c8:d7: 97:7d:57:74:8b:17:2c:80:b2:45:38:51:33:aa:85: 3d:21:98:b5:76:f3:26:c3:13:60:27:49:c1:81:01: 1b:3c:01:bf:7b:48:f8:63:5d:96:3a:02:72:26:89: bf:61:f1:95:03:0c:9a:44:13:dc:7a:db:f6:e6:be: ea:ea:71:ec:00:27:7a:6d:ca:c1:1c:71:0b:95:cf: 23:94:82:e3:94:b3:4c:80:be:43:25:99:17:01:24: 10:8c:1e:1a:d9:8b:ce:ba:ae:5f:07:87:86:1c:f7: db:8d:ae:e1:e7:83:81:6e:b3:57:67:8e:60:c6:41: 52:f9:cb:41:e5:9e:26:95:3b:e8:81:d0:2e:6b:ab: 54:04:40:7b:cb:a9:bf:16:d8:e9:ad:00:32:a1:26: 13:6d:1d:6c:cd:34:c0:a0:ad:11:0f:9b:c6:dd:d1: a1:77:c0:7f:32:cf:86:e4:91:8c:7c:32:bc:8b:91: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1B:DD:F3:A3:1F:C7:FF:42:57:AD:A8:59:41:37:F4:9F:4F:98:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:34:02:3b:ed:c2:ba:22:24:26:29:f8:32:29:81:88:7d:da: 02:1c:6b:8f:10:38:84:fb:1b:92:67:c0:d8:fc:2c:c4:fe:4a: 59:c6:aa:3d:b7:fa:b4:d6:e0:7c:90:64:6c:68:58:cd:4f:c4: 24:2c:22:4b:c0:8f:26:8c:1d:d8:0e:c1:75:42:fa:f8:16:a8: cd:43:24:c3:aa:8e:fe:1e:14:5b:f8:84:40:6a:53:60:6b:41: 06:3f:55:c3:03:3c:e7:bd:0b:99:7f:2f:99:9e:41:79:62:b4: 61:d6:00:fd:eb:2c:8d:05:df:bd:38:3b:ff:df:80:5b:b6:34: 57:08:80:ad:01:6a:51:1b:1f:00:c0:ae:98:cb:9b:07:28:55: 19:24:52:f8:e3:23:45:79:5c:2b:5d:6b:08:db:28:ed:53:c1: ab:37:06:51:5c:85:fb:ea:9d:fc:f3:1a:46:88:57:fc:c2:b1: 71:bb:53:0c:9c:f9:3c:9a:cd:af:d3:fd:97:ab:90:8a:2e:2f: 2e:b5:93:b5:ec:bd:a0:22:81:13:91:e0:fd:9b:60:44:e2:e4: fc:e1:f6:0a:47:93:ab:24:c2:5f:02:25:76:79:a0:ed:15:8e: da:c3:00:cc:b6:48:3b:37:ee:6d:b7:df:30:b0:77:b6:dc:fd: b4:39:5c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQpccPMA16ayfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NTg2MmQ3YTUtNWQ3MC00NDU3LTgwMmUtNmJiMjc4N2UyOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyEG8f8jlO2OxGvDGEHMqfVQz9sOnlRW01Xd hvLp/YHm0/ZKeXqgScad0NCb5TCYufTrS1cqn89FCVD5UUITxBgOgEYgo02tyNeX fVd0ixcsgLJFOFEzqoU9IZi1dvMmwxNgJ0nBgQEbPAG/e0j4Y12WOgJyJom/YfGV AwyaRBPcetv25r7q6nHsACd6bcrBHHELlc8jlILjlLNMgL5DJZkXASQQjB4a2YvO uq5fB4eGHPfbja7h54OBbrNXZ45gxkFS+ctB5Z4mlTvogdAua6tUBEB7y6m/Ftjp rQAyoSYTbR1szTTAoK0RD5vG3dGhd8B/Ms+G5JGMfDK8i5G6EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsb3fOjH8f/QletqFlBN/SfT5iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjAyYWI3NTgtNzAwYi0z MDllLWE2ZjItMzI0NjJlNWY2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo0AjvtwroiJCYp+DIpgYh92gIca48QOIT7G5JnwNj8LMT+SlnGqj23 +rTW4HyQZGxoWM1PxCQsIkvAjyaMHdgOwXVC+vgWqM1DJMOqjv4eFFv4hEBqU2Br QQY/VcMDPOe9C5l/L5meQXlitGHWAP3rLI0F3704O//fgFu2NFcIgK0BalEbHwDA rpjLmwcoVRkkUvjjI0V5XCtdawjbKO1Twas3BlFchfvqnfzzGkaIV/zCsXG7Uwyc +Tyaza/T/ZerkIouLy61k7XsvaAigROR4P2bYETi5Pzh9gpHk6skwl8CJXZ5oO0V jtrDAMy2SDs37m233zCwd7bc/bQ5XKY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org