$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json) Hash identifier: qa03dctJ7DVo9DQq3+3RxGOLqu+JKG8oBu3hI/PrPoI= Subject key identifier: 3A:CE:5A:47:77:5E:F1:C4:16:45:04:5C:B3:57:01:14:4F:6D:01:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858473FF0AA8B0536EE3385A20DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:aa:8b:05:36:ee:33:85:a2:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=2a3ac38e-bbde-4571-ae1f-3365e1ec3f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:f8:40:87:91:cf:64:cb:ac:71:5e:70:52: e0:41:aa:3f:7e:1d:d1:53:3a:32:73:dc:d2:72:3e: 99:ee:f5:29:e8:92:34:19:9b:69:91:b1:fc:35:76: 5a:8e:1b:0d:2b:5f:99:fb:7d:71:ae:d2:37:3c:78: 9b:8a:05:6d:94:43:e6:1b:3a:3c:1f:87:9c:13:75: 7f:f5:ec:00:90:1c:19:04:f6:7f:a4:43:ba:3b:a5: 8e:88:1a:89:32:92:3b:46:b6:6c:bd:a0:cb:d2:c3: 68:f5:c5:3b:43:a0:b9:7f:04:4f:03:87:b8:5b:66: a9:71:6c:8c:04:eb:46:53:db:31:c9:60:eb:f3:58: b9:ed:56:c4:51:4e:0c:69:2b:9a:3f:ae:88:5d:06: b8:d4:15:94:11:f9:c3:93:44:6a:8f:7f:02:79:6b: 28:d7:00:e7:7f:82:50:61:d6:9f:22:8d:87:c8:80: ce:96:d4:99:c3:20:46:b4:f0:2b:47:fb:90:29:94: e4:d1:3e:13:c1:2b:41:d8:fa:73:c3:3d:3a:a3:71: 44:98:8d:29:7d:40:2a:a3:a1:f2:08:20:c2:62:d2: 53:41:de:77:3e:fe:a8:d0:ed:8a:b1:3c:89:e9:8f: 0a:b7:8e:85:83:88:78:06:bb:51:b9:21:cc:c0:4d: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CE:5A:47:77:5E:F1:C4:16:45:04:5C:B3:57:01:14:4F:6D:01:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:83:26:8b:f1:91:88:95:ef:a7:4c:fa:30:68:07:e8:72:14: ff:53:73:f6:e7:04:8c:60:03:b4:95:37:d5:b8:fe:86:20:b9: a8:64:f8:73:ac:4d:d5:65:44:9d:dc:80:43:36:34:42:16:4b: 0e:da:79:61:d1:89:bf:e3:d5:12:6a:d2:0e:33:5f:b0:23:ad: a2:a1:d6:70:92:b5:58:07:9e:33:90:70:c8:38:be:cd:d4:7c: b6:a6:d6:db:59:07:82:a5:71:0d:f2:8a:f3:78:84:9c:63:6f: f4:a1:e8:21:7e:47:f4:9f:d0:1d:99:57:ed:71:20:68:56:80: a0:7b:23:b8:1b:f6:d3:cb:7f:53:61:58:ee:02:a2:a3:18:14: 2e:95:76:64:54:15:b0:8c:bf:a6:b4:26:eb:f5:ad:da:33:a9: c8:bf:c0:6a:48:f2:98:22:a7:81:56:8a:4a:21:0c:77:a3:06: f0:76:87:21:b5:bd:4a:e7:16:24:03:bb:a7:24:ca:f5:3d:cd: a1:39:53:3f:80:20:0c:a6:bd:1c:d0:ea:22:de:01:ce:dd:04: 13:e2:29:17:3e:22:35:17:df:7b:ba:0d:cc:47:00:c1:d0:2c: b7:f0:50:2e:e2:15:4b:b5:05:4c:49:2f:d8:0a:62:47:7c:1e: 21:d6:5e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KqLBTbuM4WiDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MmEzYWMzOGUtYmJkZS00NTcxLWFlMWYtMzM2NWUxZWMzZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbP4QIeRz2TLrHFecFLgQao/fh3RUzoyc9zS cj6Z7vUp6JI0GZtpkbH8NXZajhsNK1+Z+31xrtI3PHibigVtlEPmGzo8H4ecE3V/ 9ewAkBwZBPZ/pEO6O6WOiBqJMpI7RrZsvaDL0sNo9cU7Q6C5fwRPA4e4W2apcWyM BOtGU9sxyWDr81i57VbEUU4MaSuaP66IXQa41BWUEfnDk0Rqj38CeWso1wDnf4JQ YdafIo2HyIDOltSZwyBGtPArR/uQKZTk0T4TwStB2Ppzwz06o3FEmI0pfUAqo6Hy CCDCYtJTQd53Pv6o0O2KsTyJ6Y8Kt46Fg4h4BrtRuSHMwE2BAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrOWkd3XvHEFkUEXLNXARRPbQFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqDJovxkYiV76dM+jBoB+hyFP9Tc/bnBIxgA7SVN9W4/oYguahk+HOs TdVlRJ3cgEM2NEIWSw7aeWHRib/j1RJq0g4zX7AjraKh1nCStVgHnjOQcMg4vs3U fLam1ttZB4KlcQ3yivN4hJxjb/Sh6CF+R/Sf0B2ZV+1xIGhWgKB7I7gb9tPLf1Nh WO4CoqMYFC6VdmRUFbCMv6a0Juv1rdozqci/wGpI8pgip4FWikohDHejBvB2hyG1 vUrnFiQDu6ckyvU9zaE5Uz+AIAymvRzQ6iLeAc7dBBPiKRc+IjUX33u6DcxHAMHQ LLfwUC7iFUu1BUxJL9gKYkd8HiHWXsE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org