$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa File: c5213a05-0625-3375-8382-9c42d5a3e1cb.roa (raw, json) Hash identifier: sarL290jmGwQH4nkZcmHH/BYlB7vsZXdJA4m0079lwI= Subject key identifier: A5:B5:60:6B:74:ED:6B:E3:0F:D0:9E:D2:75:A6:E2:E4:BF:EC:4E:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858473FF0AAAC1C5E5DDEFC4F6C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:aa:ac:1c:5e:5d:de:fc:4f:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=6f279c41-5213-4cfd-a6fe-93351ef8f959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:f3:69:99:3c:03:4a:f1:77:f7:2b:10:cf: 05:cf:bf:da:f0:fa:69:c1:fe:26:0f:54:53:aa:92: 82:3b:58:4c:73:c7:59:d5:a6:d1:a5:78:cc:ed:29: 98:cb:1c:bb:28:bf:8a:2a:64:b3:5c:62:54:ab:b0: 6f:a6:3c:14:aa:54:8e:2e:85:07:57:5c:fc:bd:d5: 87:8c:fb:4c:06:dc:b7:d9:07:8e:c3:71:a5:8b:1b: c3:b6:42:6f:bf:85:a6:3b:1f:20:57:17:1f:b3:27: 5f:92:a1:b9:f9:77:a0:18:d8:b1:48:4e:9f:eb:23: 15:ef:a7:29:b6:3c:ed:92:34:af:4e:b4:31:75:71: 07:d5:0f:4f:55:92:ba:20:24:25:d7:b4:0a:b9:67: 56:11:92:f8:c8:a1:ce:5b:a5:9d:65:83:a2:cf:09: 15:a7:b2:dc:bd:a6:8a:d9:ba:e4:af:b5:24:52:24: ab:20:0a:83:99:31:95:cc:29:96:3b:96:39:4c:70: b5:56:3a:bc:9a:31:bd:e6:fd:f3:21:b0:9b:3f:bb: 3d:32:ca:08:c5:72:79:56:a9:f5:6a:b9:45:c5:f0: 3d:ce:5d:cc:f5:f3:a3:d8:01:28:d1:35:1d:2b:56: f9:3c:28:e6:b8:c7:f7:4e:ad:46:68:0d:0c:3d:15: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:60:6B:74:ED:6B:E3:0F:D0:9E:D2:75:A6:E2:E4:BF:EC:4E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:15:48:7d:80:d6:e6:3a:69:50:5e:f8:73:ab:1c:a8:8e:42: e3:9a:9b:34:0b:1a:cd:86:d5:e0:cb:8a:23:c8:49:58:bc:29: 38:2d:c7:c7:65:4b:07:2f:7d:ae:31:ec:bb:38:71:98:f3:6a: 1d:75:c3:84:76:90:a0:06:25:59:83:7c:a8:53:2a:7a:e4:bf: 10:fb:95:29:45:47:16:e2:ab:d2:a6:30:1d:37:a2:81:0c:26: 49:e2:2d:ce:86:d3:b1:59:7c:dc:e0:77:a8:0d:d7:64:29:0c: f8:62:64:8e:24:ad:46:8f:b8:ea:81:d3:96:eb:49:4f:39:a3: a2:23:1d:74:02:92:14:02:00:16:58:0c:17:d1:d9:83:9d:63: 3c:6b:4f:ba:2f:21:e5:de:48:5b:44:0e:fd:d4:a6:ef:77:18: 44:8c:7a:09:67:d4:e6:78:06:05:14:d1:2a:f7:a1:fa:35:d2: d8:49:dc:ef:9c:be:8a:82:0d:7e:c4:6a:ab:22:f2:e3:b7:0d: d6:58:7a:0d:36:18:87:e6:a6:ac:ca:fc:64:b1:79:bc:38:8f: b6:f6:94:5e:38:ff:b7:6a:0d:bb:42:c4:96:a2:2d:2d:91:5d: 0b:e8:06:4b:b7:2f:6c:c1:bd:0a:6c:99:68:0e:36:14:95:80: 1c:e7:5f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KqsHF5d3vxPbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NmYyNzljNDEtNTIxMy00Y2ZkLWE2ZmUtOTMzNTFlZjhmOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3fzaZk8A0rxd/crEM8Fz7/a8Pppwf4mD1RT qpKCO1hMc8dZ1abRpXjM7SmYyxy7KL+KKmSzXGJUq7BvpjwUqlSOLoUHV1z8vdWH jPtMBty32QeOw3GlixvDtkJvv4WmOx8gVxcfsydfkqG5+XegGNixSE6f6yMV76cp tjztkjSvTrQxdXEH1Q9PVZK6ICQl17QKuWdWEZL4yKHOW6WdZYOizwkVp7LcvaaK 2brkr7UkUiSrIAqDmTGVzCmWO5Y5THC1Vjq8mjG95v3zIbCbP7s9MsoIxXJ5Vqn1 arlFxfA9zl3M9fOj2AEo0TUdK1b5PCjmuMf3Tq1GaA0MPRVemwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW1YGt07WvjD9Ce0nWm4uS/7E5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzUyMTNhMDUtMDYyNS0z Mzc1LTgzODItOWM0MmQ1YTNlMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYVSH2A1uY6aVBe+HOrHKiOQuOamzQLGs2G1eDLiiPISVi8KTgtx8dl Swcvfa4x7Ls4cZjzah11w4R2kKAGJVmDfKhTKnrkvxD7lSlFRxbiq9KmMB03ooEM JkniLc6G07FZfNzgd6gN12QpDPhiZI4krUaPuOqB05brSU85o6IjHXQCkhQCABZY DBfR2YOdYzxrT7ovIeXeSFtEDv3Upu93GESMegln1OZ4BgUU0Sr3ofo10thJ3O+c voqCDX7Eaqsi8uO3DdZYeg02GIfmpqzK/GSxebw4j7b2lF44/7dqDbtCxJaiLS2R XQvoBku3L2zBvQpsmWgONhSVgBznX/Q= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org