$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: u0lWAiwWy4/XUvg/TnJLv7nVwEUybXYXLQgDczsQJV8= Subject key identifier: 2D:28:68:64:72:A0:D3:56:B3:D4:57:60:18:39:A4:9C:D4:2D:5F:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584776610AA262B514FEBFB3CD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0a:a2:62:b5:14:fe:bf:b3:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=ec0a5b72-d7d9-4bad-a6a4-ab2c0cb1c913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:0b:c6:39:ac:81:86:b4:75:e7:d1:37:06: eb:1d:3f:21:e3:3b:df:93:47:fc:a0:8d:9d:30:05: d1:62:b0:6c:14:c6:ee:97:74:c7:3a:7e:2e:0f:4e: c5:f1:61:3c:07:8e:5f:f4:5a:d3:3e:37:4a:2c:66: ab:3f:4c:57:66:c9:92:77:1a:53:5b:f2:6f:5d:b3: b4:ce:79:60:23:cc:34:eb:2a:63:02:57:6f:13:0c: d1:08:fc:fa:65:ee:74:ef:31:8a:cd:f0:fc:7b:66: 73:d4:c8:09:e4:11:dd:e4:ca:87:93:f2:64:c4:6f: fb:79:d6:f7:f2:e1:9e:c8:5f:b8:14:e8:45:92:6b: b9:f0:d2:f4:39:31:91:cd:44:37:55:c5:b6:14:ca: a5:b1:bc:81:4f:65:f4:3b:db:ab:9e:3d:9b:d8:49: 84:22:6b:2c:04:5f:4b:c6:6e:42:6c:d5:7b:a6:02: f6:20:7e:99:b9:dc:41:d1:b4:1c:59:1b:c3:73:ea: 47:84:10:ce:2f:02:52:c2:83:04:35:99:2e:5b:cb: 08:a5:c8:de:be:47:65:b1:e9:24:54:99:82:a9:9f: 45:ab:00:b4:2f:7f:96:23:05:81:96:c9:14:bd:9b: 39:2f:3c:a7:67:58:38:65:28:21:dc:a0:4b:d5:6d: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:28:68:64:72:A0:D3:56:B3:D4:57:60:18:39:A4:9C:D4:2D:5F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:49:36:79:15:d0:1e:59:53:17:c7:8e:26:ac:06:51:fb: 91:94:cd:ee:14:71:df:28:35:e6:76:23:d8:2e:51:50:89:e8: 84:ac:5a:62:3d:e8:7e:da:2a:94:10:34:52:df:58:48:35:6d: ae:f0:6a:43:57:12:e2:5e:33:2a:86:ca:36:ff:a7:1d:cb:3f: c9:17:ce:e7:18:4b:98:11:a3:ff:9d:5a:1d:55:0e:c8:7b:a2: 3b:7a:35:6c:1c:e9:0d:43:d7:ae:94:a3:90:ac:df:13:93:a5: 23:71:74:8c:7e:26:37:8b:9d:fc:cf:99:bf:1b:59:51:3a:fe: 9d:ed:9a:1d:ab:a8:00:1f:1e:b9:29:ba:0d:29:cf:bd:17:88: 29:18:bb:d7:76:07:76:ad:cd:78:1f:85:8a:61:57:b5:d5:00: 95:69:b0:b5:0b:1e:90:56:a2:2f:a0:1a:b6:cd:69:d0:3c:e6: c5:38:00:59:36:ab:2c:21:23:c8:fc:bf:05:be:9b:58:53:34: 81:41:fe:31:92:c9:f2:4b:f7:1c:24:c3:fb:61:04:29:fd:dc: 41:c6:3d:5b:95:9a:1e:ae:e3:da:60:8d:23:b8:bc:31:49:ad: 69:cb:15:8c:a5:9c:68:9c:a9:c4:61:f0:23:fd:76:b3:61:e8: 22:bb:a6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQqiYrUU/r+zzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZWMwYTViNzItZDdkOS00YmFkLWE2YTQtYWIyYzBjYjFjOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXsLxjmsgYa0defRNwbrHT8h4zvfk0f8oI2d MAXRYrBsFMbul3THOn4uD07F8WE8B45f9FrTPjdKLGarP0xXZsmSdxpTW/JvXbO0 znlgI8w06ypjAldvEwzRCPz6Ze507zGKzfD8e2Zz1MgJ5BHd5MqHk/JkxG/7edb3 8uGeyF+4FOhFkmu58NL0OTGRzUQ3VcW2FMqlsbyBT2X0O9urnj2b2EmEImssBF9L xm5CbNV7pgL2IH6ZudxB0bQcWRvDc+pHhBDOLwJSwoMENZkuW8sIpcjevkdlsekk VJmCqZ9FqwC0L3+WIwWBlskUvZs5LzynZ1g4ZSgh3KBL1W1x+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0oaGRyoNNWs9RXYBg5pJzULV/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbgSTZ5FdAeWVMXx44mrAZR+5GUze4Ucd8oNeZ2I9guUVCJ6ISsWmI9 6H7aKpQQNFLfWEg1ba7wakNXEuJeMyqGyjb/px3LP8kXzucYS5gRo/+dWh1VDsh7 ojt6NWwc6Q1D166Uo5Cs3xOTpSNxdIx+JjeLnfzPmb8bWVE6/p3tmh2rqAAfHrkp ug0pz70XiCkYu9d2B3atzXgfhYphV7XVAJVpsLULHpBWoi+gGrbNadA85sU4AFk2 qywhI8j8vwW+m1hTNIFB/jGSyfJL9xwkw/thBCn93EHGPVuVmh6u49pgjSO4vDFJ rWnLFYylnGicqcRh8CP9drNh6CK7ps0= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:51 2024 by rpki-client on console-fra.rpki-client.org