$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa File: ceaea99f-2361-3e42-81dc-2424d99387d5.roa (raw, json) Hash identifier: WYis+og8GedvMb52VxQ0ltWMemFQeMqyATjW2fwmxro= Subject key identifier: 67:B2:A5:01:99:06:A8:7D:B4:3D:20:61:7E:D9:ED:21:3A:68:AA:28 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584726D08FC6FB554FB21FE26500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:8f:c6:fb:55:4f:b2:1f:e2:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=7ed1aebf-d6e5-4c82-92fb-dd27b69e18a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:a4:6d:9a:78:34:92:ec:64:f4:d9:5c:7f: 8a:f6:1a:f7:1e:a8:80:ed:39:64:1c:74:5d:ad:6b: fb:99:10:dd:ce:d0:ec:25:8b:0b:f9:ba:0e:68:fd: a7:7d:7b:f9:7f:98:c3:70:2f:d6:25:cc:4a:8e:95: 38:89:82:46:2c:72:18:1b:da:39:c3:1b:d1:7b:18: ab:25:56:19:cd:61:1b:1f:be:7c:de:ce:e7:ae:94: 6f:1b:15:99:0a:8d:9a:64:d5:0e:f9:73:27:70:58: 86:ef:19:7f:fc:17:a2:b7:84:82:0d:84:08:fa:29: 70:7c:4c:22:7a:c8:75:5d:cf:4d:58:bb:e4:f6:6a: 31:06:7c:1f:8f:58:08:3f:74:6a:59:7b:1d:34:d8: c7:00:f3:f7:cf:8c:51:5b:be:d4:46:ae:a8:5b:91: 32:5f:57:b1:1f:ac:c5:78:97:26:50:0c:7e:dc:02: a5:8a:a7:3b:28:53:02:42:b1:ff:ac:c8:94:1d:3a: 7e:7a:30:79:4b:b7:41:31:f4:6a:92:37:14:f7:38: d4:e6:b1:4d:0c:69:66:ae:4a:b5:34:62:7a:ce:2c: 0f:0b:b5:fc:48:5d:65:df:91:1c:d0:fe:7b:05:64: 32:3b:a3:99:bd:76:78:01:07:d3:7c:40:0f:71:9d: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B2:A5:01:99:06:A8:7D:B4:3D:20:61:7E:D9:ED:21:3A:68:AA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e1:29:14:f7:3f:c8:23:c0:b9:46:ce:49:e4:e7:87:a0:52: ba:b6:c2:b6:d2:82:7f:88:3e:e9:9e:03:28:10:80:ee:3a:be: 6e:f3:92:b9:1c:85:33:7f:40:2e:0b:82:75:11:06:af:44:dc: e7:d9:50:8e:7e:5f:fc:8d:40:7c:6a:0b:58:1a:6c:f5:dc:ba: 13:91:96:64:69:3e:8c:3c:96:8e:db:bd:7d:60:e3:1d:14:84: 91:51:3d:14:40:f8:a3:c0:3a:46:19:65:9b:d0:22:7a:09:c5: 97:52:c8:11:f3:a1:08:7c:c1:75:4d:80:d7:7b:6c:8e:06:56: 01:7c:87:82:73:54:cd:df:cb:e8:44:a0:7a:c7:a1:0b:0d:db: fd:f4:b4:b6:fb:bd:a5:5c:6d:c7:28:38:e5:c0:83:6c:78:6d: 0e:07:e1:7f:d4:00:ae:21:83:2e:13:cd:3e:c2:16:5a:0f:29: f4:77:c2:60:07:32:c8:ee:6d:07:a5:63:38:8f:49:72:b5:10: ed:bf:71:34:fa:45:ba:31:6c:e3:79:a7:15:58:5f:46:a3:cf: b5:bd:4b:ec:ba:ea:63:0d:a6:05:8e:78:8c:eb:2c:52:ff:7a: 3c:82:77:52:3f:5b:a4:ca:e3:13:fd:5d:e8:0a:24:92:7b:bf: 31:11:4f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0I/G+1VPsh/iZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk N2VkMWFlYmYtZDZlNS00YzgyLTkyZmItZGQyN2I2OWUxOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle+kbZp4NJLsZPTZXH+K9hr3HqiA7TlkHHRd rWv7mRDdztDsJYsL+boOaP2nfXv5f5jDcC/WJcxKjpU4iYJGLHIYG9o5wxvRexir JVYZzWEbH7583s7nrpRvGxWZCo2aZNUO+XMncFiG7xl//Beit4SCDYQI+ilwfEwi esh1Xc9NWLvk9moxBnwfj1gIP3RqWXsdNNjHAPP3z4xRW77URq6oW5EyX1exH6zF eJcmUAx+3AKliqc7KFMCQrH/rMiUHTp+ejB5S7dBMfRqkjcU9zjU5rFNDGlmrkq1 NGJ6ziwPC7X8SF1l35Ec0P57BWQyO6OZvXZ4AQfTfEAPcZ0puQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeypQGZBqh9tD0gYX7Z7SE6aKooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VhZWE5OWYtMjM2MS0z ZTQyLTgxZGMtMjQyNGQ5OTM4N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHhKRT3P8gjwLlGzknk54egUrq2wrbSgn+IPumeAygQgO46vm7zkrkc hTN/QC4LgnURBq9E3OfZUI5+X/yNQHxqC1gabPXcuhORlmRpPow8lo7bvX1g4x0U hJFRPRRA+KPAOkYZZZvQInoJxZdSyBHzoQh8wXVNgNd7bI4GVgF8h4JzVM3fy+hE oHrHoQsN2/30tLb7vaVcbccoOOXAg2x4bQ4H4X/UAK4hgy4TzT7CFloPKfR3wmAH MsjubQelYziPSXK1EO2/cTT6RboxbON5pxVYX0ajz7W9S+y66mMNpgWOeIzrLFL/ ejyCd1I/W6TK4xP9XegKJJJ7vzERT1s= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:13 2024 by rpki-client on console-fra.rpki-client.org