$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa File: d3d4e8bf-bf55-38de-9130-ab101d948b21.roa (raw, json) Hash identifier: k10PsI5G7MNw58cpyFcXoncKxTKkrpXZAPAf+UQ0whs= Subject key identifier: 72:D9:53:C3:31:34:B4:8E:34:E6:74:D1:2D:86:74:09:2A:9B:FF:69 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847CA3F8A82F2A73B40FA2FB980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:8a:82:f2:a7:3b:40:fa:2f:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=7186f38d-3ae2-49f7-8354-20faf9e8048b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:b2:ab:28:1b:43:db:8f:56:70:22:87:f8: ea:97:7a:93:63:01:42:cd:ee:f9:c3:76:23:1f:7c: 76:cd:46:f6:59:54:70:ee:ef:99:fc:26:81:2d:69: ec:4f:d1:4b:3c:0f:ee:d4:0c:d9:22:46:e4:e3:c8: 82:8a:fc:88:7a:b7:1a:81:96:a4:ef:12:bf:52:96: 99:89:65:38:b4:19:91:6c:03:6e:0f:08:7c:2d:9f: 4d:00:76:b9:e7:33:6b:03:b4:88:7a:d4:d7:d3:27: cc:e8:fd:ad:ca:a1:76:6b:27:f0:17:41:84:0b:85: e1:34:b5:d0:e6:d8:d2:61:05:d8:1d:36:b9:e5:a4: 09:17:31:b4:aa:37:5c:be:0c:93:f7:3d:b7:38:92: 14:a3:43:bd:97:a5:f1:57:3a:b3:55:24:3a:06:76: 40:a8:6f:e1:35:a9:4b:27:f9:e7:ea:20:db:8e:a4: 41:07:f9:cc:8b:21:08:bf:33:bb:d9:b8:f8:9d:83: 51:95:b8:fc:23:67:e7:b4:cd:58:6f:4c:bd:72:59: e0:54:b4:b3:b3:b8:96:d4:ab:95:ad:bc:ec:97:d5: 5e:4f:26:e1:a4:42:3a:0a:e3:93:f9:90:64:e9:14: 3b:4e:b3:76:80:cb:3e:d1:b3:e3:e9:bb:93:8d:61: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:53:C3:31:34:B4:8E:34:E6:74:D1:2D:86:74:09:2A:9B:FF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:ae:85:df:7f:68:40:54:ef:c5:c8:6d:46:55:a7:a5:6d: d4:aa:2a:df:05:06:c1:a0:4d:2e:7e:04:21:f6:d9:17:07:a0: 75:97:dd:a5:ea:55:2c:c6:28:4c:2f:7c:f7:48:29:6e:a1:91: e7:fa:13:78:e9:4d:3b:26:29:6b:d3:c7:da:36:9d:04:c5:33: dd:6b:93:fd:91:ba:b0:99:46:51:72:b8:33:f7:a4:fd:46:00: f8:03:71:3f:37:42:f9:ab:f5:d1:08:32:51:4f:27:03:7a:81: 95:b3:d0:93:45:0d:ed:33:dd:fb:9e:64:3d:cf:00:34:be:cd: 49:8d:0a:6a:a8:3c:a1:76:0e:a2:22:38:11:6b:5d:81:f7:73: e1:f3:78:4b:4c:b6:5e:4c:6f:70:8a:88:b0:09:90:91:b7:43: 0e:90:68:fd:66:46:61:bd:a2:37:73:da:60:54:b1:7c:b1:7d: 25:f5:4b:ea:2b:06:99:2e:b5:22:eb:16:c6:30:6b:98:46:fe: 71:e4:71:06:73:02:7e:f8:81:2d:00:7e:dc:fb:12:0b:48:94: bb:0e:db:fa:f3:58:5b:0c:fc:26:32:60:5a:24:63:e6:74:17: 40:ea:41:e6:14:00:87:bc:e1:85:70:76:fe:34:4b:31:39:b2: 31:f8:ae:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4qC8qc7QPovuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzE4NmYzOGQtM2FlMi00OWY3LTgzNTQtMjBmYWY5ZTgwNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJGyqygbQ9uPVnAih/jql3qTYwFCze75w3Yj H3x2zUb2WVRw7u+Z/CaBLWnsT9FLPA/u1AzZIkbk48iCivyIercagZak7xK/UpaZ iWU4tBmRbANuDwh8LZ9NAHa55zNrA7SIetTX0yfM6P2tyqF2ayfwF0GEC4XhNLXQ 5tjSYQXYHTa55aQJFzG0qjdcvgyT9z23OJIUo0O9l6XxVzqzVSQ6BnZAqG/hNalL J/nn6iDbjqRBB/nMiyEIvzO72bj4nYNRlbj8I2fntM1Yb0y9clngVLSzs7iW1KuV rbzsl9VeTybhpEI6CuOT+ZBk6RQ7TrN2gMs+0bPj6buTjWG6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLZU8MxNLSONOZ00S2GdAkqm/9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNkNGU4YmYtYmY1NS0z OGRlLTkxMzAtYWIxMDFkOTQ4YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrKroXff2hAVO/FyG1GVaelbdSqKt8FBsGgTS5+BCH22RcHoHWX3aXq VSzGKEwvfPdIKW6hkef6E3jpTTsmKWvTx9o2nQTFM91rk/2RurCZRlFyuDP3pP1G APgDcT83Qvmr9dEIMlFPJwN6gZWz0JNFDe0z3fueZD3PADS+zUmNCmqoPKF2DqIi OBFrXYH3c+HzeEtMtl5Mb3CKiLAJkJG3Qw6QaP1mRmG9ojdz2mBUsXyxfSX1S+or BpkutSLrFsYwa5hG/nHkcQZzAn74gS0Aftz7EgtIlLsO2/rzWFsM/CYyYFokY+Z0 F0DqQeYUAIe84YVwdv40SzE5sjH4rrc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org