$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa File: d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa (raw, json) Hash identifier: PD4ZFBV1r0LLxCoJeDa92LlzOroB0jhQophEvphm7z0= Subject key identifier: FF:BB:78:7E:B7:89:AC:D1:F1:1C:61:85:F6:35:7E:F5:D1:CC:8A:BC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584779AB62DD8E1DC6F2FE15DD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa Signing time: Tue 08 Oct 2024 17:18:05 +0000 ROA not before: Tue 08 Oct 2024 17:18:05 +0000 ROA not after: Mon 06 Jan 2025 18:18:05 +0000 asID: 8069 IP address blocks: 20.33.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:ab:62:dd:8e:1d:c6:f2:fe:15:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 8 17:18:05 2024 GMT Not After : Jan 6 18:18:05 2025 GMT Subject: CN=4db4bffd-a6d9-487f-b31d-fd3d545e64e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:72:b5:14:94:43:eb:fd:cd:ec:04:30:66: 43:03:d6:2f:c1:ed:b1:e4:56:f5:cb:5c:33:d8:f0: 1e:ee:4d:73:e9:12:9d:45:0f:ed:00:0f:18:55:3b: cb:a5:70:52:91:d0:50:d4:77:ad:c0:f4:c8:aa:80: b8:b5:55:6d:a4:65:1b:51:46:c3:6f:01:4e:d9:ad: 62:b3:02:1c:f4:82:72:4d:3e:2f:68:95:b8:52:59: 19:e1:63:51:ac:b6:90:f5:04:be:79:8e:0d:24:bb: c3:9d:05:8a:07:3d:a9:e6:28:c4:1a:a7:1e:e2:0e: 69:a5:eb:4d:83:01:61:96:fc:fa:e4:5b:59:ae:6e: 39:30:39:9a:32:84:6d:66:1b:a0:2b:9e:ef:9e:10: d0:7a:81:06:c0:6b:f1:ff:c3:38:49:66:38:57:4c: 68:ff:0d:7a:ed:91:4e:5a:5b:08:2a:d8:0a:e1:32: ef:60:5c:03:4f:5c:ab:c3:d2:f4:c6:2f:42:b4:fe: 65:73:07:2e:45:21:92:71:00:e8:04:6f:3f:25:fb: 5d:df:fb:62:5d:17:7a:c7:b2:73:24:df:64:b6:87: 2e:87:41:6b:3a:db:c4:82:5b:24:6d:5b:f2:b9:d8: 00:59:8b:a4:7a:de:a8:4c:9e:3c:dc:fd:fa:cf:6f: a9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:78:7E:B7:89:AC:D1:F1:1C:61:85:F6:35:7E:F5:D1:CC:8A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cf:71:04:d0:de:69:9a:1c:e2:c9:85:0a:a2:48:06:c0:9b: 64:77:91:e5:fe:7c:b8:31:49:2f:79:4a:fb:a5:35:38:7c:a3: ff:43:d8:4b:6f:5e:ed:1e:c7:1e:9e:64:74:5b:29:cf:18:ad: 31:3a:b0:8f:94:eb:f3:76:cb:43:89:c4:a1:6a:cf:89:4f:62: 0a:8f:b6:1a:db:31:f2:d3:43:4d:9e:15:37:2b:c8:7d:f9:54: ff:d3:14:33:26:fc:8e:93:e9:f7:90:d1:f9:b3:a1:ea:c0:e2: 92:f2:fa:1d:62:ae:72:ae:1f:14:fb:c4:ed:dd:8c:4a:67:02: ba:0c:65:0d:4b:75:32:33:06:d5:eb:b9:ac:34:7d:86:bf:63: 1c:bb:1d:6c:d7:3a:e3:ff:74:07:22:fe:93:e0:71:c7:46:7b: 5c:80:e6:5f:b3:a6:67:3a:5f:a5:26:b8:5f:d1:91:a4:e4:3b: b4:ad:8f:20:d5:c9:23:b7:97:cf:c9:55:52:82:87:d8:00:74: 9b:d0:d2:01:f1:52:56:37:dc:f1:fe:9f:85:33:ef:e9:6b:bf: 49:8c:d1:e1:2c:08:33:d0:b9:4f:a7:91:d0:27:7e:18:e8:7b: b9:9f:ff:04:8a:28:7e:2b:e4:0f:ca:0a:ba:72:d0:00:46:1e: dc:d7:98:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5q2Ldjh3G8v4V3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwODE3MTgwNVoXDTI1MDEwNjE4MTgwNVowLzEtMCsGA1UEAxMk NGRiNGJmZmQtYTZkOS00ODdmLWIzMWQtZmQzZDU0NWU2NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBJytRSUQ+v9zewEMGZDA9Yvwe2x5Fb1y1wz 2PAe7k1z6RKdRQ/tAA8YVTvLpXBSkdBQ1HetwPTIqoC4tVVtpGUbUUbDbwFO2a1i swIc9IJyTT4vaJW4UlkZ4WNRrLaQ9QS+eY4NJLvDnQWKBz2p5ijEGqce4g5ppetN gwFhlvz65FtZrm45MDmaMoRtZhugK57vnhDQeoEGwGvx/8M4SWY4V0xo/w167ZFO WlsIKtgK4TLvYFwDT1yrw9L0xi9CtP5lcwcuRSGScQDoBG8/Jftd3/tiXRd6x7Jz JN9ktocuh0FrOtvEglskbVvyudgAWYuket6oTJ483P36z2+p8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+7eH63iazR8RxhhfY1fvXRzIq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc4OGZjOTktZmEzOC0z YzA0LThmYzQtN2ViNmJiMTI1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjPcQTQ3mmaHOLJhQqiSAbAm2R3keX+fLgxSS95SvulNTh8o/9D2Etv Xu0exx6eZHRbKc8YrTE6sI+U6/N2y0OJxKFqz4lPYgqPthrbMfLTQ02eFTcryH35 VP/TFDMm/I6T6feQ0fmzoerA4pLy+h1irnKuHxT7xO3djEpnAroMZQ1LdTIzBtXr uaw0fYa/Yxy7HWzXOuP/dAci/pPgccdGe1yA5l+zpmc6X6UmuF/RkaTkO7StjyDV ySO3l8/JVVKCh9gAdJvQ0gHxUlY33PH+n4Uz7+lrv0mM0eEsCDPQuU+nkdAnfhjo e7mf/wSKKH4r5A/KCrpy0ABGHtzXmCM= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:51 2024 by rpki-client on console-fra.rpki-client.org