$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa File: dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json) Hash identifier: NN42M5HUsKAtXK5zEsqj5E5Dqo3lUwJPFRVvOTcIi64= Subject key identifier: 62:7B:47:05:70:3E:69:7C:8B:F7:7A:AD:CE:B0:E4:7C:C7:20:64:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847AB6C1D603D53597C333A60C8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.157.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:1d:60:3d:53:59:7c:33:3a:60:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=07c39bbe-2447-4e43-b403-30adaf9a10f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:68:e5:5d:39:4e:ff:48:1d:bc:57:60:49: 32:df:21:8f:76:10:2f:b5:93:1e:a9:41:94:cb:c2: 43:4e:cf:3b:16:e9:bf:13:f6:8d:ea:9b:16:4a:ae: 2c:7d:dc:54:af:56:ad:be:3a:61:99:e6:ef:00:14: 87:ff:d5:59:76:ff:40:f5:b0:31:5d:9c:e7:f0:86: f6:35:97:06:09:d0:64:e7:04:0a:d4:38:3a:b5:73: ef:1b:fb:d5:c8:82:66:8e:a3:04:ea:84:cb:9b:8c: d0:c4:77:6f:1d:48:ea:00:81:75:3e:5f:70:b3:ea: 97:59:bd:bf:d6:3a:ae:f5:c2:bc:73:df:0c:c4:17: 02:70:59:2f:10:2d:81:24:23:4e:5b:c9:e3:fa:c6: 09:17:23:7e:62:f3:32:83:ad:0f:2a:11:25:fc:b2: 7f:e1:65:09:6a:4d:8f:12:2c:98:c2:36:a9:b1:1a: 17:30:9c:2e:39:2f:fa:63:af:48:8a:8b:72:2d:c6: 81:23:99:c0:18:b1:e0:3c:5e:ef:b0:f8:42:1c:4b: 78:07:19:ae:67:72:18:72:9d:2d:ff:af:1e:67:70: 8f:81:c5:fb:49:42:ac:83:0b:3b:e9:f6:d8:c7:19: 7c:66:b0:5b:95:4b:2b:01:e4:f1:43:df:f9:f4:9c: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:47:05:70:3E:69:7C:8B:F7:7A:AD:CE:B0:E4:7C:C7:20:64:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:73:ac:74:cd:4b:02:0b:5e:f1:bc:af:2e:bd:c0:e9:92:94: bc:48:2d:a7:0c:bd:be:21:ca:01:a2:49:ac:d9:7c:9b:eb:cb: d0:4a:2e:e2:fe:3a:7a:2c:a0:e2:21:11:0c:be:ba:7c:9b:a7: 17:c4:33:73:ec:9e:f6:15:60:14:86:29:91:6a:35:eb:8f:d8: f7:6d:3e:b3:6a:4f:a5:71:dc:4a:ce:b8:17:61:76:70:c2:44: dc:28:27:8e:57:f8:84:5d:ec:b7:c3:75:e5:09:9d:7a:35:97: b7:26:b5:17:2e:a3:9b:83:f4:e6:8e:f5:1c:3c:7d:8e:8e:b8: 01:1e:5c:ac:f2:57:16:70:8d:12:24:0c:7d:60:ef:1e:85:24: 69:1f:95:5e:dd:bc:0e:e3:1d:84:f9:eb:1e:73:ea:e0:45:30: 90:c9:bc:d8:f9:f0:9a:c0:74:a3:5b:7d:2b:8a:ba:41:63:f9: 3f:d0:bf:63:4a:0d:f4:46:c2:fe:f9:47:94:ea:ab:4f:79:be: fd:32:ad:80:3b:41:ac:0b:d7:95:80:ce:13:9e:56:38:1f:07: eb:28:32:d9:e2:f0:20:b6:f3:b9:8e:cb:a1:fe:b6:bd:f9:df: 46:b9:b4:f7:69:06:4c:6d:e6:14:2c:3c:7c:94:27:27:36:1f: 20:26:ca:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbB1gPVNZfDM6YMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MDdjMzliYmUtMjQ0Ny00ZTQzLWI0MDMtMzBhZGFmOWExMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTVo5V05Tv9IHbxXYEky3yGPdhAvtZMeqUGU y8JDTs87Fum/E/aN6psWSq4sfdxUr1atvjphmebvABSH/9VZdv9A9bAxXZzn8Ib2 NZcGCdBk5wQK1Dg6tXPvG/vVyIJmjqME6oTLm4zQxHdvHUjqAIF1Pl9ws+qXWb2/ 1jqu9cK8c98MxBcCcFkvEC2BJCNOW8nj+sYJFyN+YvMyg60PKhEl/LJ/4WUJak2P EiyYwjapsRoXMJwuOS/6Y69IiotyLcaBI5nAGLHgPF7vsPhCHEt4BxmuZ3IYcp0t /68eZ3CPgcX7SUKsgws76fbYxxl8ZrBblUsrAeTxQ9/59JwtewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ7RwVwPml8i/d6rc6w5HzHIGSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJlMWVhMmEtNTVhYS0z MWY2LThjZWMtYmZhZGUwMzc3MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxzrHTNSwILXvG8ry69wOmSlLxILacMvb4hygGiSazZfJvry9BKLuL+ OnosoOIhEQy+unybpxfEM3PsnvYVYBSGKZFqNeuP2PdtPrNqT6Vx3ErOuBdhdnDC RNwoJ45X+IRd7LfDdeUJnXo1l7cmtRcuo5uD9OaO9Rw8fY6OuAEeXKzyVxZwjRIk DH1g7x6FJGkflV7dvA7jHYT56x5z6uBFMJDJvNj58JrAdKNbfSuKukFj+T/Qv2NK DfRGwv75R5Tqq095vv0yrYA7QawL15WAzhOeVjgfB+soMtni8CC287mOy6H+tr35 30a5tPdpBkxt5hQsPHyUJyc2HyAmyj0= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:51 2024 by rpki-client on console-fra.rpki-client.org