$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa File: dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa (raw, json) Hash identifier: PWXpVjt4K3eURAK2jhkZMwvmGeTtZbJdA25pEW2GBXs= Subject key identifier: 84:C2:A6:B7:77:5D:3A:61:26:E7:99:A0:23:0D:2B:1B:36:C4:C7:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858479D76C41A8DE13899D6F3E340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c4:1a:8d:e1:38:99:d6:f3:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=3270f6ea-c083-4c45-a361-2d9eaf8a018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:f5:b4:2f:70:92:d3:e9:40:85:e3:db:13: 4d:c2:0e:ee:4e:ef:7d:2b:f3:d6:51:27:b2:7d:6a: 09:e8:b1:fc:c3:13:e9:81:23:c8:97:24:52:42:b7: a2:3b:ea:97:32:e8:3e:db:c7:ae:74:78:28:fa:2a: 88:e1:3a:d8:e0:d0:e5:a8:e7:dc:52:9f:30:f6:5b: ca:1b:40:33:b0:37:50:88:b8:8b:a1:ce:12:16:0f: 01:cd:9c:9e:a4:a8:33:0b:61:7b:21:01:fe:2b:62: ce:d9:71:c2:5e:39:8a:37:f9:f3:8e:5b:ef:2a:96: 56:b8:3f:02:96:8c:de:81:91:05:0e:f0:9f:3f:65: 00:75:b2:df:73:f9:ef:d7:04:4c:e5:64:11:7b:04: 2a:38:0c:50:86:88:72:b8:56:75:6c:30:be:1c:89: e9:41:4a:ee:17:9d:59:a1:13:43:e2:74:17:2c:51: a1:cf:80:eb:43:f2:e2:a1:8f:b0:42:69:6f:ef:04: dc:3a:d6:80:b0:6c:a3:4f:19:36:cf:c1:d8:e8:53: 75:a5:52:1d:d0:d3:39:0a:81:f4:4e:1b:48:cb:42: 96:27:ca:88:5a:fd:da:cb:d3:ee:91:1d:4b:e5:f1: 0a:15:48:4a:79:ab:33:03:50:b8:01:18:20:7e:21: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:A6:B7:77:5D:3A:61:26:E7:99:A0:23:0D:2B:1B:36:C4:C7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e2:b2:db:62:26:1a:03:3c:0f:9f:94:61:29:0a:05:2a:03: 7e:73:c0:0e:f0:9d:b6:f4:14:70:5a:9c:b9:00:04:cf:62:8e: 71:ec:8b:fd:29:3f:69:0e:d5:3a:92:41:e8:22:99:91:9e:be: 87:d2:30:ae:3b:0c:1a:2e:21:c0:9c:19:ab:99:79:eb:89:94: f1:b2:25:ca:83:02:bb:39:af:a9:91:24:cd:ca:3b:e7:c3:80: 6e:c6:82:b2:04:42:3e:fa:9a:4b:65:f1:80:94:2c:e5:b2:e2: 9b:44:f3:03:94:f0:24:31:e5:8c:c5:97:53:ba:77:dc:f7:76: 57:f9:4c:b6:1e:aa:d2:f3:85:e0:d3:35:1b:f2:ce:a4:33:dc: d5:a7:d3:26:68:45:7b:4f:16:3b:62:9d:b7:bd:08:5d:38:b9: c1:22:cb:ec:5e:9f:d8:1d:29:b2:55:9e:f7:68:32:3e:a0:5f: dd:58:8a:75:2c:5b:3a:02:c5:cb:64:7c:cf:88:9f:7e:f3:12: f1:7d:96:c4:15:ee:4c:04:6d:8f:62:03:48:aa:4a:5a:d6:05: 79:e1:52:e8:6a:da:e3:65:66:18:58:e7:41:0a:c2:79:80:63: be:b3:bb:f4:66:ca:54:a6:97:d8:9d:1c:9f:c9:e7:76:75:62: b7:ed:46:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsQajeE4mdbz40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MzI3MGY2ZWEtYzA4My00YzQ1LWEzNjEtMmQ5ZWFmOGEwMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRz1tC9wktPpQIXj2xNNwg7uTu99K/PWUSey fWoJ6LH8wxPpgSPIlyRSQreiO+qXMug+28eudHgo+iqI4TrY4NDlqOfcUp8w9lvK G0AzsDdQiLiLoc4SFg8BzZyepKgzC2F7IQH+K2LO2XHCXjmKN/nzjlvvKpZWuD8C lozegZEFDvCfP2UAdbLfc/nv1wRM5WQRewQqOAxQhohyuFZ1bDC+HInpQUruF51Z oRND4nQXLFGhz4DrQ/LioY+wQmlv7wTcOtaAsGyjTxk2z8HY6FN1pVId0NM5CoH0 ThtIy0KWJ8qIWv3ay9PukR1L5fEKFUhKeaszA1C4ARggfiHxrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITCprd3XTphJueZoCMNKxs2xMeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJmOGQ0MDctM2M5Ny0z NGE5LWJkN2UtZTE0MmQ5ZjQ3OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEListtiJhoDPA+flGEpCgUqA35zwA7wnbb0FHBanLkABM9ijnHsi/0p P2kO1TqSQegimZGevofSMK47DBouIcCcGauZeeuJlPGyJcqDArs5r6mRJM3KO+fD gG7GgrIEQj76mktl8YCULOWy4ptE8wOU8CQx5YzFl1O6d9z3dlf5TLYeqtLzheDT NRvyzqQz3NWn0yZoRXtPFjtinbe9CF04ucEiy+xen9gdKbJVnvdoMj6gX91YinUs WzoCxctkfM+In37zEvF9lsQV7kwEbY9iA0iqSlrWBXnhUuhq2uNlZhhY50EKwnmA Y76zu/RmylSml9idHJ/J53Z1YrftRuU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org