$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa File: e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa (raw, json) Hash identifier: jPT/F33z57iEWjM+QmmSkHhX95sNe8cydefB5Ja3Kr8= Subject key identifier: D5:51:83:E8:2F:19:23:D5:78:AC:03:E9:1F:D1:25:5D:A4:83:BD:57 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584788865AADB03BE5BDA7950F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa Signing time: Mon 14 Oct 2024 01:00:31 +0000 ROA not before: Mon 14 Oct 2024 01:00:31 +0000 ROA not after: Sun 12 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:88:86:5a:ad:b0:3b:e5:bd:a7:95:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 01:00:31 2024 GMT Not After : Jan 12 02:00:31 2025 GMT Subject: CN=c6550c8e-757c-4241-a13c-c2c40a42b837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:0e:dd:ee:87:99:97:6d:e4:be:c5:80:e4: a1:33:e5:41:18:03:df:09:76:19:b2:26:92:52:6b: d4:a4:63:fd:90:4e:94:c6:cd:33:24:ef:22:7b:ea: b0:5e:c5:c3:23:7c:09:dd:77:99:77:54:50:dc:93: 9c:e1:c2:3b:bf:91:b8:91:3c:f3:86:f9:b1:7d:88: f7:2f:43:9c:6a:88:c7:1e:7f:81:ff:7a:77:a1:89: 6c:dc:a6:11:8a:d9:06:f7:4d:d3:e8:b0:f6:e5:7e: 42:a7:32:64:f1:85:d5:79:bf:d6:99:89:a2:0c:42: c2:a1:b2:f2:ba:7b:c6:6e:76:5a:e2:03:29:1d:b0: 30:78:d9:4d:72:18:79:eb:f2:ba:08:60:e3:6c:81: 19:09:84:48:57:ad:1a:93:af:19:82:59:07:46:c9: 51:8d:52:40:90:7e:6b:0a:22:57:75:6f:dd:75:5b: 30:cd:c9:15:8c:7c:42:54:e4:96:4e:b8:19:61:0f: 44:48:d6:d1:80:e3:d2:d5:7a:e4:c4:14:08:71:79: 8d:a6:ae:69:44:ae:52:0d:24:5b:3a:76:6a:86:06: 91:8b:33:e7:e3:dd:6d:50:c2:87:29:fe:33:d2:8b: 7c:cf:f9:ac:10:c9:37:7a:5a:c8:06:2b:1e:e4:b4: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:51:83:E8:2F:19:23:D5:78:AC:03:E9:1F:D1:25:5D:A4:83:BD:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:73:ae:b3:49:c5:24:35:bb:3e:08:a4:3b:f9:0a:51:fb:d8: 1e:37:59:74:48:a5:70:bd:0a:ba:35:c7:ad:18:8f:df:1e:03: 21:2e:49:00:ec:d6:b4:a9:e3:a5:9f:f1:0d:b4:6a:56:86:ec: f5:06:d1:5f:51:59:42:8e:5e:7e:eb:29:5e:2e:c1:fe:d9:dd: f4:cd:da:61:07:75:c6:f3:3c:94:ce:89:fb:c4:8d:64:63:bb: ad:3c:31:b8:a3:8d:3d:38:74:fb:19:6e:b6:2a:b2:45:5a:ea: 7f:65:c5:08:dd:ac:7e:26:55:d5:f3:d0:d1:4c:d0:87:94:7a: a2:66:77:b0:70:ee:52:13:98:17:3f:89:d5:16:51:c0:77:a2: 2d:bf:6d:fc:4c:17:e0:e3:a0:be:81:ea:da:87:ab:36:3f:9f: 60:1d:3e:77:41:b7:37:56:95:1b:b1:56:21:c4:61:12:f4:34: 72:ed:c4:67:a4:70:8f:9a:b1:1e:20:1e:73:4f:ed:36:3f:b5: 34:ae:9b:29:b3:d7:d6:ce:11:83:23:c8:48:46:c1:c5:8b:57: 50:86:74:27:5f:0e:2f:7d:77:8a:d8:1c:9d:90:a8:68:58:dc: a0:ac:28:64:7b:f8:bd:37:4a:fa:cd:28:79:18:83:11:1a:15: 7a:13:1c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeIhlqtsDvlvaeVDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxNDAxMDAzMVoXDTI1MDExMjAyMDAzMVowLzEtMCsGA1UEAxMk YzY1NTBjOGUtNzU3Yy00MjQxLWExM2MtYzJjNDBhNDJiODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA144O3e6HmZdt5L7FgOShM+VBGAPfCXYZsiaS UmvUpGP9kE6Uxs0zJO8ie+qwXsXDI3wJ3XeZd1RQ3JOc4cI7v5G4kTzzhvmxfYj3 L0OcaojHHn+B/3p3oYls3KYRitkG903T6LD25X5CpzJk8YXVeb/WmYmiDELCobLy unvGbnZa4gMpHbAweNlNchh56/K6CGDjbIEZCYRIV60ak68ZglkHRslRjVJAkH5r CiJXdW/ddVswzckVjHxCVOSWTrgZYQ9ESNbRgOPS1XrkxBQIcXmNpq5pRK5SDSRb OnZqhgaRizPn491tUMKHKf4z0ot8z/msEMk3elrIBise5LRNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVRg+gvGSPVeKwD6R/RJV2kg71XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTFlM2FkYjctMTBjYS0z OTMxLWFhMDktMjlmOTZlYThkMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElzrrNJxSQ1uz4IpDv5ClH72B43WXRIpXC9Cro1x60Yj98eAyEuSQDs 1rSp46Wf8Q20alaG7PUG0V9RWUKOXn7rKV4uwf7Z3fTN2mEHdcbzPJTOifvEjWRj u608MbijjT04dPsZbrYqskVa6n9lxQjdrH4mVdXz0NFM0IeUeqJmd7Bw7lITmBc/ idUWUcB3oi2/bfxMF+DjoL6B6tqHqzY/n2AdPndBtzdWlRuxViHEYRL0NHLtxGek cI+asR4gHnNP7TY/tTSumymz19bOEYMjyEhGwcWLV1CGdCdfDi99d4rYHJ2QqGhY 3KCsKGR7+L03SvrNKHkYgxEaFXoTHJE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org