$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa File: e23c58a0-4ce7-3f33-af00-69385397dadb.roa (raw, json) Hash identifier: 0iqJkTFYtD++joRixhHYnP7e+ei4QF97rPjkyh8lFE4= Subject key identifier: 2A:6E:5A:59:FF:EC:E3:81:72:C1:E0:76:C7:A8:62:BB:6C:94:E8:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584779AB58586164C5DC6924EEA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa Signing time: Tue 08 Oct 2024 17:18:00 +0000 ROA not before: Tue 08 Oct 2024 17:18:00 +0000 ROA not after: Mon 06 Jan 2025 18:18:00 +0000 asID: 8069 IP address blocks: 20.153.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:ab:58:58:61:64:c5:dc:69:24:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 8 17:18:00 2024 GMT Not After : Jan 6 18:18:00 2025 GMT Subject: CN=246a6591-323b-459f-a2ea-3a0412874257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:91:1f:6a:52:20:f7:82:58:37:f2:6e:0c: 4b:8a:88:16:33:fa:f5:b8:6d:1c:50:50:12:44:fa: 7f:90:88:a9:c7:e2:8a:b4:6e:f7:b5:1d:32:e4:a4: 04:02:53:32:8b:53:28:d9:15:72:80:cc:44:7a:a9: 48:ab:36:36:c1:e3:6e:42:ad:93:78:79:78:31:04: 7b:4a:3a:6f:bc:92:34:1d:cc:93:89:38:36:43:91: cf:a6:c2:be:25:33:f0:d4:f9:9d:0c:ee:ee:77:92: 9d:8d:56:62:0c:d7:e0:02:36:88:9b:d7:ed:56:4d: 40:c4:45:ee:be:d0:b8:18:2a:ca:c8:5d:b6:1a:90: b5:10:27:45:da:a3:fb:ed:68:1c:78:98:c7:96:9c: 47:74:36:21:fc:4d:db:74:b0:d5:23:c4:28:9c:66: 8e:d0:ba:12:0e:2d:46:52:fb:63:1a:44:97:6e:e2: 7f:f6:de:1a:bf:ec:12:5c:83:9a:4c:3f:9a:0f:81: 86:38:26:c4:25:99:a3:4f:30:47:8b:a6:3d:58:8b: cc:f9:ca:2e:ad:37:1f:c7:58:11:af:00:e5:f4:a1: 04:a8:26:49:5c:c1:1f:25:19:0c:70:96:75:b3:35: ba:4a:6b:22:d6:43:2e:08:c9:14:36:4a:10:48:6e: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6E:5A:59:FF:EC:E3:81:72:C1:E0:76:C7:A8:62:BB:6C:94:E8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b8:6b:53:03:f6:88:94:d4:95:cd:aa:b4:d2:7b:12:fc:7d: 37:69:7c:54:98:b8:bd:5a:c9:21:a0:a6:21:27:17:8e:ac:e6: 5c:5c:78:aa:de:6a:75:24:8b:1a:b5:8c:b5:47:0d:bf:e5:05: 58:7b:04:0d:32:9d:08:46:76:a0:d9:fe:6c:0f:4d:10:61:b9: 02:78:c5:06:60:4f:e3:42:46:05:c5:af:c2:65:48:24:81:c5: 1b:6f:c2:d2:01:83:24:ce:24:8e:15:9e:32:1c:ef:31:a4:e5: fd:39:94:3c:15:aa:9f:cc:7c:45:b1:7c:19:e9:b1:88:de:5c: 5c:db:8e:b8:1a:da:86:61:55:28:9e:2d:67:b9:6f:80:f0:43: ad:0b:12:d7:05:74:d1:50:9f:a9:be:52:6b:75:6e:72:78:9d: bc:f9:27:b1:43:22:a4:8e:60:42:1d:16:77:ca:22:34:f4:d7: ca:ec:6e:67:3d:e9:aa:e6:4c:ab:58:a0:11:04:b0:bf:df:5d: dd:04:cf:cf:ca:df:e1:75:80:b5:9e:32:0f:34:2c:0d:24:76: ce:86:d5:5e:30:f2:f4:99:f8:f7:66:2b:36:cb:4c:ac:2c:82: 54:53:d8:d5:e9:d1:b0:c6:bd:b0:b6:98:58:13:bd:58:d1:40: f2:21:7f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5q1hYYWTF3Gkk7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAwODE3MTgwMFoXDTI1MDEwNjE4MTgwMFowLzEtMCsGA1UEAxMk MjQ2YTY1OTEtMzIzYi00NTlmLWEyZWEtM2EwNDEyODc0MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27KRH2pSIPeCWDfybgxLiogWM/r1uG0cUFAS RPp/kIipx+KKtG73tR0y5KQEAlMyi1Mo2RVygMxEeqlIqzY2weNuQq2TeHl4MQR7 SjpvvJI0HcyTiTg2Q5HPpsK+JTPw1PmdDO7ud5KdjVZiDNfgAjaIm9ftVk1AxEXu vtC4GCrKyF22GpC1ECdF2qP77WgceJjHlpxHdDYh/E3bdLDVI8QonGaO0LoSDi1G UvtjGkSXbuJ/9t4av+wSXIOaTD+aD4GGOCbEJZmjTzBHi6Y9WIvM+courTcfx1gR rwDl9KEEqCZJXMEfJRkMcJZ1szW6Smsi1kMuCMkUNkoQSG5jZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpuWln/7OOBcsHgdseoYrtslOirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTIzYzU4YTAtNGNlNy0z ZjMzLWFmMDAtNjkzODUzOTdkYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq4a1MD9oiU1JXNqrTSexL8fTdpfFSYuL1aySGgpiEnF46s5lxceKre anUkixq1jLVHDb/lBVh7BA0ynQhGdqDZ/mwPTRBhuQJ4xQZgT+NCRgXFr8JlSCSB xRtvwtIBgyTOJI4VnjIc7zGk5f05lDwVqp/MfEWxfBnpsYjeXFzbjrga2oZhVSie LWe5b4DwQ60LEtcFdNFQn6m+Umt1bnJ4nbz5J7FDIqSOYEIdFnfKIjT018rsbmc9 6armTKtYoBEEsL/fXd0Ez8/K3+F1gLWeMg80LA0kds6G1V4w8vSZ+PdmKzbLTKws glRT2NXp0bDGvbC2mFgTvVjRQPIhfx8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org