$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa File: e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa (raw, json) Hash identifier: 2lj0LrkQDGblWqe5eEiKVX1MKxD+qmdj8LkGxDom9Ik= Subject key identifier: 46:99:D7:F6:D2:F6:96:6F:BC:4B:A8:D0:30:50:CF:58:81:2A:30:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847D40497E20726E9BCB5674BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 8069 IP address blocks: 20.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:97:e2:07:26:e9:bc:b5:67:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=7bd62c4f-9bd1-45d2-900d-1702011f95b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:9b:2c:c6:4d:27:f7:ea:e4:ff:00:67:88: 2a:c3:90:d1:40:af:fe:00:69:f5:76:1d:33:d1:ad: 5d:38:2e:94:b1:a8:0e:8c:c5:bc:bd:4d:89:48:41: 41:58:91:08:fa:b6:d5:b9:0a:77:44:75:5b:fd:52: 49:12:16:b9:94:cf:51:63:cb:60:ec:6b:5b:3f:b8: 1c:c1:ae:ff:68:f5:f4:ca:80:f9:51:40:3a:8b:dc: 78:48:cb:dc:85:55:4b:46:02:44:e1:cf:9b:c8:a1: 44:53:1c:7b:c2:6a:3f:52:05:98:8d:ba:0a:2d:40: ec:a2:0c:a0:7d:68:b6:6c:af:87:a8:a8:1a:9f:2e: 74:d5:ef:a5:bf:00:d0:a3:c8:27:65:64:72:ab:e0: 28:f7:02:b4:68:bb:71:7d:21:d2:a4:7c:30:1a:37: bf:04:4b:ae:83:4b:73:9f:11:04:e8:67:19:ba:50: 40:5b:2e:81:39:46:14:02:ad:a7:51:23:5a:db:b4: 79:93:57:79:54:c1:aa:b8:b8:4a:44:1a:95:43:2b: b6:05:36:56:63:2a:fb:6f:49:4b:58:3d:5e:85:2f: f7:83:7f:c8:57:0b:4d:ce:f5:b7:09:7f:df:60:0e: 23:b9:65:7b:d2:cd:f0:68:11:57:9a:1d:e5:71:47: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:99:D7:F6:D2:F6:96:6F:BC:4B:A8:D0:30:50:CF:58:81:2A:30:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c2:97:9a:a9:a6:80:3d:d7:68:73:93:90:91:0c:15:3a:a8: c1:7c:60:d2:b8:3d:09:90:31:7a:60:e5:2b:ba:c6:5a:7f:39: 8f:c5:03:34:2f:b1:fb:dc:bf:d4:7a:44:28:b5:48:ad:40:aa: c9:0e:e5:a4:c4:c3:c8:26:c5:80:c0:85:4d:18:46:5b:b7:e3: 3c:c5:bd:2c:bd:06:a0:47:bb:4f:d8:96:bc:f7:47:40:1b:06: 36:c8:a2:f7:94:07:06:b4:a4:00:92:09:2e:d8:07:48:51:ef: 83:b8:cd:ea:43:be:bb:9a:2b:9f:bd:02:3f:a2:d4:4f:b0:16: c4:9d:c1:8d:c4:c3:1f:10:44:3d:7f:b4:4d:6d:40:60:e3:ee: 6c:18:e5:86:43:19:95:95:d0:da:5e:11:23:5b:1f:19:86:09: e4:cc:d9:fe:b4:e5:6c:b7:18:ab:f4:68:8b:a2:ad:2e:32:27: 04:c2:07:3c:36:a6:84:b6:7a:54:c8:12:a4:26:a0:cc:ee:15: ab:00:93:17:b3:21:a8:29:a0:5d:4a:da:a2:36:dd:0d:d7:95: 80:2f:9e:07:c0:1c:b5:dd:e7:e5:65:34:16:58:d1:ff:ed:fa: ca:cf:72:80:2d:7e:57:b6:92:fe:5b:f3:1a:92:89:b5:4b:73: bb:e2:18:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJfiBybpvLVnS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk N2JkNjJjNGYtOWJkMS00NWQyLTkwMGQtMTcwMjAxMWY5NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUmbLMZNJ/fq5P8AZ4gqw5DRQK/+AGn1dh0z 0a1dOC6UsagOjMW8vU2JSEFBWJEI+rbVuQp3RHVb/VJJEha5lM9RY8tg7GtbP7gc wa7/aPX0yoD5UUA6i9x4SMvchVVLRgJE4c+byKFEUxx7wmo/UgWYjboKLUDsogyg fWi2bK+HqKgany501e+lvwDQo8gnZWRyq+Ao9wK0aLtxfSHSpHwwGje/BEuug0tz nxEE6GcZulBAWy6BOUYUAq2nUSNa27R5k1d5VMGquLhKRBqVQyu2BTZWYyr7b0lL WD1ehS/3g3/IVwtNzvW3CX/fYA4juWV70s3waBFXmh3lcUccRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaZ1/bS9pZvvEuo0DBQz1iBKjCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTNiYWE4ZTEtYzY0Ny0z Yzk2LWEzOGMtMzlmYWE2MjVkNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTCl5qppoA912hzk5CRDBU6qMF8YNK4PQmQMXpg5Su6xlp/OY/FAzQv sfvcv9R6RCi1SK1AqskO5aTEw8gmxYDAhU0YRlu34zzFvSy9BqBHu0/Ylrz3R0Ab BjbIoveUBwa0pACSCS7YB0hR74O4zepDvruaK5+9Aj+i1E+wFsSdwY3Ewx8QRD1/ tE1tQGDj7mwY5YZDGZWV0NpeESNbHxmGCeTM2f605Wy3GKv0aIuirS4yJwTCBzw2 poS2elTIEqQmoMzuFasAkxezIagpoF1K2qI23Q3XlYAvngfAHLXd5+VlNBZY0f/t +srPcoAtfle2kv5b8xqSibVLc7viGIY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org