$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa File: e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa (raw, json) Hash identifier: ij/WdqxFkIYF0Z6/+U3XrYET8hvDy9mhlEkOWtnEnKo= Subject key identifier: 7E:06:AE:9E:53:B4:6C:84:6C:5D:45:50:48:88:9D:5C:3C:A7:F1:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847BD9158ADAAE77013C7045E70 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa Signing time: Sat 02 Nov 2024 01:00:31 +0000 ROA not before: Sat 02 Nov 2024 01:00:31 +0000 ROA not after: Fri 31 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bd:91:58:ad:aa:e7:70:13:c7:04:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 2 01:00:31 2024 GMT Not After : Jan 31 02:00:31 2025 GMT Subject: CN=624f7ae1-bf4e-4cd5-abe4-6cb36ffb82a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:79:d9:b7:74:86:4f:aa:37:bc:f2:a1:0b: 4e:04:1b:7f:ba:72:8c:c4:f2:b7:89:59:23:5a:58: 6f:fb:66:8f:c7:83:84:5c:00:b3:e5:33:83:11:f2: 8b:f4:18:ce:20:cb:e9:f0:e6:17:db:6a:ab:8f:82: 57:f4:60:31:ec:2d:11:7d:9d:c8:76:02:f7:d5:d5: 15:cf:ce:60:64:50:d6:cc:14:95:c4:a9:35:7f:39: 4f:6c:da:6e:75:8a:83:90:0e:71:51:61:a3:61:91: ae:42:4e:4b:b9:bb:1c:a0:66:ea:5b:41:5e:b8:30: 42:9a:68:ab:fb:ff:de:79:8e:31:3f:d3:66:9a:46: 98:b1:1f:d7:2a:4e:94:b4:8c:ac:cd:d5:57:96:5e: 16:78:36:1c:1b:4f:a2:55:39:55:35:c1:0e:39:fd: bd:dc:fd:55:f5:28:58:b0:02:a3:3e:41:bd:94:77: 54:db:0c:29:85:47:d5:6d:b4:83:c0:05:bd:d4:63: c7:79:95:1f:36:84:fd:d6:cf:32:a6:14:3a:c0:eb: f3:0c:b1:88:9b:91:a2:27:9f:00:3d:9d:0e:0a:15: 80:fd:21:c4:fc:db:71:a8:bf:4f:e4:8d:a8:75:9f: 52:82:76:ea:c4:d7:aa:d5:a2:9d:f3:5f:99:89:ad: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:06:AE:9E:53:B4:6C:84:6C:5D:45:50:48:88:9D:5C:3C:A7:F1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:30:2c:52:cc:16:33:c9:df:e4:a3:d8:6c:27:35:ff:b7:4e: bb:3b:a5:80:91:94:8f:8d:a1:29:f4:f5:e2:70:9b:cc:8f:2f: 02:f1:13:b4:e1:13:e1:03:bc:9f:15:ab:be:42:b7:e3:f5:4d: b6:2e:c9:37:66:63:d6:89:1a:69:3d:28:fa:d5:e2:c8:39:f5: 7b:92:9d:22:c1:34:06:2d:4b:0c:63:42:5e:76:03:7f:03:e6: 03:72:ba:5d:94:06:50:32:72:10:bd:7d:32:b1:17:bc:32:42: 67:f8:ed:e8:61:2e:ef:75:b9:ef:1a:e0:c6:96:6e:94:3e:70: c2:cc:df:1f:da:0f:db:31:88:e8:82:e3:02:40:26:1c:78:70: 68:28:55:fa:63:cc:86:32:64:68:07:24:b8:45:99:c4:d6:d7: c0:4c:b1:8e:2f:6c:7e:ac:ff:6c:54:f2:4a:04:1f:47:95:ec: 92:ef:28:a3:d8:2c:91:a4:62:cd:5b:ea:0e:fe:47:b2:d2:61: 7d:e6:27:27:c3:8d:da:0a:fc:6b:57:39:5f:74:38:d4:26:51: 1f:91:fc:3a:61:90:59:ef:b2:73:fa:02:9b:ca:b5:68:b0:ae: 4a:fa:5e:31:83:b5:9a:57:32:b8:99:cd:8f:a1:3c:14:48:46: 6c:35:2f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVitqudwE8cEXnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjI0ZjdhZTEtYmY0ZS00Y2Q1LWFiZTQtNmNiMzZmZmI4MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdF52bd0hk+qN7zyoQtOBBt/unKMxPK3iVkj Wlhv+2aPx4OEXACz5TODEfKL9BjOIMvp8OYX22qrj4JX9GAx7C0RfZ3IdgL31dUV z85gZFDWzBSVxKk1fzlPbNpudYqDkA5xUWGjYZGuQk5LubscoGbqW0FeuDBCmmir +//eeY4xP9NmmkaYsR/XKk6UtIyszdVXll4WeDYcG0+iVTlVNcEOOf293P1V9ShY sAKjPkG9lHdU2wwphUfVbbSDwAW91GPHeZUfNoT91s8yphQ6wOvzDLGIm5GiJ58A PZ0OChWA/SHE/NtxqL9P5I2odZ9SgnbqxNeq1aKd81+Zia2h5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4Grp5TtGyEbF1FUEiInVw8p/HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTc3YWYyZmUtMTNmNC0z MTFlLWFiM2QtYjlmZDFiNjFkMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgwLFLMFjPJ3+Sj2GwnNf+3Trs7pYCRlI+NoSn09eJwm8yPLwLxE7Th E+EDvJ8Vq75Ct+P1TbYuyTdmY9aJGmk9KPrV4sg59XuSnSLBNAYtSwxjQl52A38D 5gNyul2UBlAychC9fTKxF7wyQmf47ehhLu91ue8a4MaWbpQ+cMLM3x/aD9sxiOiC 4wJAJhx4cGgoVfpjzIYyZGgHJLhFmcTW18BMsY4vbH6s/2xU8koEH0eV7JLvKKPY LJGkYs1b6g7+R7LSYX3mJyfDjdoK/GtXOV90ONQmUR+R/DphkFnvsnP6ApvKtWiw rkr6XjGDtZpXMriZzY+hPBRIRmw1L1k= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org