$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json) Hash identifier: K4AWhsH9/ZKWqSozEgGdxp9s7+Vdhw7AdlBbVKRJMWk= Subject key identifier: F7:E7:2F:27:CC:AD:51:36:1C:D6:30:4A:09:40:79:57:2E:BF:E1:EA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847CA3F8B33AD10E40B860A1A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:8b:33:ad:10:e4:0b:86:0a:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=61991e82-014e-4af3-b2a3-4ee5b336e2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:22:7c:74:e8:2d:53:9a:59:1e:c2:c0:21: fd:ac:19:d9:8c:c1:06:28:97:79:28:59:74:b7:09: 1a:31:fa:e5:16:b1:88:d2:48:89:5e:c9:cb:e5:63: 0e:57:28:cc:76:44:68:f8:93:74:ec:f7:9a:11:a7: bd:77:d5:b6:c9:b8:8e:74:7e:3e:53:00:1a:60:5d: 4b:1d:3c:2f:7f:4b:5d:0f:24:3c:ea:a7:c4:52:66: ee:95:43:4c:f0:23:9e:32:d2:59:20:b5:44:8e:c5: b8:81:0a:35:a7:d1:d1:07:e4:30:cb:e0:d8:63:1c: 0a:2c:95:1e:a6:7e:39:22:0e:47:06:80:4e:08:ca: 15:f6:43:0f:8c:83:54:30:39:d3:3e:a6:93:82:8a: 2e:46:e6:6c:6f:84:fc:07:05:c2:5e:a9:9f:8d:6f: 1e:19:cc:2e:47:d7:a2:12:4e:d4:68:b2:f0:5f:f9: 73:ac:fa:84:63:44:84:cf:ed:3c:93:8c:bf:20:80: f8:20:02:0a:03:05:22:65:a1:1d:9a:95:d4:5b:21: ae:04:08:e5:ac:8c:53:20:2a:c9:3c:fa:8e:95:d6: 8e:0a:2c:41:a9:84:2d:25:d5:0a:52:90:47:94:70: 35:b1:d7:60:d6:c1:1b:8c:a7:2b:04:64:07:73:7e: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E7:2F:27:CC:AD:51:36:1C:D6:30:4A:09:40:79:57:2E:BF:E1:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:65:c4:73:45:d9:92:ae:05:ff:ec:96:d6:13:03:d3:08:26: 3b:df:2b:e3:3a:ef:54:63:d2:e0:f1:57:45:6f:01:66:99:4b: 0f:7a:55:77:90:26:f3:f5:bb:3f:47:50:aa:db:7f:87:a4:21: 6f:68:eb:cc:1d:12:f2:47:bc:b1:78:ea:e9:52:28:80:1c:20: d1:aa:d0:14:e1:74:1e:84:12:17:ff:1f:47:64:bb:40:70:e4: 39:a6:11:fa:51:65:b8:a7:7b:b3:4e:33:2a:66:78:c7:1a:31: c2:8d:d5:b9:49:51:57:be:c1:1b:1c:5e:bf:22:8f:60:bf:c0: 6d:5e:00:dc:37:61:92:6b:c2:3a:bb:1f:c7:a6:f6:46:64:f3: 21:26:49:1b:9a:08:09:ad:e0:3c:d2:62:e0:f6:e2:29:8f:58: 50:e4:9f:88:ad:31:c5:3d:c9:38:cc:7a:43:9e:2f:71:cf:1a: ec:a4:e6:f4:53:5d:bf:e8:57:2c:bc:a9:a7:8b:36:03:45:ab: 88:04:00:4e:95:99:04:62:84:26:f1:b9:64:c7:8b:68:83:35: 97:b2:96:b2:f7:47:ac:c8:cd:e8:75:0d:26:28:30:fc:16:f8: 2d:46:4e:6f:c2:a5:b2:ec:b0:3a:a7:13:f1:34:3e:09:7c:27: 46:9f:a5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4szrRDkC4YKGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjE5OTFlODItMDE0ZS00YWYzLWIyYTMtNGVlNWIzMzZlMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNgifHToLVOaWR7CwCH9rBnZjMEGKJd5KFl0 twkaMfrlFrGI0kiJXsnL5WMOVyjMdkRo+JN07PeaEae9d9W2ybiOdH4+UwAaYF1L HTwvf0tdDyQ86qfEUmbulUNM8COeMtJZILVEjsW4gQo1p9HRB+Qwy+DYYxwKLJUe pn45Ig5HBoBOCMoV9kMPjINUMDnTPqaTgoouRuZsb4T8BwXCXqmfjW8eGcwuR9ei Ek7UaLLwX/lzrPqEY0SEz+08k4y/IID4IAIKAwUiZaEdmpXUWyGuBAjlrIxTICrJ PPqOldaOCixBqYQtJdUKUpBHlHA1sddg1sEbjKcrBGQHc34pMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfnLyfMrVE2HNYwSglAeVcuv+HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTg2YmFiN2YtNDc2Yi0z MjExLTk5YjctYjU2NTA5OTMwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJlxHNF2ZKuBf/sltYTA9MIJjvfK+M671Rj0uDxV0VvAWaZSw96VXeQ JvP1uz9HUKrbf4ekIW9o68wdEvJHvLF46ulSKIAcINGq0BThdB6EEhf/H0dku0Bw 5DmmEfpRZbine7NOMypmeMcaMcKN1blJUVe+wRscXr8ij2C/wG1eANw3YZJrwjq7 H8em9kZk8yEmSRuaCAmt4DzSYuD24imPWFDkn4itMcU9yTjMekOeL3HPGuyk5vRT Xb/oVyy8qaeLNgNFq4gEAE6VmQRihCbxuWTHi2iDNZeylrL3R6zIzeh1DSYoMPwW +C1GTm/CpbLssDqnE/E0Pgl8J0afpUQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:24 2024 by rpki-client on console-ams.rpki-client.org