$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa File: ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa (raw, json) Hash identifier: XAHVO8VW2BF/UP8oKSOLWOt2Xt49SMGh7E013ki373E= Subject key identifier: 0B:28:D2:9D:60:EE:36:7E:E6:76:EC:08:1A:6F:F8:9C:5F:E7:CE:33 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858478E1BD2ED11659D95D3D43394 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d2:ed:11:65:9d:95:d3:d4:33:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=93190c1d-3e12-4d57-ab92-629d52d9a072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:7a:c3:80:fd:3b:5a:55:eb:af:e4:77:e7: 94:1e:41:06:f9:11:72:d9:65:ed:62:7e:a8:41:98: 73:9f:7b:b8:96:84:fe:6b:b3:a7:60:b2:89:ef:af: b7:e3:b6:5f:b8:0c:db:fa:96:6a:82:40:ae:fd:60: 89:98:bb:88:c0:71:75:93:51:22:3d:69:fe:47:fa: ba:20:b5:6d:9f:74:d9:42:db:7e:87:d3:8a:69:4b: 03:28:ff:45:50:af:56:2b:9b:cd:90:35:b7:c5:55: 41:10:aa:75:7f:6f:55:c5:76:d4:6f:14:69:77:17: d6:2f:d0:4e:e9:e5:3a:16:25:6b:6f:bb:3d:3f:26: b8:8b:dc:3c:e9:3c:1a:4d:ef:cc:30:fe:fe:d7:d1: 3c:b1:30:88:ef:fb:40:6b:ee:f4:82:93:39:c4:58: ad:80:b9:5b:2c:d0:2f:5b:9b:68:65:d7:2f:8f:b4: b2:12:fc:42:b0:6f:5a:aa:86:8e:9c:e7:36:e7:60: c6:9c:93:b9:37:89:ef:74:6b:59:6c:f2:77:82:c9: 52:94:db:88:31:f6:13:0b:c1:5e:31:4b:17:d3:bb: 43:f2:55:e5:7c:46:60:8b:89:49:28:50:42:8e:d7: be:f8:e5:f6:97:4b:b1:7f:f8:ed:cf:65:c2:31:3b: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:28:D2:9D:60:EE:36:7E:E6:76:EC:08:1A:6F:F8:9C:5F:E7:CE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:50:72:57:00:63:24:5f:af:7a:4f:ac:20:d7:0c:33:19:e1: d9:7c:e4:dc:d4:9c:09:ab:92:ab:d5:08:54:77:fe:3d:68:ad: 32:c1:25:a9:bb:6c:06:e8:5d:e5:dc:32:1c:e5:fc:0c:ff:96: fa:06:c3:dc:48:2c:1d:ef:43:98:93:8e:43:34:8f:bd:04:9e: 8c:57:ca:54:4f:0b:14:1e:3e:23:c8:1c:20:a5:1f:05:d7:a3: de:dd:d9:12:2b:8e:f6:35:d7:e3:14:0f:ad:6e:c1:46:af:67: fd:b2:ff:4e:95:9d:83:73:6f:bf:a4:f0:c8:0e:41:27:ee:59: 32:20:ed:de:a4:9d:77:af:ea:58:f3:b6:a3:aa:f1:04:e9:1c: ff:f8:d7:59:f0:9e:a3:ad:b1:b9:3e:cb:87:82:95:75:a4:14: 17:d5:bd:8a:64:bb:d2:4c:6a:a4:a2:aa:56:c4:75:55:9a:67: da:ca:bd:e7:a5:fc:d1:82:4d:ed:69:e9:0c:4c:dc:f4:ab:b5: ae:6e:b4:36:9a:f7:88:14:ce:c7:4a:c3:b0:05:73:86:7b:f9: 00:6e:a5:ac:ce:f4:ee:d6:02:95:75:e4:6b:d9:4d:f2:f1:0f: aa:46:16:50:1e:ab:ac:82:d8:c5:13:85:d9:67:3a:a7:63:55: 8a:89:c8:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9LtEWWdldPUM5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk OTMxOTBjMWQtM2UxMi00ZDU3LWFiOTItNjI5ZDUyZDlhMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HV6w4D9O1pV66/kd+eUHkEG+RFy2WXtYn6o QZhzn3u4loT+a7OnYLKJ76+347ZfuAzb+pZqgkCu/WCJmLuIwHF1k1EiPWn+R/q6 ILVtn3TZQtt+h9OKaUsDKP9FUK9WK5vNkDW3xVVBEKp1f29VxXbUbxRpdxfWL9BO 6eU6FiVrb7s9Pya4i9w86TwaTe/MMP7+19E8sTCI7/tAa+70gpM5xFitgLlbLNAv W5toZdcvj7SyEvxCsG9aqoaOnOc252DGnJO5N4nvdGtZbPJ3gslSlNuIMfYTC8Fe MUsX07tD8lXlfEZgi4lJKFBCjte++OX2l0uxf/jtz2XCMTvfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAso0p1g7jZ+5nbsCBpv+Jxf584zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxYTg5MDYtMDMzYi0z OTg5LWIxYjEtMGRmZWIwOTQ4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpQclcAYyRfr3pPrCDXDDMZ4dl85NzUnAmrkqvVCFR3/j1orTLBJam7 bAboXeXcMhzl/Az/lvoGw9xILB3vQ5iTjkM0j70EnoxXylRPCxQePiPIHCClHwXX o97d2RIrjvY11+MUD61uwUavZ/2y/06VnYNzb7+k8MgOQSfuWTIg7d6knXev6ljz tqOq8QTpHP/411nwnqOtsbk+y4eClXWkFBfVvYpku9JMaqSiqlbEdVWaZ9rKveel /NGCTe1p6QxM3PSrta5utDaa94gUzsdKw7AFc4Z7+QBupazO9O7WApV15GvZTfLx D6pGFlAeq6yC2MUThdlnOqdjVYqJyPA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:07 2024 by rpki-client on console-ams.rpki-client.org