$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa File: ffb1385a-fcf0-3f8e-9012-938f49909686.roa (raw, json) Hash identifier: loZFrDD+ZhM9/B8brxDXfdxkzKWRLHV9EE7kJ6Vj5yQ= Subject key identifier: 20:77:35:CF:B3:3F:91:F1:7D:CE:02:84:0A:44:16:4A:21:E2:BE:58 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584731FB219B2A4C8AA02DC19800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa Signing time: Fri 13 Sep 2024 01:00:32 +0000 ROA not before: Fri 13 Sep 2024 01:00:32 +0000 ROA not after: Thu 12 Dec 2024 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:fb:21:9b:2a:4c:8a:a0:2d:c1:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 01:00:32 2024 GMT Not After : Dec 12 02:00:32 2024 GMT Subject: CN=534a3607-ff75-4219-88ba-becaa2612de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:2b:7f:09:ae:b4:04:4b:a9:db:b3:c1:4d: 5c:38:a6:33:b5:d9:e0:a1:18:3f:5b:2c:b7:43:a0: d1:ae:9e:cd:f4:73:23:3d:26:bb:19:3d:04:b1:39: f4:40:ac:ec:1b:29:ae:75:01:b5:a8:94:df:b1:ed: 90:2e:33:8e:5c:55:6c:93:73:e9:d0:58:89:6e:96: d7:b9:8a:02:9a:88:9b:4c:36:c5:fb:a3:1f:31:1a: fc:ba:e4:38:09:01:e0:1a:5d:ca:6c:11:ce:53:23: 0e:cd:4b:b8:15:4e:51:9c:52:c7:c4:15:bd:66:77: c9:57:07:d5:dc:43:c0:fa:2a:f1:cc:f1:24:c0:a3: a1:44:bb:ae:87:78:19:58:6b:aa:da:67:57:33:9b: e9:c7:90:29:10:d0:ed:cb:e1:3f:d8:b0:c8:92:9c: 8b:1a:be:03:cc:ed:7d:3f:5e:fc:2e:b7:7d:63:26: 57:3b:ba:9e:92:d4:c1:46:95:19:70:e9:31:e0:60: 60:38:f7:1f:05:db:b8:b4:26:a2:29:e8:08:5b:05: 82:00:3d:38:78:51:43:9f:af:95:80:57:c1:ff:01: 52:68:f2:5f:fe:78:43:77:86:8e:33:c3:d3:77:02: d6:be:17:8b:3d:bc:3b:ac:de:f7:a9:6f:07:ba:95: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:77:35:CF:B3:3F:91:F1:7D:CE:02:84:0A:44:16:4A:21:E2:BE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2b:12:45:e6:da:b9:27:13:ef:fd:09:52:c5:39:37:cf:ff: 5a:ff:32:d3:f8:cf:74:2c:cb:0a:55:e5:a1:ed:9d:98:fe:33: 12:6a:6f:dd:c0:05:db:78:e2:4c:a6:04:01:23:c5:b3:70:fe: e2:2e:38:19:4b:7a:20:1c:6d:e3:7d:46:5e:b5:cd:e1:d3:42: 5c:f4:19:67:74:d4:03:0a:1e:1b:f7:ef:bf:73:5d:dd:5e:d7: ba:ce:62:17:b7:15:ec:04:7b:51:0d:35:11:66:5f:81:95:38: 4f:1c:11:d9:21:b7:76:c3:f4:c6:81:73:64:84:40:c9:1a:2c: 35:66:93:a6:6a:e6:4a:14:61:33:95:ea:32:7e:3a:ff:10:27: e7:c9:4b:a5:9b:f9:06:1d:4f:3b:9a:48:00:31:eb:7d:f4:7a: 23:b4:79:60:07:d7:67:5d:4d:3c:8f:76:54:73:c6:ac:3f:a1: 7d:b6:53:0d:1b:c3:3b:9b:3c:bb:3b:d5:9a:32:79:34:cc:0d: fc:06:6e:4e:e6:97:81:ae:fc:3d:8e:70:a5:72:e2:46:af:7a: 01:ae:55:67:87:de:60:44:25:29:11:ed:d1:78:d4:9b:36:44: 9b:1d:c0:c4:0b:26:ad:37:b5:ea:64:cf:c1:79:d6:e1:00:42: 45:86:34:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+yGbKkyKoC3BmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk NTM0YTM2MDctZmY3NS00MjE5LTg4YmEtYmVjYWEyNjEyZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmYrfwmutARLqduzwU1cOKYztdngoRg/Wyy3 Q6DRrp7N9HMjPSa7GT0EsTn0QKzsGymudQG1qJTfse2QLjOOXFVsk3Pp0FiJbpbX uYoCmoibTDbF+6MfMRr8uuQ4CQHgGl3KbBHOUyMOzUu4FU5RnFLHxBW9ZnfJVwfV 3EPA+irxzPEkwKOhRLuuh3gZWGuq2mdXM5vpx5ApENDty+E/2LDIkpyLGr4DzO19 P178Lrd9YyZXO7qektTBRpUZcOkx4GBgOPcfBdu4tCaiKegIWwWCAD04eFFDn6+V gFfB/wFSaPJf/nhDd4aOM8PTdwLWvheLPbw7rN73qW8HupV/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB3Nc+zP5Hxfc4ChApEFkoh4r5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiMTM4NWEtZmNmMC0z ZjhlLTkwMTItOTM4ZjQ5OTA5Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8rEkXm2rknE+/9CVLFOTfP/1r/MtP4z3QsywpV5aHtnZj+MxJqb93A Bdt44kymBAEjxbNw/uIuOBlLeiAcbeN9Rl61zeHTQlz0GWd01AMKHhv3779zXd1e 17rOYhe3FewEe1ENNRFmX4GVOE8cEdkht3bD9MaBc2SEQMkaLDVmk6Zq5koUYTOV 6jJ+Ov8QJ+fJS6Wb+QYdTzuaSAAx6330eiO0eWAH12ddTTyPdlRzxqw/oX22Uw0b wzubPLs71ZoyeTTMDfwGbk7ml4Gu/D2OcKVy4kavegGuVWeH3mBEJSkR7dF41Js2 RJsdwMQLJq03tepkz8F51uEAQkWGNIE= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:52 2024 by rpki-client on console-fra.rpki-client.org