$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa File: 15b8ea23-07fb-3a03-8985-782f3956608b.roa (raw, json) Hash identifier: YfZ9yHVfneko+Mg26PcP1Xqg57dKu+06P7baA+MyKgs= Subject key identifier: 21:40:24:8A:5D:1A:A8:A2:0D:19:B6:91:13:50:04:0B:1B:23:2F:FD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584883E5CA17DE93E3FF0F2258F8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 8069 IP address blocks: 20.33.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:ca:17:de:93:e3:ff:0f:22:58:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=041c368f-89f6-4569-ac13-2e9493fe9705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4d:01:aa:e6:dd:8f:3f:fe:16:9c:bb:0a:8f: 16:6b:cf:c4:25:95:c4:53:31:93:78:d3:69:37:b7: 8a:c6:15:d0:83:e5:72:74:ec:d8:cc:61:21:c1:c6: 5c:ed:5d:6c:66:4f:36:95:9d:a1:47:a4:88:62:86: f7:66:8a:d8:1d:3c:ce:ca:07:a5:3e:a0:2e:c5:23: 79:74:38:38:8b:e2:17:58:8c:c7:c0:3d:51:33:d3: 62:5b:55:ff:ab:61:16:af:99:2f:a0:c3:fb:cf:89: 67:0e:bd:1c:98:59:7b:ac:fb:48:7d:22:a8:f1:43: b5:56:a8:99:80:46:49:af:cc:49:87:8b:d2:37:7e: 36:25:36:9b:cb:24:91:5b:f2:5e:66:fd:2d:c3:0e: 85:cf:f9:c0:5b:04:18:c7:1b:e0:1b:04:15:51:03: 15:39:da:70:83:98:db:ff:ea:b9:d6:86:ad:be:9e: 00:8f:33:b0:5f:51:84:d1:ba:7e:37:65:9f:96:f2: 0e:93:fb:8e:1b:72:14:9b:63:5a:ef:53:90:05:32: 2b:2a:05:9c:d9:06:60:c2:30:74:b0:81:59:6a:7a: 0d:54:58:4c:aa:3e:ee:a0:f6:72:a6:84:50:96:1d: f5:6d:87:48:39:3d:63:8e:64:1c:0d:2a:85:1d:97: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:24:8A:5D:1A:A8:A2:0D:19:B6:91:13:50:04:0B:1B:23:2F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:bf:94:1e:7f:29:d9:3f:6c:fa:23:d2:d1:38:01:40:8e: 37:ba:6a:04:d0:d3:68:ce:98:b1:8d:bd:fe:e0:fc:80:7f:2f: 85:a8:2d:54:ed:61:f4:2a:62:75:11:d4:2c:27:22:45:fd:74: 15:6f:ea:49:30:eb:ce:09:d4:64:d8:c2:34:56:ed:a1:f4:99: 37:15:3c:19:e3:f3:12:b5:ab:1b:71:72:cf:85:b6:ee:d6:3c: da:d7:48:c7:98:f5:64:9e:8a:88:2b:05:ab:57:0a:73:dc:56: 6a:68:8c:a9:9e:47:6e:c1:d8:98:7e:16:6a:60:35:93:be:de: 98:08:98:96:3b:a0:f6:3d:7f:1d:ba:a3:9e:d8:a8:83:92:04: 70:a5:fb:17:c1:e6:3c:1b:4e:d1:01:12:76:a0:6f:90:a2:03: 94:61:e0:af:e0:d2:7f:9e:ae:0c:3f:98:b2:9d:f1:ec:7f:e2: c6:98:05:46:f8:c0:80:1a:24:2d:91:39:44:52:18:3d:42:48: 23:29:79:70:91:99:9a:a4:24:5d:60:86:de:c7:c4:8e:30:d7: 30:68:53:d3:a1:03:b0:b2:a0:31:8d:6c:a3:99:e9:b5:df:6b: 60:ac:98:2d:38:0f:3e:ad:6a:9a:0d:c0:11:fd:0c:e4:95:79: 0c:58:02:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5coX3pPj/w8iWPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MDQxYzM2OGYtODlmNi00NTY5LWFjMTMtMmU5NDkzZmU5NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh00Bqubdjz/+Fpy7Co8Wa8/EJZXEUzGTeNNp N7eKxhXQg+VydOzYzGEhwcZc7V1sZk82lZ2hR6SIYob3ZorYHTzOygelPqAuxSN5 dDg4i+IXWIzHwD1RM9NiW1X/q2EWr5kvoMP7z4lnDr0cmFl7rPtIfSKo8UO1VqiZ gEZJr8xJh4vSN342JTabyySRW/JeZv0tww6Fz/nAWwQYxxvgGwQVUQMVOdpwg5jb /+q51oatvp4AjzOwX1GE0bp+N2WflvIOk/uOG3IUm2Na71OQBTIrKgWc2QZgwjB0 sIFZanoNVFhMqj7uoPZypoRQlh31bYdIOT1jjmQcDSqFHZeOHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFAJIpdGqiiDRm2kRNQBAsbIy/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTViOGVhMjMtMDdmYi0z YTAzLTg5ODUtNzgyZjM5NTY2MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtsv5QefynZP2z6I9LROAFAjje6agTQ02jOmLGNvf7g/IB/L4WoLVTt YfQqYnUR1CwnIkX9dBVv6kkw684J1GTYwjRW7aH0mTcVPBnj8xK1qxtxcs+Ftu7W PNrXSMeY9WSeiogrBatXCnPcVmpojKmeR27B2Jh+FmpgNZO+3pgImJY7oPY9fx26 o57YqIOSBHCl+xfB5jwbTtEBEnagb5CiA5Rh4K/g0n+ergw/mLKd8ex/4saYBUb4 wIAaJC2ROURSGD1CSCMpeXCRmZqkJF1ght7HxI4w1zBoU9OhA7CyoDGNbKOZ6bXf a2CsmC04Dz6tapoNwBH9DOSVeQxYAsM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:22 2025 by rpki-client