$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: Oog5onfZBYLV6kd34KCdNnQ/IJMGusm2hPc7HkTOAlM= Subject key identifier: 9B:92:2D:97:30:A4:ED:6A:29:0E:A8:15:B4:2F:8E:97:6B:B5:B2:31 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848B35B70A0BCE6E49B35AD3200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:a0:bc:e6:e4:9b:35:ad:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=73c438d2-bf9f-4b4f-b44a-419a2dcae21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:04:c1:82:f5:31:18:04:5f:2b:3d:e6:88: 5f:b8:3f:95:63:ee:48:59:1f:44:2e:68:09:42:1b: 85:85:f2:ce:c0:e9:81:70:48:ce:30:8b:3e:06:fc: f8:20:7f:e9:b9:1c:c4:c4:7a:21:24:65:b3:9d:00: 03:7f:17:7a:25:24:bb:2b:31:7c:47:d1:76:d8:91: fc:6f:58:13:72:5b:75:89:82:95:c1:d3:3d:8a:40: 71:4c:d7:31:ce:73:37:b2:aa:30:4c:45:e1:d9:93: e9:f6:0d:3a:51:3c:9d:78:16:fb:ed:52:99:62:7e: 39:c9:24:11:79:2b:36:d9:f6:f2:07:8b:c7:4b:fc: dc:47:47:1e:5c:bd:0b:47:12:42:82:9e:c8:85:f1: 8a:04:11:3e:2d:7b:ca:69:9d:b5:fc:ae:5e:99:87: bf:4d:71:c8:fd:f6:f6:1c:d1:71:1b:37:cd:56:7c: f2:6c:1b:9c:37:6a:98:ec:39:1b:22:98:e7:07:bf: 3c:56:a2:98:98:f7:7b:6d:e0:77:3c:ba:bf:d7:e9: c4:a1:bc:23:e0:32:9c:59:42:45:4b:64:f8:31:a3: f0:75:4d:7c:ac:c3:cc:f5:4a:5b:cc:54:7f:b2:84: 12:b4:5c:2b:ef:2a:6c:dd:40:93:da:02:30:6b:59: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:2D:97:30:A4:ED:6A:29:0E:A8:15:B4:2F:8E:97:6B:B5:B2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:50:81:3d:f0:1d:71:2d:66:2f:af:0e:fa:1f:f7:7e:e6:68: 63:90:94:9e:28:91:94:62:d2:f8:84:4b:56:02:ce:7f:d4:21: e1:30:04:8a:3e:51:59:81:0e:91:0d:8d:e4:83:bf:ce:d5:ad: a0:e2:7b:78:1a:ac:c8:9e:32:e0:7a:ad:c0:0f:c8:64:b5:46: be:fc:00:d1:ee:5a:6e:09:14:cf:7e:5d:ce:ac:bc:af:e3:d4: 51:b3:42:d5:54:f9:82:21:cc:26:d5:f4:a0:17:e6:4c:8a:b7: 23:7c:81:91:a1:1f:e4:ec:1a:a5:52:d1:32:fe:cb:ef:90:33: e3:9e:21:dc:35:20:0f:4b:2e:a4:ad:21:7e:4c:e5:f8:46:ba: f0:22:da:64:fb:c1:1c:b4:a5:10:e6:b0:43:a4:df:3f:9a:0b: 93:23:53:da:38:c9:18:bb:a5:06:00:e9:af:77:64:f7:d8:96: c4:1a:1a:e7:c5:12:f4:12:13:f7:02:fa:e8:67:e2:63:cb:d0: d5:7d:62:89:b9:dd:a8:42:8e:ae:d1:b5:61:b7:f2:cf:1d:6b: 5b:2a:78:82:ad:bf:bb:e4:ea:8c:58:0e:9b:76:52:4a:56:3c: 23:f7:72:8c:2f:b7:dd:13:40:76:2c:1a:97:de:93:a6:b5:94: 6d:15:16:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3CgvObkmzWtMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NzNjNDM4ZDItYmY5Zi00YjRmLWI0NGEtNDE5YTJkY2FlMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8MEwYL1MRgEXys95ohfuD+VY+5IWR9ELmgJ QhuFhfLOwOmBcEjOMIs+Bvz4IH/puRzExHohJGWznQADfxd6JSS7KzF8R9F22JH8 b1gTclt1iYKVwdM9ikBxTNcxznM3sqowTEXh2ZPp9g06UTydeBb77VKZYn45ySQR eSs22fbyB4vHS/zcR0ceXL0LRxJCgp7IhfGKBBE+LXvKaZ21/K5emYe/TXHI/fb2 HNFxGzfNVnzybBucN2qY7DkbIpjnB788VqKYmPd7beB3PLq/1+nEobwj4DKcWUJF S2T4MaPwdU18rMPM9UpbzFR/soQStFwr7yps3UCT2gIwa1k2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuSLZcwpO1qKQ6oFbQvjpdrtbIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElQgT3wHXEtZi+vDvof937maGOQlJ4okZRi0viES1YCzn/UIeEwBIo+ UVmBDpENjeSDv87VraDie3garMieMuB6rcAPyGS1Rr78ANHuWm4JFM9+Xc6svK/j 1FGzQtVU+YIhzCbV9KAX5kyKtyN8gZGhH+TsGqVS0TL+y++QM+OeIdw1IA9LLqSt IX5M5fhGuvAi2mT7wRy0pRDmsEOk3z+aC5MjU9o4yRi7pQYA6a93ZPfYlsQaGufF EvQSE/cC+uhn4mPL0NV9Yom53ahCjq7RtWG38s8da1sqeIKtv7vk6oxYDpt2UkpW PCP3cowvt90TQHYsGpfek6a1lG0VFnA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:03:59 2025 by rpki-client