$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa File: 2752a970-d5ff-337c-a051-6b254bb9c802.roa (raw, json) Hash identifier: NN8otmVEQXkkXLBBsV7Aj1WsyrVatyROzYLUS2m6p6c= Subject key identifier: 13:35:5D:97:8E:AC:E6:5B:6E:7B:62:E1:02:FB:6F:1E:A6:5C:D2:3E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848116FFA4ECD2B0698F7090380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 8069 IP address blocks: 20.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:fa:4e:cd:2b:06:98:f7:09:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=efd01ed1-8600-420a-ad9b-f8429348ccbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:9b:13:81:9e:57:9e:f5:03:50:52:25:e9: e0:cc:ae:25:32:d6:a9:08:fa:c6:0e:79:13:32:96: a6:3d:51:28:32:18:e5:7d:b4:a6:0b:a1:b3:72:73: 16:3c:93:aa:bd:fa:1b:4f:80:93:2c:ae:f8:54:17: 2d:0d:da:bd:39:12:cf:ed:be:4a:85:eb:57:1b:9b: 56:df:34:ac:d9:1b:82:c8:a4:d8:ff:8a:27:55:fe: 0f:cc:12:d8:80:9e:8f:3c:ac:9c:b5:50:a1:2f:8d: 29:83:0b:75:12:ef:13:3a:d6:5a:0f:dd:f1:9e:1a: 4a:35:59:b5:46:8a:69:a5:44:1d:c6:d1:7d:8b:44: 5c:76:c2:04:fe:01:7e:b0:71:09:c1:76:03:cb:49: 82:ba:1e:26:4b:76:a4:d4:f7:00:1f:01:ee:6f:d6: 0e:03:b5:40:7b:15:be:5e:43:25:32:38:0d:99:63: e0:0e:ec:fe:0a:4b:71:08:12:3a:52:20:3f:86:dd: 1e:59:bc:6e:61:96:06:64:e1:23:b5:08:d4:a7:0e: d5:db:fc:da:68:7a:3a:49:dc:a9:c0:b7:d6:21:e0: 6c:85:bb:25:ad:7f:38:6b:8c:5d:eb:11:68:2f:4e: 26:cf:de:97:33:18:71:6b:49:ed:8d:3e:33:47:1e: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:35:5D:97:8E:AC:E6:5B:6E:7B:62:E1:02:FB:6F:1E:A6:5C:D2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:23:a7:8a:30:8b:f9:26:32:c4:71:05:de:a0:a7:ac:9b:fc: 45:b3:c7:c2:59:fe:c6:6e:2c:81:f6:c1:78:35:be:85:d9:64: 3d:d0:a5:56:0a:0e:20:be:69:5d:e3:f4:60:90:05:66:8f:1b: 8e:c9:c6:5f:e6:13:cb:2f:4d:18:fe:d3:9f:5c:4f:09:45:74: 9d:6a:1d:94:fe:02:e7:90:1f:37:86:4d:9d:97:59:20:8f:86: d3:66:99:1a:4d:e0:eb:10:c0:ef:aa:3c:ac:1f:a2:d3:a2:34: 5b:c8:bf:7e:aa:03:96:16:e6:07:57:4f:07:f0:a6:8d:de:72: 7c:b1:fd:5e:f3:70:66:2f:70:4f:aa:38:48:88:df:48:92:12: cb:d3:aa:24:bc:67:81:3c:61:30:5a:b9:94:04:ad:ce:8a:be: 6c:3a:c4:75:79:e0:83:8b:0d:45:00:a4:32:0e:4f:fb:31:ac: bc:42:98:09:d3:cb:55:19:7b:d2:d4:b3:c4:cb:4a:53:4b:08: 53:53:d2:c2:a3:c1:2d:12:2d:7b:b3:8d:14:40:aa:d9:53:e7: 2f:6e:2e:d7:e6:63:d6:78:c9:40:16:bd:54:f8:af:54:6d:3f: 20:17:06:c3:10:a0:8b:73:44:e1:dc:06:74:71:59:9d:9d:13: 2b:4c:ed:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb/pOzSsGmPcJA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk ZWZkMDFlZDEtODYwMC00MjBhLWFkOWItZjg0MjkzNDhjY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUqbE4GeV571A1BSJengzK4lMtapCPrGDnkT MpamPVEoMhjlfbSmC6GzcnMWPJOqvfobT4CTLK74VBctDdq9ORLP7b5KhetXG5tW 3zSs2RuCyKTY/4onVf4PzBLYgJ6PPKyctVChL40pgwt1Eu8TOtZaD93xnhpKNVm1 RopppUQdxtF9i0RcdsIE/gF+sHEJwXYDy0mCuh4mS3ak1PcAHwHub9YOA7VAexW+ XkMlMjgNmWPgDuz+CktxCBI6UiA/ht0eWbxuYZYGZOEjtQjUpw7V2/zaaHo6Sdyp wLfWIeBshbslrX84a4xd6xFoL04mz96XMxhxa0ntjT4zRx7PDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM1XZeOrOZbbnti4QL7bx6mXNI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc1MmE5NzAtZDVmZi0z MzdjLWEwNTEtNmIyNTRiYjljODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJojp4owi/kmMsRxBd6gp6yb/EWzx8JZ/sZuLIH2wXg1voXZZD3QpVYK DiC+aV3j9GCQBWaPG47Jxl/mE8svTRj+059cTwlFdJ1qHZT+AueQHzeGTZ2XWSCP htNmmRpN4OsQwO+qPKwfotOiNFvIv36qA5YW5gdXTwfwpo3ecnyx/V7zcGYvcE+q OEiI30iSEsvTqiS8Z4E8YTBauZQErc6Kvmw6xHV54IOLDUUApDIOT/sxrLxCmAnT y1UZe9LUs8TLSlNLCFNT0sKjwS0SLXuzjRRAqtlT5y9uLtfmY9Z4yUAWvVT4r1Rt PyAXBsMQoItzROHcBnRxWZ2dEytM7SU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:56 2025 by rpki-client