$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa File: 2f4b3421-ca06-34d3-ad50-682de9195829.roa (raw, json) Hash identifier: Ihv1esiKGT0bXdHhzZtn+cvqUBwPVHsRBBwfGHOxZ2s= Subject key identifier: 46:86:00:FD:2E:1C:FE:83:16:C6:74:34:67:73:71:04:29:07:C2:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB21161CC58A551F43B40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:11:61:cc:58:a5:51:f4:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=cd6cf929-9837-4b09-8b1c-ebd155343132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:45:26:06:d8:da:ad:66:e8:88:3a:ac:63: 4f:9c:79:b7:e6:f1:fb:72:27:65:09:8c:1d:ad:70: d7:2e:46:67:9b:c1:0a:e0:c2:5d:b7:37:11:ca:ad: 99:a0:b9:1c:69:72:d0:0b:8d:07:6f:d0:4e:de:e9: 5c:c9:5b:b3:a9:c4:f4:d8:ae:ff:d7:e3:85:f4:ad: cc:bb:19:c7:be:d8:7a:c3:54:ef:7c:54:68:6d:6f: 62:e0:c6:87:d8:3d:b9:bd:24:09:a8:1e:66:52:b2: 74:ce:c5:d4:e3:f5:2b:90:70:36:7c:eb:82:50:b8: 7a:e8:2d:ae:90:42:4b:1b:3f:54:df:a1:fd:df:b3: 82:84:64:24:4c:b7:aa:41:a8:a5:a3:1e:e9:19:d8: a2:8a:81:d0:33:40:f2:dd:31:e6:7d:2e:b1:b1:4b: a7:e4:41:b1:1d:46:21:c0:b4:b1:5e:4a:6d:12:93: 44:0b:4f:61:4b:9a:65:6f:b4:21:e2:b2:1e:e5:f3: 9a:56:fd:f8:cc:b6:97:97:ce:5c:e7:47:c5:a7:78: d5:7b:ed:8d:f7:ae:2c:b8:5d:90:d0:58:3a:59:72: 02:69:2d:61:b3:98:e7:00:01:fc:14:98:f1:a8:43: f3:a6:4f:9c:7b:e3:69:67:69:ff:16:25:f9:f5:1f: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:00:FD:2E:1C:FE:83:16:C6:74:34:67:73:71:04:29:07:C2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:60:13:a7:a4:8a:48:25:95:af:1c:8f:14:1d:84:88:26:9a: 7c:60:ce:4c:2e:0c:8e:03:32:0a:48:ce:b7:80:56:82:f5:eb: 37:85:de:ff:36:f7:6d:1a:fd:9c:dc:e2:89:fb:32:82:ad:2d: 60:00:0e:71:40:5c:28:eb:ea:e8:23:62:8c:5d:65:4c:ee:de: 71:34:0d:f8:2f:ba:4d:0b:f2:2b:0f:00:02:76:84:6f:5f:de: b4:65:7f:f3:2e:b9:3e:0c:d5:4e:37:83:f3:82:5f:80:a1:3c: 96:86:d5:4d:76:8a:f3:3b:05:7d:33:15:14:54:85:82:2b:e3: ae:9c:83:79:e5:ad:e0:6a:83:1d:7a:0d:f4:7f:e8:aa:0d:79: ec:b2:ed:e6:20:1e:4e:d1:82:4f:f0:5e:75:5d:e3:0b:c3:f0: 39:ee:11:00:f3:1f:5a:8a:61:0d:28:68:c7:fe:52:ea:34:24: 5c:50:13:fd:5d:36:de:4b:00:f4:62:07:03:44:40:47:e9:ff: c6:c0:16:60:93:be:1c:f0:10:bf:4c:3e:99:cf:49:ea:18:76: 45:9c:58:d2:4e:ee:bf:e4:da:6a:92:0f:61:55:a9:01:ef:97: 2d:4b:3c:ad:38:7e:41:c3:01:1e:9b:e9:58:a3:88:b4:fd:d7: de:f9:ba:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrIRYcxYpVH0O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q2Y2Y5MjktOTgzNy00YjA5LThiMWMtZWJkMTU1MzQzMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpdFJgbY2q1m6Ig6rGNPnHm35vH7cidlCYwd rXDXLkZnm8EK4MJdtzcRyq2ZoLkcaXLQC40Hb9BO3ulcyVuzqcT02K7/1+OF9K3M uxnHvth6w1TvfFRobW9i4MaH2D25vSQJqB5mUrJ0zsXU4/UrkHA2fOuCULh66C2u kEJLGz9U36H937OChGQkTLeqQailox7pGdiiioHQM0Dy3THmfS6xsUun5EGxHUYh wLSxXkptEpNEC09hS5plb7Qh4rIe5fOaVv34zLaXl85c50fFp3jVe+2N964suF2Q 0Fg6WXICaS1hs5jnAAH8FJjxqEPzpk+ce+NpZ2n/FiX59R/4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaGAP0uHP6DFsZ0NGdzcQQpB8IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmY0YjM0MjEtY2EwNi0z NGQzLWFkNTAtNjgyZGU5MTk1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFgE6ekikglla8cjxQdhIgmmnxgzkwuDI4DMgpIzreAVoL16zeF3v82 920a/Zzc4on7MoKtLWAADnFAXCjr6ugjYoxdZUzu3nE0Dfgvuk0L8isPAAJ2hG9f 3rRlf/MuuT4M1U43g/OCX4ChPJaG1U12ivM7BX0zFRRUhYIr466cg3nlreBqgx16 DfR/6KoNeeyy7eYgHk7Rgk/wXnVd4wvD8DnuEQDzH1qKYQ0oaMf+Uuo0JFxQE/1d Nt5LAPRiBwNEQEfp/8bAFmCTvhzwEL9MPpnPSeoYdkWcWNJO7r/k2mqSD2FVqQHv ly1LPK04fkHDAR6b6VijiLT91975uq4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:37 2025 by rpki-client