$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json) Hash identifier: MRLoX+79zUNenv26So8ioWKsujp9rnWJi6JaJUxyhPk= Subject key identifier: 19:4A:4A:97:D0:EE:68:68:7B:0D:BA:18:35:AE:F0:93:25:3A:55:50 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486530432BD28B362779781480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:43:2b:d2:8b:36:27:79:78:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=665bcd82-4036-492b-9e29-9de377a4fac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:34:15:ce:af:6e:b0:0e:87:cb:d6:69:90: d7:56:c5:09:fa:54:d6:92:32:0e:60:92:e1:2f:6b: 46:9a:34:4b:59:7e:1f:a3:26:51:ca:a4:4f:9d:5f: 29:ac:98:e1:0a:59:65:58:9d:b9:2a:aa:07:e9:80: 26:a9:95:05:d8:d1:db:ff:31:bf:7b:bd:56:c8:ca: e9:de:6e:a4:cf:85:38:67:c5:25:51:a9:e0:8b:37: 6a:a8:fa:61:fd:5e:3b:45:71:d3:c8:34:72:0f:fa: 31:be:9a:e7:04:15:47:7d:11:20:4c:cb:cc:8f:65: 44:07:1a:f4:a4:95:98:70:61:10:fe:5c:5b:0c:52: ec:4c:07:05:75:46:06:8d:ab:c2:cf:d7:97:df:80: 3a:4a:a8:ae:1f:01:39:65:df:0d:e9:58:35:ed:f3: 76:95:49:77:f6:01:c7:bd:29:94:c2:80:f0:f8:65: 39:28:75:47:41:11:64:11:3a:b1:47:7c:48:72:41: d9:79:3c:c1:72:ad:f9:81:5b:49:b9:3c:45:fd:fd: a1:ee:86:c9:d1:92:2f:5a:6c:03:17:60:e6:4b:69: 10:0d:d4:e1:92:d0:68:32:28:48:fe:fa:eb:ee:6f: 1b:ed:fb:ba:99:e6:02:9a:df:ac:19:bd:8c:75:cc: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:4A:97:D0:EE:68:68:7B:0D:BA:18:35:AE:F0:93:25:3A:55:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9b:88:c9:b4:f2:52:a2:e9:a4:be:98:d3:cc:90:49:0e:7d: 01:31:e6:0d:12:0a:1b:a0:a7:09:be:5c:9b:c7:13:9e:f3:d5: ce:35:97:04:2b:bd:c5:d7:89:a1:03:22:33:e7:65:f7:0a:2e: 44:c7:9e:61:8b:f3:4e:57:bd:6d:0c:f1:e7:65:de:f8:8a:74: 23:22:e8:4d:b2:4e:4d:f1:4a:1f:6e:b5:02:b4:c7:ca:89:41: c4:16:89:af:6d:2e:71:46:83:ea:0e:b1:b0:6c:93:d6:e7:c8: 80:2f:67:11:d1:58:f0:c9:40:78:89:30:6c:92:b2:65:be:36: 8d:f4:24:49:9a:b8:91:c3:cd:1d:13:49:f6:65:5d:4b:8e:e9: 97:26:92:ea:6b:39:c5:19:75:43:de:5e:d5:d7:06:76:fd:e0: 5c:bd:8e:32:27:d7:eb:68:5b:69:05:76:7d:3b:7c:1f:5c:17: 77:4f:76:5b:8e:7d:d6:eb:8a:0d:c2:92:38:39:c0:fe:fc:af: c3:b7:a4:ce:0e:fe:64:ed:d4:59:28:87:aa:76:dd:e7:4f:95: 34:c9:ab:d9:a7:d6:cc:d8:65:68:e4:b1:7b:d9:58:c3:5f:55: 46:fb:24:4d:c3:7e:3a:47:a5:e7:54:06:aa:ff:f1:0b:13:20: 3a:19:ed:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEMr0os2J3l4FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NjY1YmNkODItNDAzNi00OTJiLTllMjktOWRlMzc3YTRmYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis80Fc6vbrAOh8vWaZDXVsUJ+lTWkjIOYJLh L2tGmjRLWX4foyZRyqRPnV8prJjhClllWJ25KqoH6YAmqZUF2NHb/zG/e71WyMrp 3m6kz4U4Z8UlUangizdqqPph/V47RXHTyDRyD/oxvprnBBVHfREgTMvMj2VEBxr0 pJWYcGEQ/lxbDFLsTAcFdUYGjavCz9eX34A6SqiuHwE5Zd8N6Vg17fN2lUl39gHH vSmUwoDw+GU5KHVHQRFkETqxR3xIckHZeTzBcq35gVtJuTxF/f2h7obJ0ZIvWmwD F2DmS2kQDdThktBoMihI/vrr7m8b7fu6meYCmt+sGb2MdcylnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlKSpfQ7mhoew26GDWu8JMlOlVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQzYjU2ZTQtMjc4NS0z NzU4LThiOTgtN2I4ZWU0Yjg2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWbiMm08lKi6aS+mNPMkEkOfQEx5g0SChugpwm+XJvHE57z1c41lwQr vcXXiaEDIjPnZfcKLkTHnmGL805XvW0M8edl3viKdCMi6E2yTk3xSh9utQK0x8qJ QcQWia9tLnFGg+oOsbBsk9bnyIAvZxHRWPDJQHiJMGySsmW+No30JEmauJHDzR0T SfZlXUuO6ZcmkuprOcUZdUPeXtXXBnb94Fy9jjIn1+toW2kFdn07fB9cF3dPdluO fdbrig3Ckjg5wP78r8O3pM4O/mTt1Fkoh6p23edPlTTJq9mn1szYZWjksXvZWMNf VUb7JE3DfjpHpedUBqr/8QsTIDoZ7T8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:20 2025 by rpki-client