$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: /ESxIZopTrtBBT8cEWgTd1EVFN1LQ8l4lZz45MTdCpo= Subject key identifier: B8:54:43:7F:F8:27:66:AA:DC:4F:34:2F:4C:88:27:E3:35:C1:74:05 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EB8AD34F932DDC7D3640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:eb:8a:d3:4f:93:2d:dc:7d:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=2eb969ae-3e6e-4018-9d7f-ba6ef7148a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:fb:b7:a1:9d:cb:8d:ac:50:81:1d:6b:9f: b9:19:a5:7a:b9:33:b9:06:98:77:af:53:3f:81:d2: 11:76:7d:3a:e6:5b:2a:bd:91:b0:31:08:71:ef:38: 13:e2:0c:44:de:d6:26:8c:90:f1:60:65:a7:35:7c: a2:6f:ee:b0:de:07:b4:bf:f3:a0:59:fe:ea:c4:59: ed:e4:38:21:9d:23:94:b3:6c:bb:58:f2:22:78:90: 8e:2d:40:64:11:82:64:d5:10:82:a3:05:97:4a:14: 20:53:0b:30:52:2d:33:bf:a8:58:6b:6b:b3:fd:52: a6:c6:95:aa:b3:4a:c7:d8:e4:36:43:f8:b5:4b:f0: 16:28:6d:73:a6:41:99:f4:dd:74:a7:79:f7:e1:16: b9:48:98:9c:14:c2:ab:8a:49:c9:b0:df:f2:fd:10: 99:03:f1:41:78:28:06:b4:8f:37:95:a6:f8:ca:bb: 94:9f:30:70:43:16:48:d6:89:57:78:6b:ed:22:29: ba:75:6a:ca:ac:96:57:20:66:96:4c:28:a4:1d:17: 0e:d5:57:ee:34:52:c4:ce:44:cf:1b:9b:48:e2:eb: 82:35:cb:8e:be:b5:d3:c5:3e:1c:c0:48:65:c9:55: 8c:62:b3:a3:28:85:a2:79:d2:b2:71:ce:d1:cb:b8: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:54:43:7F:F8:27:66:AA:DC:4F:34:2F:4C:88:27:E3:35:C1:74:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f0:fd:62:8f:93:5c:73:51:92:35:df:e5:25:1b:11:64:36: 50:30:66:7c:f9:d5:32:9f:d0:a4:9d:0f:30:f5:7b:35:12:28: de:48:72:86:50:e0:2e:2a:11:16:fd:6f:cb:ab:49:ec:a9:83: 30:ef:37:64:dd:a5:2a:ec:d3:09:e1:a1:79:64:5b:e5:f3:a0: 54:33:c3:03:66:90:a4:cb:86:b3:e1:40:c0:d0:f7:7d:a5:bc: 17:f7:f8:19:ec:cf:e4:01:e6:a7:be:ca:69:f5:29:3b:e5:ea: 5d:21:d4:3b:5c:b8:3a:c0:03:78:9c:24:5b:f8:2b:7e:2a:64: a3:c0:b0:c6:95:ee:ad:b9:89:da:6c:e8:7b:77:81:72:34:dd: ab:e6:d3:f5:c3:9e:d6:a9:e6:c5:7c:7d:56:c2:a3:1a:e7:16: c9:92:96:17:ca:ba:65:31:e1:b1:d3:42:b6:d1:9e:d1:9f:5f: 0b:cc:6b:84:52:53:ae:01:e4:ad:f0:f1:3e:d6:14:50:28:8a: fd:b7:52:d2:9f:d2:e8:32:22:42:74:14:c7:94:7e:0f:29:ad: fe:39:7e:e8:da:06:10:90:e0:56:8b:40:e1:d2:2d:c8:65:cd: e0:f0:21:82:96:f8:ce:4b:6b:ad:08:76:b7:1f:8a:39:b3:59: fa:42:cb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBeuK00+TLdx9NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk MmViOTY5YWUtM2U2ZS00MDE4LTlkN2YtYmE2ZWY3MTQ4YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkf7t6Gdy42sUIEda5+5GaV6uTO5Bph3r1M/ gdIRdn065lsqvZGwMQhx7zgT4gxE3tYmjJDxYGWnNXyib+6w3ge0v/OgWf7qxFnt 5DghnSOUs2y7WPIieJCOLUBkEYJk1RCCowWXShQgUwswUi0zv6hYa2uz/VKmxpWq s0rH2OQ2Q/i1S/AWKG1zpkGZ9N10p3n34Ra5SJicFMKriknJsN/y/RCZA/FBeCgG tI83lab4yruUnzBwQxZI1olXeGvtIim6dWrKrJZXIGaWTCikHRcO1VfuNFLEzkTP G5tI4uuCNcuOvrXTxT4cwEhlyVWMYrOjKIWiedKycc7Ry7hO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhUQ3/4J2aq3E80L0yIJ+M1wXQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzw/WKPk1xzUZI13+UlGxFkNlAwZnz51TKf0KSdDzD1ezUSKN5IcoZQ 4C4qERb9b8urSeypgzDvN2TdpSrs0wnhoXlkW+XzoFQzwwNmkKTLhrPhQMDQ932l vBf3+Bnsz+QB5qe+ymn1KTvl6l0h1DtcuDrAA3icJFv4K34qZKPAsMaV7q25idps 6Ht3gXI03avm0/XDntap5sV8fVbCoxrnFsmSlhfKumUx4bHTQrbRntGfXwvMa4RS U64B5K3w8T7WFFAoiv23UtKf0ugyIkJ0FMeUfg8prf45fujaBhCQ4FaLQOHSLchl zeDwIYKW+M5La60IdrcfijmzWfpCy9w= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:09 2025 by rpki-client