$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: 0U/t1mAXixHxo4buwckM72q+Mi7Xq4DlUCNXIORQJxo= Subject key identifier: 72:93:A6:0F:87:0A:2C:77:CA:45:19:47:F3:2D:2D:FC:D6:2D:04:91 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C26297A20BA7ED1D12940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:26:29:7a:20:ba:7e:d1:d1:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=96767e5b-cd27-4fed-9588-b013fa985a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:50:b1:f9:a0:9f:f4:32:c6:7e:bd:48:e9: 65:57:7f:44:ac:d0:c6:c5:e3:9f:06:e2:8b:51:be: cf:20:58:b8:12:1c:27:70:a0:10:80:ba:86:26:ee: cc:40:cc:fe:b0:e3:b1:55:2f:a4:8d:7d:e2:7e:c3: 7b:02:a5:d9:4d:da:61:34:38:fa:ad:64:4e:dd:3d: 76:c2:ef:3d:d4:61:c5:5f:a0:ca:d3:cc:d8:a1:24: c9:dd:85:da:c3:1a:77:e7:e8:f1:d6:7c:ea:ff:b9: e7:7f:a8:07:22:8d:c2:2f:d1:0f:67:9e:72:7f:65: 54:f8:f7:08:61:31:e9:33:37:bf:a3:24:3b:1b:9b: 10:99:9e:cf:28:ea:64:0e:01:6f:9b:30:20:96:6f: 3d:be:ae:16:6a:57:20:ce:a6:be:9f:f8:e0:2d:60: eb:a1:b7:42:f7:cf:b9:39:96:f1:54:6b:95:09:84: 5d:ee:cc:57:e4:e2:2a:24:73:44:d2:51:3c:86:9c: 2d:8b:fd:c4:3b:b4:01:48:7b:9d:58:31:ad:dc:5e: d8:5c:3d:40:c4:b5:b9:95:29:ed:b0:b8:2a:63:ae: 36:6c:6e:fd:f9:16:0d:25:b9:1b:21:ab:7d:b6:16: 87:5b:99:35:33:2b:71:43:66:d8:7d:29:be:ee:f1: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:A6:0F:87:0A:2C:77:CA:45:19:47:F3:2D:2D:FC:D6:2D:04:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3b:a2:e4:46:8b:89:4a:d4:53:ed:93:89:25:56:0d:34:8f: c5:9b:18:06:43:0c:43:59:c6:00:56:86:e7:f0:04:a2:5a:3a: d4:88:be:f4:47:68:33:e8:d6:ee:c3:91:38:78:db:0b:90:ad: 18:f9:54:1a:ec:f7:ea:be:e2:4f:b4:17:95:33:ca:71:b0:77: be:1d:1b:37:ca:95:f3:1d:3f:96:82:75:0e:d5:ca:ce:ca:99: 07:0a:4a:73:fc:ea:b9:9a:e9:5f:5b:12:1e:13:76:29:98:d6: 45:4d:ef:eb:7f:8e:9f:d6:47:9e:62:00:53:ca:69:57:29:a5: 90:0d:c8:40:f4:34:b1:89:12:22:54:59:b3:b5:93:4e:44:73: 49:8d:cb:e8:60:33:e2:a9:db:5d:ac:60:21:70:5d:45:31:5a: ab:84:3c:f6:b4:2d:a4:73:46:bb:1f:e7:5c:4d:71:26:75:fb: 7a:d7:6d:cc:57:68:95:ae:b3:08:e3:0d:d8:4c:e5:f6:68:09: d2:a2:46:ba:93:db:e5:90:cc:fa:ae:57:41:ff:6f:a2:5a:98: 68:fc:de:63:83:91:67:66:cf:14:a4:0e:2a:07:91:57:0e:e8: 32:b2:58:eb:d5:56:1f:5c:fe:da:ad:1a:d9:c7:fd:0d:9f:cd: 13:f1:88:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCYpeiC6ftHRKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OTY3NjdlNWItY2QyNy00ZmVkLTk1ODgtYjAxM2ZhOTg1YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hdQsfmgn/Qyxn69SOllV39ErNDGxeOfBuKL Ub7PIFi4EhwncKAQgLqGJu7MQMz+sOOxVS+kjX3ifsN7AqXZTdphNDj6rWRO3T12 wu891GHFX6DK08zYoSTJ3YXawxp35+jx1nzq/7nnf6gHIo3CL9EPZ55yf2VU+PcI YTHpMze/oyQ7G5sQmZ7PKOpkDgFvmzAglm89vq4Walcgzqa+n/jgLWDrobdC98+5 OZbxVGuVCYRd7sxX5OIqJHNE0lE8hpwti/3EO7QBSHudWDGt3F7YXD1AxLW5lSnt sLgqY642bG79+RYNJbkbIat9thaHW5k1MytxQ2bYfSm+7vGWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKTpg+HCix3ykUZR/MtLfzWLQSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ7ouRGi4lK1FPtk4klVg00j8WbGAZDDENZxgBWhufwBKJaOtSIvvRH aDPo1u7DkTh42wuQrRj5VBrs9+q+4k+0F5UzynGwd74dGzfKlfMdP5aCdQ7Vys7K mQcKSnP86rma6V9bEh4TdimY1kVN7+t/jp/WR55iAFPKaVcppZANyED0NLGJEiJU WbO1k05Ec0mNy+hgM+Kp212sYCFwXUUxWquEPPa0LaRzRrsf51xNcSZ1+3rXbcxX aJWuswjjDdhM5fZoCdKiRrqT2+WQzPquV0H/b6JamGj83mODkWdmzxSkDioHkVcO 6DKyWOvVVh9c/tqtGtnH/Q2fzRPxiAI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:35 2025 by rpki-client