$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa File: 34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa (raw, json) Hash identifier: JMyxnSduRr9jhoMymVf92gq8m01kDFmpAWuGpBcdwPE= Subject key identifier: 47:70:22:F4:53:B9:FF:02:2D:4F:9F:0E:DE:92:FB:38:11:F4:66:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E0069DCE14FB73362A57EDC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.153.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9d:ce:14:fb:73:36:2a:57:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=06b6e207-939c-43ef-9d22-d1bfdfdc609d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:ec:cf:9a:41:ca:88:c9:1d:f3:c2:a4:ea: 34:35:f8:0e:1c:23:97:2e:c9:8b:fb:7d:e7:03:80: 23:5b:0e:e9:57:7a:94:21:56:eb:28:38:d5:19:d1: cf:15:df:ad:5e:2e:e3:4f:20:2f:30:42:8e:48:85: 73:4b:39:4c:ce:3b:67:d1:ad:ef:94:23:8d:51:f0: d7:6e:af:a6:98:7c:fa:3d:8c:58:fc:6c:b5:1a:b1: 31:e1:cb:fd:27:36:b6:34:b8:78:c8:6a:8e:65:25: c4:bc:70:74:a6:8f:77:74:43:ca:5d:69:96:12:43: 1d:74:d6:0b:e7:a0:cb:5d:a4:2e:c8:26:3c:c6:7a: 60:01:e3:a3:d6:84:73:70:54:6b:81:d1:ef:59:81: 5f:35:aa:d9:70:e1:27:6c:4e:37:da:e7:a3:1d:38: 10:f2:f0:a3:5d:ee:0f:0d:40:2d:43:90:23:13:a9: ab:2c:c0:49:a4:c7:f5:da:6d:a8:ce:0c:06:d5:7e: 66:ee:3e:a8:53:c0:fe:3f:ae:e9:3f:84:dc:80:74: 1a:6f:14:cb:d7:88:c6:1b:2f:cd:73:32:a4:33:83: 80:97:f7:10:3d:af:eb:e2:76:fa:ca:91:ba:af:75: e1:87:3b:c0:5c:6a:a9:ec:78:f1:53:59:aa:c2:fe: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:22:F4:53:B9:FF:02:2D:4F:9F:0E:DE:92:FB:38:11:F4:66:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:11:a8:66:1c:3e:90:f2:80:0c:a7:2d:00:fc:4a:5b:25:03: 42:16:87:22:86:88:38:df:3e:60:8e:cb:e0:29:36:fb:ca:df: 7f:5e:9f:88:48:60:b2:2b:a0:f8:b6:6e:5c:4e:2a:da:c9:47: 77:4f:cd:0d:6a:77:8a:00:d1:f8:b8:db:aa:40:9d:a8:c1:17: c8:bf:18:65:38:6b:fb:62:10:a0:01:0a:50:95:d0:a2:4f:19: f3:25:a5:26:f6:d5:de:c7:4d:a8:6b:f2:1c:b7:10:9c:74:05: e5:34:c9:46:36:02:47:56:59:f8:00:4f:47:6e:34:29:ef:c5: 0a:96:77:6b:35:7d:e8:ac:18:17:50:ab:1f:5c:1b:b3:04:33: 42:87:c1:07:b5:48:18:e0:5a:42:b1:29:c4:92:28:30:7a:a7: 6d:26:08:23:45:87:73:ba:5b:56:57:77:e3:23:54:ed:f7:59: f4:9d:45:cc:b2:46:ba:dc:16:26:c6:8c:dd:19:a0:32:23:ed: c7:93:7c:9a:09:e9:14:f7:d5:42:69:e0:53:9d:18:fe:29:a1: 98:6e:ae:ae:91:c0:eb:fd:63:f8:6b:c0:cd:2a:f3:4d:20:5b: d8:bb:f8:5a:5b:b1:44:48:9f:a2:16:08:d4:64:8c:3b:8f:60: 62:8d:63:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp3OFPtzNipX7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MDZiNmUyMDctOTM5Yy00M2VmLTlkMjItZDFiZmRmZGM2MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE7sz5pByojJHfPCpOo0NfgOHCOXLsmL+33n A4AjWw7pV3qUIVbrKDjVGdHPFd+tXi7jTyAvMEKOSIVzSzlMzjtn0a3vlCONUfDX bq+mmHz6PYxY/Gy1GrEx4cv9Jza2NLh4yGqOZSXEvHB0po93dEPKXWmWEkMddNYL 56DLXaQuyCY8xnpgAeOj1oRzcFRrgdHvWYFfNarZcOEnbE432uejHTgQ8vCjXe4P DUAtQ5AjE6mrLMBJpMf12m2ozgwG1X5m7j6oU8D+P67pP4TcgHQabxTL14jGGy/N czKkM4OAl/cQPa/r4nb6ypG6r3XhhzvAXGqp7HjxU1mqwv7pKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdwIvRTuf8CLU+fDt6S+zgR9GZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRlYTY4YmMtYzZjZC0z MmUzLTgyMjItYTNlYTlkNjU4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8RqGYcPpDygAynLQD8SlslA0IWhyKGiDjfPmCOy+ApNvvK339en4hI YLIroPi2blxOKtrJR3dPzQ1qd4oA0fi426pAnajBF8i/GGU4a/tiEKABClCV0KJP GfMlpSb21d7HTahr8hy3EJx0BeU0yUY2AkdWWfgAT0duNCnvxQqWd2s1feisGBdQ qx9cG7MEM0KHwQe1SBjgWkKxKcSSKDB6p20mCCNFh3O6W1ZXd+MjVO33WfSdRcyy RrrcFibGjN0ZoDIj7ceTfJoJ6RT31UJp4FOdGP4poZhurq6RwOv9Y/hrwM0q800g W9i7+FpbsURIn6IWCNRkjDuPYGKNY+4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:56 2025 by rpki-client