$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa File: 4dd409f5-81c8-3feb-986f-28c676a7eb94.roa (raw, json) Hash identifier: ZwNBPuj4HqAu05+jYJOnWOlmnCxc0ZWa2tiijKgfcVk= Subject key identifier: 34:1E:C7:EC:C1:77:84:89:84:DC:E7:A2:51:8D:4F:2A:7E:B4:CC:90 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848530B06BF9941A76A7E673DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0b:06:bf:99:41:a7:6a:7e:67:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=a90b7a70-b482-4471-b1ab-f05ba10f9927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:63:8c:e5:be:f7:aa:84:81:a0:84:e1:b1: 33:9c:81:81:9e:ee:ca:0b:aa:f0:fb:f0:fa:c9:84: 80:84:7d:fc:8e:5e:85:7f:10:2c:3d:51:1c:2f:42: 77:cd:42:86:e5:78:cd:1b:e2:93:5b:49:15:dd:0f: fc:c6:0d:c8:b0:f2:1c:6d:41:25:00:c3:53:46:3a: 54:04:95:6a:3e:57:73:fc:df:4a:7a:ed:16:0d:0a: 2c:df:4f:98:e2:30:d2:a8:f0:59:8f:c5:45:22:ff: cb:d6:65:43:a0:41:ef:a8:c0:bc:c6:bf:2a:98:c0: 20:c2:21:16:bd:8d:0d:8a:bc:c4:85:d5:af:8d:2e: 8c:47:7a:83:c9:48:6b:c8:5d:87:50:2d:b7:ca:3d: d6:bd:73:50:97:5a:1f:28:f6:f2:8e:f3:9b:62:fb: b3:08:88:34:ab:dd:d8:4c:74:1b:53:f4:66:af:ad: be:75:82:71:4f:46:88:b6:80:c8:eb:dd:c3:3f:14: 09:7a:ed:f6:13:21:17:4e:ac:c0:c8:41:6f:67:4a: 7c:5c:68:1b:fc:bb:25:ba:bc:16:da:6f:76:42:20: b5:4c:f4:d7:8b:cc:07:ba:e5:c5:56:e8:20:73:d9: 05:d5:79:3f:79:bd:f2:ea:19:7e:9c:7d:7e:d0:93: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:C7:EC:C1:77:84:89:84:DC:E7:A2:51:8D:4F:2A:7E:B4:CC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b2:9f:74:2b:06:d1:85:22:b2:53:73:59:35:e3:95:2a:3b: c3:84:35:e0:b8:ae:1f:e0:7a:ee:b9:9c:ee:af:40:60:c0:26: 5b:83:7b:f1:b3:c0:77:b4:d8:29:4b:97:27:bb:0a:02:1c:99: ed:28:e9:8e:27:46:43:88:9b:a9:99:d5:17:2b:93:65:7a:52: 19:9c:f2:d5:52:ee:fb:63:c9:1d:37:d1:3a:15:ad:d7:f7:91: 77:40:8a:69:01:42:bd:a8:35:e1:42:e3:c4:cf:bb:3e:80:d9: 4f:11:42:ec:29:7a:53:f4:4e:64:4a:cf:cc:eb:71:2d:89:24: 81:4f:9d:0f:79:c4:b4:9b:71:e9:a4:5d:65:a7:29:cf:31:8f: a9:97:35:2a:8a:85:9c:94:3b:4a:08:bb:57:48:cb:d5:76:08: d5:92:28:4b:27:e7:49:1a:01:3f:02:67:a2:62:b2:b3:5b:28: 9a:c0:1c:9b:b8:29:d4:4c:a4:d8:cb:b5:63:7d:a8:71:80:b3: 17:91:ce:93:4b:28:c6:37:31:b9:ea:52:90:90:c1:54:47:31: a4:18:59:ca:02:a7:5d:62:f5:5f:2b:a6:67:e0:f5:e6:b4:cc: a9:cc:7f:68:05:77:7d:ff:f2:0a:b8:0f:67:fc:96:13:bf:73: 52:3f:5c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwa/mUGnan5nPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTkwYjdhNzAtYjQ4Mi00NDcxLWIxYWItZjA1YmExMGY5OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZZjjOW+96qEgaCE4bEznIGBnu7KC6rw+/D6 yYSAhH38jl6FfxAsPVEcL0J3zUKG5XjNG+KTW0kV3Q/8xg3IsPIcbUElAMNTRjpU BJVqPldz/N9Keu0WDQos30+Y4jDSqPBZj8VFIv/L1mVDoEHvqMC8xr8qmMAgwiEW vY0NirzEhdWvjS6MR3qDyUhryF2HUC23yj3WvXNQl1ofKPbyjvObYvuzCIg0q93Y THQbU/Rmr62+dYJxT0aItoDI693DPxQJeu32EyEXTqzAyEFvZ0p8XGgb/LslurwW 2m92QiC1TPTXi8wHuuXFVuggc9kF1Xk/eb3y6hl+nH1+0JM74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQex+zBd4SJhNznolGNTyp+tMyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRkNDA5ZjUtODFjOC0z ZmViLTk4NmYtMjhjNjc2YTdlYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSyn3QrBtGFIrJTc1k145UqO8OENeC4rh/geu65nO6vQGDAJluDe/Gz wHe02ClLlye7CgIcme0o6Y4nRkOIm6mZ1Rcrk2V6Uhmc8tVS7vtjyR030ToVrdf3 kXdAimkBQr2oNeFC48TPuz6A2U8RQuwpelP0TmRKz8zrcS2JJIFPnQ95xLSbcemk XWWnKc8xj6mXNSqKhZyUO0oIu1dIy9V2CNWSKEsn50kaAT8CZ6JisrNbKJrAHJu4 KdRMpNjLtWN9qHGAsxeRzpNLKMY3MbnqUpCQwVRHMaQYWcoCp11i9V8rpmfg9ea0 zKnMf2gFd33/8gq4D2f8lhO/c1I/XA4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:20 2025 by rpki-client