$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa File: 4e958850-6659-3d52-bbff-26a04f499d8d.roa (raw, json) Hash identifier: YUpRTHa2Ie6kd6Xj67fJOdTbRpvqzkG7IImSPBnVfoE= Subject key identifier: 54:07:9C:22:BA:5F:3C:DF:92:38:06:CF:80:BD:BA:2A:C8:5D:C8:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848A996360F91E6F368FE002060 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:36:0f:91:e6:f3:68:fe:00:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=74d47c1e-701e-4b64-8933-03f3006742f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:e2:7b:61:52:94:84:31:95:62:dd:69:07: af:07:b4:9d:bf:49:5a:a8:9c:95:41:d0:95:1a:28: ec:7a:48:98:f6:34:c8:c2:f4:9d:8e:a3:aa:4b:8a: 38:28:03:28:57:c4:f8:ea:4d:ae:2d:a7:b1:68:44: 1f:1c:10:12:37:64:71:4d:91:60:3f:80:04:9c:e2: 92:74:38:d1:ca:f4:6e:a3:09:39:25:54:00:9a:e2: c8:ad:fe:f0:3d:d5:6b:e2:5e:86:70:c7:c7:32:0f: 0d:43:db:b3:48:f7:3e:5a:50:0f:c4:cf:ad:38:f6: d7:29:9d:1f:09:a7:8c:20:38:d2:bc:5f:14:26:3b: 3f:20:7f:ec:29:14:ef:b3:9f:ce:2a:ce:89:c7:b6: e4:9d:16:f9:af:6e:68:8a:4b:a9:87:e9:a7:e2:ba: 63:c8:50:75:ef:13:0c:57:c7:72:92:9e:a3:79:4b: ea:ab:59:0e:84:2a:df:75:bf:37:f6:e3:2f:5a:db: 99:38:ed:b9:b4:e9:0d:85:71:96:74:bd:68:e0:34: 8b:4d:45:7b:26:dd:9d:b4:75:05:2c:79:d5:da:d0: 2a:dd:04:5d:7c:62:0e:c1:c2:2a:47:42:a9:bf:0e: b4:df:c6:3e:a5:cd:a6:c4:63:70:60:47:b9:68:d6: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:9C:22:BA:5F:3C:DF:92:38:06:CF:80:BD:BA:2A:C8:5D:C8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:86:0c:83:d7:3e:85:eb:49:68:e7:66:ec:9b:02:86:5d:dc: c0:a7:1c:bb:00:1c:4d:08:c8:a1:d8:29:f0:db:15:cc:20:01: d5:69:3b:75:1a:28:92:cd:14:45:68:2a:32:2f:69:7a:05:6f: 09:cc:6a:83:bd:85:1c:a4:d3:94:a5:39:92:a3:69:99:4b:ec: 58:1c:ba:b6:0e:ef:83:9f:65:f8:a2:2d:26:7d:13:a8:f2:41: a9:1d:bb:a6:78:5f:8a:a3:b9:89:9f:1f:c6:31:da:7c:68:ae: b4:f5:ac:7a:a0:0a:64:6a:a2:2b:c8:0f:22:01:89:e5:c6:c4: fb:47:e9:29:51:41:6c:fd:e7:15:08:65:d7:34:7a:99:0c:6c: e6:6c:f6:47:7b:9e:a8:5d:61:91:7a:47:10:3d:de:16:eb:76: 3b:20:6d:3c:65:ee:b8:d4:50:89:3b:1a:70:58:6b:71:bd:60: f1:e9:43:ad:9a:30:45:84:a8:f4:80:c5:0f:6e:6a:de:0f:30: 9a:03:72:f9:43:42:79:e6:5b:1c:fe:cb:c3:9c:55:d7:af:31: d2:b1:81:3a:3f:97:21:8a:1e:f6:ec:6f:e5:38:23:03:42:86: 26:14:4e:00:b6:7b:33:5f:dc:90:f7:e8:c1:9b:24:ab:90:62: ab:4c:6f:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljYPkebzaP4AIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzRkNDdjMWUtNzAxZS00YjY0LTg5MzMtMDNmMzAwNjc0MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Tie2FSlIQxlWLdaQevB7Sdv0laqJyVQdCV GijsekiY9jTIwvSdjqOqS4o4KAMoV8T46k2uLaexaEQfHBASN2RxTZFgP4AEnOKS dDjRyvRuowk5JVQAmuLIrf7wPdVr4l6GcMfHMg8NQ9uzSPc+WlAPxM+tOPbXKZ0f CaeMIDjSvF8UJjs/IH/sKRTvs5/OKs6Jx7bknRb5r25oikuph+mn4rpjyFB17xMM V8dykp6jeUvqq1kOhCrfdb839uMvWtuZOO25tOkNhXGWdL1o4DSLTUV7Jt2dtHUF LHnV2tAq3QRdfGIOwcIqR0Kpvw6038Y+pc2mxGNwYEe5aNbHXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQHnCK6XzzfkjgGz4C9uirIXci4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU5NTg4NTAtNjY1OS0z ZDUyLWJiZmYtMjZhMDRmNDk5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2GDIPXPoXrSWjnZuybAoZd3MCnHLsAHE0IyKHYKfDbFcwgAdVpO3Ua KJLNFEVoKjIvaXoFbwnMaoO9hRyk05SlOZKjaZlL7FgcurYO74OfZfiiLSZ9E6jy Qakdu6Z4X4qjuYmfH8Yx2nxorrT1rHqgCmRqoivIDyIBieXGxPtH6SlRQWz95xUI Zdc0epkMbOZs9kd7nqhdYZF6RxA93hbrdjsgbTxl7rjUUIk7GnBYa3G9YPHpQ62a MEWEqPSAxQ9uat4PMJoDcvlDQnnmWxz+y8OcVdevMdKxgTo/lyGKHvbsb+U4IwNC hiYUTgC2ezNf3JD36MGbJKuQYqtMb7U= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:11 2025 by rpki-client