$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa File: 537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa (raw, json) Hash identifier: eYtZ+ptzUmwO28pCBUu61txBTXTjijooL/IliK/cDlI= Subject key identifier: 29:6C:26:D9:0F:DC:35:CE:0B:26:46:62:59:18:72:B4:4A:33:A5:51 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05ECD128ECCDDB16FEE000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:d1:28:ec:cd:db:16:fe:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=e79a8396-7299-4eb7-80e1-3dd6848e78cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:79:22:e9:8f:20:d5:28:67:ca:3e:40:76:55: c2:64:90:74:c7:a9:1d:cd:5a:4a:8f:7c:95:e8:09: d1:29:f2:31:f2:fc:33:23:4c:d4:83:fa:ed:c2:60: 5d:e3:20:79:b2:7c:92:16:19:8d:cb:b5:c0:d9:0f: 65:a3:82:ca:f7:90:2a:4c:df:5d:c0:4b:48:03:78: e8:15:a2:15:c9:c4:2c:1e:79:9f:9a:b2:33:69:55: bd:b6:c6:e5:9b:65:d7:84:bc:b5:92:e5:db:7f:ac: 46:0c:07:ee:f7:c5:3a:68:13:61:c5:c1:c6:d2:7d: 69:4b:95:26:d7:b1:44:de:78:ec:bf:68:d8:58:0e: 28:9a:2e:f7:93:bc:e5:1e:19:8c:24:07:97:be:25: b3:10:14:7f:9f:9f:9e:5f:8d:aa:49:79:ac:ef:c2: c1:5e:66:ae:26:11:af:04:e3:c0:26:26:39:69:a6: cd:fd:bb:1f:c5:7f:8d:8c:6f:7a:e9:f6:0a:a3:37: f4:3e:d4:02:6d:94:52:28:ee:6a:e4:80:3a:0a:70: 08:0c:f7:71:73:2f:7b:16:2a:f4:ed:0e:07:36:d7: d8:3d:54:b5:a4:a9:4f:ee:00:d5:95:9b:b9:14:90: d9:fb:1b:05:ca:92:4b:33:0d:39:f5:03:f3:f0:6e: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:26:D9:0F:DC:35:CE:0B:26:46:62:59:18:72:B4:4A:33:A5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:37:24:c7:b7:98:aa:4b:ed:a5:07:7a:2a:28:3f:f6:6d:39: bd:3c:cb:93:7a:38:e5:07:13:ce:32:24:4b:b4:50:57:04:d3: 88:0f:28:ae:93:ff:a2:00:4c:0a:09:3c:3f:58:df:25:d9:79: e5:fb:f5:7a:96:05:1e:f2:91:ff:02:91:d6:6f:66:e8:2c:aa: de:7e:41:23:25:64:0c:d5:7f:ae:7f:43:19:36:82:2b:c2:7b: 9c:18:b3:f7:e5:a7:d5:f2:97:76:8e:f7:ee:86:af:6a:4e:6d: 07:d4:62:14:7c:71:48:33:e7:d6:cc:2e:7c:2e:97:7c:c2:1c: 78:6c:b6:23:69:00:96:c9:23:2e:d3:67:18:ad:c8:d3:48:d1: f3:5d:3a:44:98:5b:70:1a:4a:6c:03:ca:b3:f2:8b:c1:55:44: 0b:83:a3:92:79:45:40:d6:76:45:e8:67:3c:eb:50:c4:32:23: 20:b9:17:2f:b9:46:2f:e8:d6:ab:c5:04:e4:76:3a:c1:98:dc: 4b:9c:c6:e0:40:6d:a2:99:8e:be:8c:85:e4:03:a8:fd:b7:57: f7:95:e0:39:f4:c9:db:0b:0c:67:4c:6e:5a:98:77:d1:ab:9c: 5c:1f:82:bd:17:5d:db:39:91:78:7a:e2:f4:15:3f:41:42:84: 43:74:3f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBezRKOzN2xb+4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTc5YTgzOTYtNzI5OS00ZWI3LTgwZTEtM2RkNjg0OGU3OGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nki6Y8g1Shnyj5AdlXCZJB0x6kdzVpKj3yV 6AnRKfIx8vwzI0zUg/rtwmBd4yB5snySFhmNy7XA2Q9lo4LK95AqTN9dwEtIA3jo FaIVycQsHnmfmrIzaVW9tsblm2XXhLy1kuXbf6xGDAfu98U6aBNhxcHG0n1pS5Um 17FE3njsv2jYWA4omi73k7zlHhmMJAeXviWzEBR/n5+eX42qSXms78LBXmauJhGv BOPAJiY5aabN/bsfxX+NjG966fYKozf0PtQCbZRSKO5q5IA6CnAIDPdxcy97Fir0 7Q4HNtfYPVS1pKlP7gDVlZu5FJDZ+xsFypJLMw059QPz8G7fUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClsJtkP3DXOCyZGYlkYcrRKM6VRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTM3YTBiZGYtNGJhMS0z MzliLWExNWUtZGJhNTAzZjBiOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc3JMe3mKpL7aUHeiooP/ZtOb08y5N6OOUHE84yJEu0UFcE04gPKK6T /6IATAoJPD9Y3yXZeeX79XqWBR7ykf8CkdZvZugsqt5+QSMlZAzVf65/Qxk2givC e5wYs/flp9Xyl3aO9+6Gr2pObQfUYhR8cUgz59bMLnwul3zCHHhstiNpAJbJIy7T ZxityNNI0fNdOkSYW3AaSmwDyrPyi8FVRAuDo5J5RUDWdkXoZzzrUMQyIyC5Fy+5 Ri/o1qvFBOR2OsGY3EucxuBAbaKZjr6MheQDqP23V/eV4Dn0ydsLDGdMblqYd9Gr nFwfgr0XXds5kXh64vQVP0FChEN0PzU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:00 2025 by rpki-client