$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: fG6rjnSAO4uUViHawvJM8HWPRcTyDiAEfWbZQoGPsF4= Subject key identifier: 0E:4B:9F:A8:6A:63:4A:41:BE:09:05:25:15:E8:A5:1E:CC:75:A2:10 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD3172F46ACDE12EB8000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:17:2f:46:ac:de:12:eb:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e1f40aec-7369-4344-a694-b5f8ab9ed83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:ca:e4:ff:48:79:01:40:10:7b:13:58:dc: b6:f0:e7:e7:e2:97:de:25:af:e2:2e:34:da:12:21: 4e:22:b0:b4:ab:bc:66:78:ed:1e:12:19:77:c1:f7: b9:e1:9a:12:1d:43:1f:26:c2:56:01:ef:75:5c:17: 18:6f:d6:9e:f2:8b:01:27:bc:62:c7:d6:0d:9d:e9: 12:7f:8c:a2:19:11:60:2b:d4:5a:23:25:c9:d0:6b: 18:e8:8a:82:85:6e:ea:1e:a8:f8:91:d4:3d:f6:4f: 1b:fb:a7:57:67:f7:4d:4f:f3:55:5c:ee:72:88:7e: a3:c3:59:d2:4c:31:a0:84:05:c0:e1:6a:a9:f2:35: df:b2:98:13:f3:c6:67:b9:20:e9:20:9a:bb:b1:63: 0e:df:e0:4e:e2:60:79:a0:9f:7d:0b:9e:c5:fb:a0: 2a:c9:55:19:8b:9b:7a:23:b9:3d:0c:43:97:0e:95: d2:96:99:47:1f:d4:98:e7:34:33:9c:2f:7e:87:3c: 5c:d8:34:15:cd:42:d4:a9:34:ab:92:91:70:2e:8d: e9:0f:01:3d:ba:cc:cd:89:af:93:75:15:c5:0c:4a: d7:76:d8:05:06:53:9e:31:04:43:53:3b:4e:6e:1e: c8:6b:9c:df:62:fa:ed:84:c2:24:b6:c5:d9:0b:15: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4B:9F:A8:6A:63:4A:41:BE:09:05:25:15:E8:A5:1E:CC:75:A2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:eb:dd:11:fc:2d:61:8c:a0:5b:36:90:18:2b:85:40:e2:ca: f6:a1:95:b4:a9:65:55:27:ed:99:49:37:8d:ea:a9:34:f2:b7: e0:13:3c:01:1a:b2:6e:aa:9f:11:67:93:e9:44:94:2a:1e:c7: 5d:49:32:76:78:f8:4c:49:2e:63:84:7f:14:47:00:f1:00:4e: 03:86:5e:a6:a4:a0:4d:e6:2e:88:41:36:b2:12:c5:fc:90:23: 5e:38:84:d5:b4:90:1d:0c:30:84:dc:72:f8:0d:f1:c1:da:62: 73:88:c4:34:19:bb:85:de:e5:8c:f9:e6:37:61:37:8f:ac:59: 64:c5:42:48:c1:c8:62:13:fe:73:07:87:59:04:0d:48:c5:64: 5b:94:86:7c:de:9b:32:84:e0:92:0e:79:61:38:9a:45:17:52: 65:bc:52:83:19:33:3a:99:29:72:e2:7f:b3:6c:ce:5d:b1:c7: 6d:48:f7:f9:03:9c:a9:c0:44:1c:a9:a0:43:a0:ca:9d:68:3e: 47:81:0b:a8:fd:9e:46:8d:f5:ec:b2:b9:b1:b7:09:6e:6d:ad: 93:73:bf:9b:5c:4e:93:47:b2:d5:01:84:90:73:8e:c7:33:8f: 85:90:e8:43:da:0e:bb:d4:f7:ca:f6:34:40:a7:cd:85:1f:df: a8:ca:f5:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9MXL0as3hLrgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTFmNDBhZWMtNzM2OS00MzQ0LWE2OTQtYjVmOGFiOWVkODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaHK5P9IeQFAEHsTWNy28Ofn4pfeJa/iLjTa EiFOIrC0q7xmeO0eEhl3wfe54ZoSHUMfJsJWAe91XBcYb9ae8osBJ7xix9YNnekS f4yiGRFgK9RaIyXJ0GsY6IqChW7qHqj4kdQ99k8b+6dXZ/dNT/NVXO5yiH6jw1nS TDGghAXA4Wqp8jXfspgT88ZnuSDpIJq7sWMO3+BO4mB5oJ99C57F+6AqyVUZi5t6 I7k9DEOXDpXSlplHH9SY5zQznC9+hzxc2DQVzULUqTSrkpFwLo3pDwE9uszNia+T dRXFDErXdtgFBlOeMQRDUztObh7Ia5zfYvrthMIktsXZCxX8OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5Ln6hqY0pBvgkFJRXopR7MdaIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrr3RH8LWGMoFs2kBgrhUDiyvahlbSpZVUn7ZlJN43qqTTyt+ATPAEa sm6qnxFnk+lElCoex11JMnZ4+ExJLmOEfxRHAPEATgOGXqakoE3mLohBNrISxfyQ I144hNW0kB0MMITccvgN8cHaYnOIxDQZu4Xe5Yz55jdhN4+sWWTFQkjByGIT/nMH h1kEDUjFZFuUhnzemzKE4JIOeWE4mkUXUmW8UoMZMzqZKXLif7Nszl2xx21I9/kD nKnARBypoEOgyp1oPkeBC6j9nkaN9eyyubG3CW5trZNzv5tcTpNHstUBhJBzjscz j4WQ6EPaDrvU98r2NECnzYUf36jK9bw= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:29 2025 by rpki-client