$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa File: 5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa (raw, json) Hash identifier: 7Az4IId1VgNSXixc0lLsxSnHADJXS7WOIPEl+Q5GAnU= Subject key identifier: F6:93:23:21:4C:75:3A:F7:FD:77:D7:E6:63:F7:76:DC:D4:C4:30:C9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC362439A05D491D0E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:36:24:39:a0:5d:49:1d:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=2d8f2e14-d7b1-451b-9327-70c1d15c43ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:06:ac:fb:5a:2a:71:80:c7:f0:f9:47:a1: 18:11:23:20:47:f3:7f:72:f3:83:06:19:b8:b8:b4: 7f:7b:3c:bc:a0:bd:24:05:df:25:ae:d0:0a:68:7d: bd:2a:b2:cc:02:ff:55:c0:37:b0:e9:4a:0f:94:2a: e9:03:f1:01:67:ce:c1:88:20:a9:31:ab:90:c5:80: 5c:15:20:b5:fa:34:46:b4:b1:a2:9b:56:3b:8d:75: 36:a9:c3:1b:3c:66:97:6c:89:99:fa:27:d9:07:19: f9:2e:75:a7:80:f4:6c:88:90:36:3e:c2:95:4b:b6: ae:80:91:e5:b9:9e:14:ca:22:4f:f3:29:de:dc:0d: b3:8a:0b:df:b7:1c:74:66:a4:4e:a8:b9:02:67:57: 54:77:1f:61:00:34:13:a8:f2:15:b0:58:f9:59:7f: 40:fa:ef:ae:68:08:80:06:67:46:2e:dc:81:be:24: ee:87:4f:f4:9e:6e:6d:cb:c9:47:3e:78:6c:1a:69: 42:75:d7:93:62:76:bb:71:99:d5:69:75:e8:81:d0: a9:ce:6a:34:02:60:76:ef:a0:87:91:91:49:95:bd: 30:52:fd:3d:d2:fe:cf:5b:c5:82:f5:1b:73:c4:0c: e9:cb:ef:b7:1a:75:11:00:a2:09:c4:81:bd:b6:b9: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:23:21:4C:75:3A:F7:FD:77:D7:E6:63:F7:76:DC:D4:C4:30:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:49:1e:27:fe:35:1e:5c:f9:4b:45:78:7d:53:7a:a2:40:06: 15:e6:09:18:73:88:c6:d7:f9:50:57:84:77:93:50:0c:af:16: 67:28:58:e2:32:ae:97:15:60:4e:36:c6:07:c0:03:d4:f0:48: 05:b4:b0:3e:21:75:08:c1:ee:c9:32:8c:f4:f3:42:57:12:7d: f1:89:f6:7f:af:57:59:d3:14:60:2d:ef:0f:9e:dd:81:a2:a3: fe:f6:a4:53:f0:58:ef:ae:0c:7a:ce:26:89:80:5c:13:64:e4: 42:02:cb:ac:fc:00:bb:d2:c2:ad:aa:b3:0e:37:8e:a8:18:e1: 17:ba:27:f7:76:f4:66:cb:7d:f4:dc:64:b3:07:e9:d3:a8:4b: 3a:07:98:bb:d0:5e:72:2c:d3:64:65:66:c6:70:5d:9d:b0:b6: 2a:1a:06:e4:e7:df:08:72:59:e5:7e:0d:c4:1a:4c:5b:70:3d: d3:42:bd:74:1d:77:8c:89:8c:72:5b:86:4e:3a:37:de:65:ea: 9d:75:4a:5f:01:67:c1:6e:d8:77:62:19:ad:c6:4a:e4:24:35: 22:83:a6:10:26:d8:71:44:e5:41:99:ea:e2:2b:75:a6:14:a4: 84:67:7c:72:9f:1c:d8:50:9a:29:72:5c:53:8b:d5:3b:58:b9: 2a:7f:ea:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBew2JDmgXUkdDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk MmQ4ZjJlMTQtZDdiMS00NTFiLTkzMjctNzBjMWQxNWM0M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsGrPtaKnGAx/D5R6EYESMgR/N/cvODBhm4 uLR/ezy8oL0kBd8lrtAKaH29KrLMAv9VwDew6UoPlCrpA/EBZ87BiCCpMauQxYBc FSC1+jRGtLGim1Y7jXU2qcMbPGaXbImZ+ifZBxn5LnWngPRsiJA2PsKVS7augJHl uZ4UyiJP8yne3A2zigvftxx0ZqROqLkCZ1dUdx9hADQTqPIVsFj5WX9A+u+uaAiA BmdGLtyBviTuh0/0nm5ty8lHPnhsGmlCddeTYna7cZnVaXXogdCpzmo0AmB276CH kZFJlb0wUv090v7PW8WC9RtzxAzpy++3GnURAKIJxIG9trmVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaTIyFMdTr3/XfX5mP3dtzUxDDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ2YTU3NGEtZTZiMC0z M2NkLTk0YjQtMDM4MTZiODRmZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFJHif+NR5c+UtFeH1TeqJABhXmCRhziMbX+VBXhHeTUAyvFmcoWOIy rpcVYE42xgfAA9TwSAW0sD4hdQjB7skyjPTzQlcSffGJ9n+vV1nTFGAt7w+e3YGi o/72pFPwWO+uDHrOJomAXBNk5EICy6z8ALvSwq2qsw43jqgY4Re6J/d29GbLffTc ZLMH6dOoSzoHmLvQXnIs02RlZsZwXZ2wtioaBuTn3whyWeV+DcQaTFtwPdNCvXQd d4yJjHJbhk46N95l6p11Sl8BZ8Fu2HdiGa3GSuQkNSKDphAm2HFE5UGZ6uIrdaYU pIRnfHKfHNhQmilyXFOL1TtYuSp/6sw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:26 2025 by rpki-client