$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa File: 65c5f302-93d9-3b12-bfcb-d7313015deb9.roa (raw, json) Hash identifier: ipW2xLLNaa+n2N/rcnyq+r6BLS1MDiQRfMEJAEP9zs0= Subject key identifier: 5B:ED:7F:97:15:B8:E9:E9:CB:D2:89:C2:B8:10:0A:EC:5B:B6:4C:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D905F581714ED1B221DAD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:5f:58:17:14:ed:1b:22:1d:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=e37fd246-b17d-415e-80a5-0cc4740d7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:09:07:df:01:f9:64:73:5a:9d:bf:33:28: 0c:3f:7d:a4:8c:d4:a0:99:33:47:6a:03:a1:2b:ce: 29:dd:95:8f:34:68:03:d4:67:dc:42:17:0b:7d:fb: 97:86:c5:20:58:ca:39:7f:c0:3b:92:f9:3b:0b:43: eb:ff:60:8f:c8:70:72:82:ad:e7:c3:a4:7d:a4:f1: 96:ec:43:9b:82:ae:8d:6d:6d:8e:0a:bb:d5:f8:a9: fb:94:17:91:e4:76:8b:fd:1d:6a:ca:7c:9d:3a:f9: e2:f6:ec:47:34:0a:63:11:46:8e:a4:d1:ec:d7:70: 91:f1:08:65:fc:27:64:ea:8b:5a:de:26:cd:d7:27: 59:8a:89:9d:fe:24:95:56:79:c2:4e:22:54:80:0a: 05:35:c3:80:0b:0f:d6:59:36:c4:49:7b:42:1a:b2: 81:3d:49:38:67:d1:46:a2:5a:84:04:b2:66:92:90: cd:13:3f:d0:4d:43:27:9e:be:ef:3c:9b:9a:d9:24: d5:19:ab:e9:b9:f6:6a:86:f7:25:e8:76:e0:12:c1: c1:96:2c:6b:b0:88:71:ed:d5:21:a3:44:9a:41:59: 9a:24:5e:0b:dc:51:88:4a:ca:13:74:86:fc:c0:05: fa:6a:26:ef:c3:00:3e:13:01:60:d6:64:9b:98:5c: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:7F:97:15:B8:E9:E9:CB:D2:89:C2:B8:10:0A:EC:5B:B6:4C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a3:09:e9:d3:c2:9b:06:5f:04:7c:64:b1:be:2a:ed:6f:6d: c1:20:38:b8:1e:87:d1:a6:c6:3e:55:34:2d:70:c4:de:22:07: f6:b5:b9:ca:d4:72:47:1e:36:d3:9d:5b:c5:88:7d:33:db:40: 24:f3:34:05:9b:7d:89:5a:e4:7f:3f:a7:15:22:d1:ee:58:e7: e5:cb:a0:47:60:39:c2:ef:93:79:2c:4e:2b:a3:62:e9:32:65: 13:d1:91:f6:65:dc:af:11:4a:7c:bb:40:64:a9:d0:9e:78:12: e2:f8:0c:dc:12:74:d2:b5:1b:a9:e1:93:50:dd:18:52:0c:2c: 32:76:b0:0a:f4:a9:64:d9:78:43:99:36:d6:1b:6d:af:55:08: 09:a7:14:59:10:a6:37:07:88:de:46:a3:e5:57:d6:22:48:26: 79:01:2b:ba:d6:0c:e3:4d:5b:3a:61:d6:8a:68:3a:1e:82:97: d5:0b:56:3c:57:03:1a:fe:ff:17:6b:eb:d0:0f:c2:74:19:b9: 72:c3:4e:fc:76:56:2a:14:52:29:07:af:9f:e7:50:bf:36:e0: 40:81:ea:e2:76:f7:d4:74:b1:af:de:1b:1b:1c:c7:50:56:8b: 9a:3a:aa:5d:84:80:e4:06:99:aa:a7:ce:6e:2c:b9:f3:fa:b4: 5e:14:95:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkF9YFxTtGyIdrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTM3ZmQyNDYtYjE3ZC00MTVlLTgwYTUtMGNjNDc0MGQ3YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTsJB98B+WRzWp2/MygMP32kjNSgmTNHagOh K84p3ZWPNGgD1GfcQhcLffuXhsUgWMo5f8A7kvk7C0Pr/2CPyHBygq3nw6R9pPGW 7EObgq6NbW2OCrvV+Kn7lBeR5HaL/R1qynydOvni9uxHNApjEUaOpNHs13CR8Qhl /Cdk6ota3ibN1ydZiomd/iSVVnnCTiJUgAoFNcOACw/WWTbESXtCGrKBPUk4Z9FG olqEBLJmkpDNEz/QTUMnnr7vPJua2STVGavpufZqhvcl6HbgEsHBlixrsIhx7dUh o0SaQVmaJF4L3FGISsoTdIb8wAX6aibvwwA+EwFg1mSbmFzxqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvtf5cVuOnpy9KJwrgQCuxbtkysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjVjNWYzMDItOTNkOS0z YjEyLWJmY2ItZDczMTMwMTVkZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOjCenTwpsGXwR8ZLG+Ku1vbcEgOLgeh9Gmxj5VNC1wxN4iB/a1ucrU ckceNtOdW8WIfTPbQCTzNAWbfYla5H8/pxUi0e5Y5+XLoEdgOcLvk3ksTiujYuky ZRPRkfZl3K8RSny7QGSp0J54EuL4DNwSdNK1G6nhk1DdGFIMLDJ2sAr0qWTZeEOZ NtYbba9VCAmnFFkQpjcHiN5Go+VX1iJIJnkBK7rWDONNWzph1opoOh6Cl9ULVjxX Axr+/xdr69APwnQZuXLDTvx2VioUUikHr5/nUL824ECB6uJ299R0sa/eGxscx1BW i5o6ql2EgOQGmaqnzm4sufP6tF4UlaA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:02 2025 by rpki-client