$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa File: 6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa (raw, json) Hash identifier: g4qcWCRAi/MxtB9APmZYXWueyVnOcdiMQsO/QUD5HqU= Subject key identifier: C9:B2:E7:A1:8E:60:E9:19:08:8C:28:59:18:AB:D6:09:4D:88:D2:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848B35B70721F7AB720EB26BA40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:72:1f:7a:b7:20:eb:26:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=01ec0dfc-20be-4744-8153-09e6be568416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:3f:62:86:52:4d:d1:05:03:1b:ae:15:31: e0:90:7a:d9:62:4c:c3:81:de:c3:26:12:bc:60:0b: a1:ff:5b:06:64:42:93:dd:a7:61:7d:22:a0:b4:86: da:3b:b9:f2:41:4d:dd:28:fb:fc:72:f0:d7:32:aa: c0:48:22:f7:44:fb:cb:49:2e:79:84:e1:12:ae:38: cc:81:05:1b:7c:79:14:57:e7:68:c2:df:1d:59:10: a9:be:cd:6b:9f:9e:b8:e5:57:e0:5e:43:18:2e:c2: 55:4f:a2:a9:52:ce:75:bd:ef:78:69:5d:24:8a:1c: 95:a5:56:6d:85:3f:a7:06:ee:49:bf:88:be:94:b9: 7d:04:96:a6:00:b9:1f:30:99:53:34:27:8a:1c:da: d0:46:17:d2:76:55:31:ae:a8:56:c9:26:c7:c0:8e: cd:0f:bc:1d:47:bc:35:7a:9c:5e:73:55:4a:87:56: 61:c5:d5:10:c4:04:f4:14:c7:b6:87:e1:25:68:0e: c9:cd:24:9c:b4:bd:bc:12:f9:96:4a:23:5b:69:0e: 20:26:7d:11:b3:ad:2b:ab:d5:e8:f1:cc:23:6e:86: 72:af:51:ee:2e:d1:0d:9d:c6:94:23:69:19:b5:f5: a4:1f:fd:ca:ec:c0:af:60:49:a4:eb:88:01:9c:2b: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:E7:A1:8E:60:E9:19:08:8C:28:59:18:AB:D6:09:4D:88:D2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:25:79:0d:fc:8e:ca:bf:eb:32:79:f3:f8:b3:7d:34:39:5b: c7:aa:e2:9c:a8:37:f7:a1:ff:09:30:01:f2:f2:62:89:c9:a2: 21:09:c6:c3:9e:ed:1c:13:47:ea:a9:19:c4:68:51:a1:b7:9e: 70:d2:c8:f9:5b:b7:ec:fd:11:0e:55:69:d5:31:ce:59:5e:8f: be:a9:4c:97:e4:b6:95:e5:42:09:03:e8:1f:09:27:81:bb:a1: 8d:38:73:c9:83:d0:4c:90:fc:9c:6a:88:ca:d2:c5:3d:d2:69: 68:9b:4e:f4:c6:03:fc:d9:f7:41:ee:dd:57:d8:f8:d1:c7:d3: a7:45:03:d5:ee:91:ee:20:30:1c:f8:48:ea:fd:48:47:b5:0a: 78:bd:2a:4a:76:c2:ef:a0:8c:c0:dc:da:90:57:95:0e:87:c4: 12:e4:41:75:e4:b8:02:bf:e6:4c:c1:cf:1b:e0:1a:4a:ee:5a: cd:f9:08:19:07:b1:d7:b5:e0:47:eb:d9:a7:99:9c:4b:d6:05: 37:c7:fe:b7:00:d6:d2:a0:a7:18:f5:a1:60:4e:06:b5:e4:e8: 1e:9d:3f:17:72:ea:28:a9:45:86:b8:02:46:b6:81:56:cf:98: f4:c1:cb:47:08:61:10:03:df:6d:92:1b:22:5e:2a:3e:ae:f3: e6:dd:36:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3ByH3q3IOsmukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MDFlYzBkZmMtMjBiZS00NzQ0LTgxNTMtMDllNmJlNTY4NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3k/YoZSTdEFAxuuFTHgkHrZYkzDgd7DJhK8 YAuh/1sGZEKT3adhfSKgtIbaO7nyQU3dKPv8cvDXMqrASCL3RPvLSS55hOESrjjM gQUbfHkUV+dowt8dWRCpvs1rn5645VfgXkMYLsJVT6KpUs51ve94aV0kihyVpVZt hT+nBu5Jv4i+lLl9BJamALkfMJlTNCeKHNrQRhfSdlUxrqhWySbHwI7ND7wdR7w1 epxec1VKh1ZhxdUQxAT0FMe2h+ElaA7JzSSctL28EvmWSiNbaQ4gJn0Rs60rq9Xo 8cwjboZyr1HuLtENncaUI2kZtfWkH/3K7MCvYEmk64gBnCsXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmy56GOYOkZCIwoWRir1glNiNJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg5OWFjYmQtNmNjMS0z MDVhLWJhYzAtMDhmZTA5ZDVlM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwleQ38jsq/6zJ58/izfTQ5W8eq4pyoN/eh/wkwAfLyYonJoiEJxsOe 7RwTR+qpGcRoUaG3nnDSyPlbt+z9EQ5VadUxzllej76pTJfktpXlQgkD6B8JJ4G7 oY04c8mD0EyQ/JxqiMrSxT3SaWibTvTGA/zZ90Hu3VfY+NHH06dFA9Xuke4gMBz4 SOr9SEe1Cni9Kkp2wu+gjMDc2pBXlQ6HxBLkQXXkuAK/5kzBzxvgGkruWs35CBkH sde14Efr2aeZnEvWBTfH/rcA1tKgpxj1oWBOBrXk6B6dPxdy6iipRYa4Aka2gVbP mPTBy0cIYRAD322SGyJeKj6u8+bdNpQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:45 2025 by rpki-client