$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa File: 6c19a38f-182b-3873-a381-6fafa80313dc.roa (raw, json) Hash identifier: w9otvbiuVyxSMGiBZUY4M2nkkocKHTXvMKPBKoTDNEU= Subject key identifier: 10:BE:15:0A:B6:97:D2:27:5A:A1:78:7C:53:81:65:3E:87:11:36:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494734027C1ED2B3DE9EA9B000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:34:02:7c:1e:d2:b3:de:9e:a9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=e6142732-400e-4f85-bbea-13eb22398467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:47:57:85:60:04:bc:77:e6:09:7e:23:cd: e8:ab:71:b9:ad:20:b0:e7:09:60:75:fa:61:ab:ae: 84:ee:7e:6d:70:d9:ef:6d:ac:11:89:42:d6:6b:0d: 52:f1:b8:af:07:fb:39:f9:5f:96:2f:22:37:89:c3: 7d:d6:36:99:4d:2c:1b:6c:1e:12:97:f6:a4:d3:15: eb:84:1d:02:ae:9a:5b:f9:28:ff:c0:90:5b:ae:2b: c4:66:c6:6a:f1:76:d8:d5:7c:6f:dd:2e:0b:16:e5: db:1c:dd:23:c2:98:1e:fa:4c:8b:e8:f1:cc:23:eb: 5f:99:8c:e0:bc:af:1b:36:19:4f:8c:c7:38:b5:db: ef:29:a1:05:ac:a9:f6:72:02:8d:d3:71:07:9a:38: 13:e1:b5:99:3e:48:b5:b6:bf:ce:d4:64:82:64:b8: 32:78:e0:c4:f2:05:a5:0f:27:00:3f:33:95:7b:e3: b7:94:0c:5c:b5:01:67:2b:e2:52:13:04:b3:df:6a: 83:10:63:ae:16:97:e5:46:0d:55:7e:2c:14:07:96: df:5c:02:91:7b:2a:01:72:4b:0f:cc:e4:4f:78:20: 09:ed:d8:1d:4b:a5:19:33:b8:7d:23:70:7a:52:dd: 1e:c2:fa:fe:89:a8:59:09:80:92:c1:9c:8e:5e:f8: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BE:15:0A:B6:97:D2:27:5A:A1:78:7C:53:81:65:3E:87:11:36:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8d:ec:5c:a2:ed:59:d3:dd:ab:d1:83:0a:66:cd:f1:40:7f: d6:44:1e:83:47:fd:9b:4c:7c:ed:86:25:20:fa:5a:46:50:b1: 78:1a:8c:14:9d:03:0f:e5:43:a4:de:81:4a:ec:9d:29:b7:26: a1:09:5f:94:cb:5f:1d:fe:10:f5:fc:44:1a:41:cd:f4:80:7a: 5c:db:13:ad:dd:55:f2:9f:a7:dd:fc:ec:73:06:82:38:8e:54: 3f:d4:54:b8:9a:21:0b:13:ed:0d:29:7d:5f:ad:ef:b5:4e:0a: 5e:16:de:c4:1d:6e:1b:9d:8f:de:1f:ac:3e:04:f0:b5:ff:93: 0d:5b:14:a6:dc:b2:dc:89:c7:12:9f:5a:04:d7:7d:57:45:85: 06:43:31:e7:cf:f1:c4:31:3d:0c:c4:91:ba:cc:40:25:89:18: ef:a9:b6:4d:28:26:a0:f1:06:2f:ad:a4:0e:b3:42:8f:7f:63: 56:4b:da:f7:9b:aa:8d:5f:2b:3b:39:f2:c8:9b:3c:98:f9:41: a7:00:d4:a1:e4:f8:92:85:de:0f:ed:4c:24:c7:f3:a9:51:e5: d8:1f:c7:74:0b:2f:0b:12:83:59:95:f7:eb:69:67:f3:57:e3: 3e:16:60:8c:2f:95:49:99:f8:06:5e:bd:3c:89:e0:68:ce:39: 24:e3:f3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNAJ8HtKz3p6psAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTYxNDI3MzItNDAwZS00Zjg1LWJiZWEtMTNlYjIyMzk4NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9HV4VgBLx35gl+I83oq3G5rSCw5wlgdfph q66E7n5tcNnvbawRiULWaw1S8bivB/s5+V+WLyI3icN91jaZTSwbbB4Sl/ak0xXr hB0Crppb+Sj/wJBbrivEZsZq8XbY1Xxv3S4LFuXbHN0jwpge+kyL6PHMI+tfmYzg vK8bNhlPjMc4tdvvKaEFrKn2cgKN03EHmjgT4bWZPki1tr/O1GSCZLgyeODE8gWl DycAPzOVe+O3lAxctQFnK+JSEwSz32qDEGOuFpflRg1VfiwUB5bfXAKReyoBcksP zORPeCAJ7dgdS6UZM7h9I3B6Ut0ewvr+iahZCYCSwZyOXvguWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC+FQq2l9InWqF4fFOBZT6HETa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmMxOWEzOGYtMTgyYi0z ODczLWEzODEtNmZhZmE4MDMxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiN7Fyi7VnT3avRgwpmzfFAf9ZEHoNH/ZtMfO2GJSD6WkZQsXgajBSd Aw/lQ6TegUrsnSm3JqEJX5TLXx3+EPX8RBpBzfSAelzbE63dVfKfp9387HMGgjiO VD/UVLiaIQsT7Q0pfV+t77VOCl4W3sQdbhudj94frD4E8LX/kw1bFKbcstyJxxKf WgTXfVdFhQZDMefP8cQxPQzEkbrMQCWJGO+ptk0oJqDxBi+tpA6zQo9/Y1ZL2veb qo1fKzs58sibPJj5QacA1KHk+JKF3g/tTCTH86lR5dgfx3QLLwsSg1mV9+tpZ/NX 4z4WYIwvlUmZ+AZevTyJ4GjOOSTj8xI= -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:20 2025 by rpki-client