$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa File: 72d9f07c-a11c-33df-ab2e-319967d0580d.roa (raw, json) Hash identifier: 3ZXk/ZXrPCQZzwOU6q4MR81kSKoWvLXi0/byLB9BMvE= Subject key identifier: 29:9C:42:71:2A:4F:AB:57:2D:8E:6E:FD:D0:9F:F2:98:72:FF:74:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D905F94C5FDF288F0DABA20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:5f:94:c5:fd:f2:88:f0:da:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=d55256af-5454-4a9c-8bb6-5249d66da520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:bf:4a:c6:39:51:5b:c5:80:b6:ba:8d:51: 01:1a:73:d2:50:b7:90:6a:71:17:b0:f4:39:47:4d: 29:54:d2:33:70:5b:5b:f1:e0:ec:92:09:d9:68:cc: 5c:dc:04:ed:fb:f6:fd:dc:1f:4f:41:e9:03:74:f0: ca:31:fb:a9:d8:84:39:15:d6:d2:94:8c:e7:8e:bb: 70:c3:73:3d:22:f9:e2:ed:f7:3b:8c:22:aa:db:d0: 47:5c:45:ce:7f:53:cf:15:87:3d:0d:b6:3a:fa:d0: 46:2a:e6:13:dc:3c:57:80:64:a3:bd:b2:87:bb:38: cd:0a:44:5e:69:b3:9f:0e:ab:1b:54:ac:b7:62:76: 91:79:c2:c1:61:97:66:a2:96:13:d7:1f:7d:e1:30: 2f:b1:46:a0:67:a5:a6:8a:3f:d1:7c:c9:7b:24:71: ab:c4:57:18:58:96:2f:41:5c:c7:25:33:92:e1:7d: f7:ed:8f:86:0f:8e:54:37:9e:bd:dd:8e:62:29:14: 7a:3a:6d:0c:d3:21:c7:18:96:82:60:d3:ed:04:99: cd:5b:fd:6b:68:26:ec:c9:c4:ad:b7:c6:ed:b5:a4: f3:88:3b:c1:d2:08:a7:94:26:15:04:eb:9f:40:06: 8c:b6:8e:9b:ea:f0:34:d4:f9:b2:86:11:c4:dd:ad: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:42:71:2A:4F:AB:57:2D:8E:6E:FD:D0:9F:F2:98:72:FF:74:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:de:59:95:ec:cf:8d:94:da:f8:8e:ef:72:c3:65:44:8b:3e: 8d:54:c7:25:98:27:fe:12:68:5e:f6:75:83:e1:03:76:19:e6: 06:6e:e8:4b:ff:ef:35:a9:12:06:6c:f0:42:5d:24:d2:d5:8a: b6:ea:cb:c7:a5:fe:66:72:58:76:90:d8:0a:61:1d:6a:17:65: 98:e9:c7:ee:34:0f:0e:6c:2d:76:9c:35:26:55:7a:55:ea:24: 82:47:58:d5:c8:fb:e2:08:98:a8:82:94:9b:23:f8:5e:5b:97: 23:e4:a0:25:e4:5c:27:d1:e6:7a:2d:7b:cd:87:f1:56:ca:1b: d6:10:3f:11:f9:84:3f:91:63:cc:69:20:fb:ac:27:87:c5:ea: 81:84:f8:80:ad:bc:57:c9:c4:77:f9:a8:c9:4c:cd:d9:6b:31: cf:96:93:1b:91:6d:12:c5:85:08:c3:ae:c5:4c:21:69:dc:2a: ae:68:9e:0b:ad:65:1a:72:08:dc:06:aa:62:60:85:49:ab:d5: 52:36:c4:12:52:c2:60:4f:7c:ad:6e:88:07:de:03:ba:28:60: 34:6d:15:ea:33:2a:5d:cb:6b:46:ab:48:dd:79:3d:36:09:3a: 52:0c:eb:01:c8:ac:f0:f6:31:4d:0a:89:be:a5:ec:1c:f5:8c: d2:08:5d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkF+Uxf3yiPDauiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDU1MjU2YWYtNTQ1NC00YTljLThiYjYtNTI0OWQ2NmRhNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/a/SsY5UVvFgLa6jVEBGnPSULeQanEXsPQ5 R00pVNIzcFtb8eDskgnZaMxc3ATt+/b93B9PQekDdPDKMfup2IQ5FdbSlIznjrtw w3M9Ivni7fc7jCKq29BHXEXOf1PPFYc9DbY6+tBGKuYT3DxXgGSjvbKHuzjNCkRe abOfDqsbVKy3YnaRecLBYZdmopYT1x994TAvsUagZ6Wmij/RfMl7JHGrxFcYWJYv QVzHJTOS4X337Y+GD45UN5693Y5iKRR6Om0M0yHHGJaCYNPtBJnNW/1raCbsycSt t8bttaTziDvB0ginlCYVBOufQAaMto6b6vA01PmyhhHE3a3QSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmcQnEqT6tXLY5u/dCf8phy/3SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJkOWYwN2MtYTExYy0z M2RmLWFiMmUtMzE5OTY3ZDA1ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCETMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3eWZXsz42U2viO73LDZUSLPo1UxyWYJ/4SaF72dYPhA3YZ5gZu6Ev/ 7zWpEgZs8EJdJNLVirbqy8el/mZyWHaQ2AphHWoXZZjpx+40Dw5sLXacNSZVelXq JIJHWNXI++IImKiClJsj+F5blyPkoCXkXCfR5note82H8VbKG9YQPxH5hD+RY8xp IPusJ4fF6oGE+ICtvFfJxHf5qMlMzdlrMc+WkxuRbRLFhQjDrsVMIWncKq5ongut ZRpyCNwGqmJghUmr1VI2xBJSwmBPfK1uiAfeA7ooYDRtFeozKl3La0arSN15PTYJ OlIM6wHIrPD2MU0Kib6l7Bz1jNIIXdE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:15 2025 by rpki-client