$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa File: 735f96b3-047e-360f-bb8a-41e8e0af2ace.roa (raw, json) Hash identifier: QKjzfs//N2fIzOhDTlrSAndRwWMuDTzIADc5piVrcic= Subject key identifier: DA:13:B2:92:1E:1A:94:5A:A4:3E:14:17:56:5A:46:2D:59:FC:85:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EDC1D83962E250098A30 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ed:c1:d8:39:62:e2:50:09:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=e508c18f-f989-4f33-b6e1-c6c2f8180b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:b1:47:bc:cb:5a:3b:4a:8b:85:1d:8b:cf: ca:52:ec:b8:da:2b:91:43:f0:75:58:05:6d:26:a5: f5:bd:ae:4c:6b:34:06:10:18:e2:33:7d:6c:56:34: 28:15:b2:46:1e:60:60:dc:f0:e7:8d:5a:bb:db:1c: c4:34:29:b8:a3:f3:0d:fc:d1:43:c7:46:bb:43:c6: 79:50:87:3b:90:39:72:b0:fd:cc:97:08:11:14:ec: 6d:2e:95:9a:27:ab:d6:3f:f9:00:25:fc:4f:90:fe: d0:94:16:d5:f7:f2:8f:a0:b3:dd:38:c4:d0:87:01: aa:e4:52:1a:f6:14:53:e0:e4:5d:78:79:68:9c:15: 07:6a:c7:d1:72:3b:ae:41:e5:e9:b8:da:01:af:67: a3:4e:47:76:21:9a:ab:00:d7:48:75:6f:d0:66:3c: 50:72:39:47:f1:57:24:5b:d2:fa:37:69:70:60:b4: 98:55:a2:d6:8a:b9:f6:71:10:13:32:74:c8:c8:f6: 93:ac:04:58:3b:0b:31:89:19:14:70:a8:fc:33:a8: 5c:d6:f8:21:45:26:51:c3:47:b7:78:e2:d7:ec:37: e9:5f:ea:46:e4:20:35:15:c5:52:e4:aa:cf:e9:fa: 1d:b4:79:6b:68:fe:ad:c8:b9:5f:81:7b:c3:0b:05: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:B2:92:1E:1A:94:5A:A4:3E:14:17:56:5A:46:2D:59:FC:85:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0f:d5:c7:84:c2:d9:2f:d2:df:b1:05:c9:ee:1e:73:a3:42: 93:90:cb:08:4c:66:cc:e5:16:9e:97:c4:ab:6b:78:2d:cc:09: 2f:b3:3d:d1:b9:0a:fe:4b:3f:b0:27:82:a3:6c:bd:1a:08:aa: 28:ab:a5:7b:e4:97:95:51:2a:b4:7c:c0:28:28:a7:c0:3e:f2: 23:b8:5d:d8:1e:9e:30:43:ae:82:53:7e:39:6f:26:1d:b0:44: c1:ee:ba:3c:e1:66:fa:f3:bf:7a:11:ce:08:93:52:26:0b:65: 21:6b:3b:c0:07:59:a8:4b:fe:bf:99:06:d7:55:4d:cb:bb:c4: 5f:e1:7a:e6:00:ec:ca:b8:db:38:05:c4:15:1b:e6:21:11:a7: 9b:06:3d:ac:b6:e7:15:8f:1e:3c:97:72:4f:19:c3:16:42:9d: ac:56:67:2d:c2:25:00:4e:82:23:54:2f:32:e9:d6:d6:6b:c5: ce:50:87:df:2c:7c:39:b1:2b:66:53:9a:45:91:9e:a7:35:f4: c2:9c:9f:ce:1a:c0:51:06:bb:ee:0c:13:88:09:9a:5b:5d:63: f7:08:2a:63:8d:26:ec:88:5b:91:dd:2a:a3:5b:8b:fd:ba:7e: 45:2b:65:19:3e:ad:eb:ba:0c:ad:25:9f:33:2b:86:be:de:f1: 62:c0:b8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBe3B2Dli4lAJijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTUwOGMxOGYtZjk4OS00ZjMzLWI2ZTEtYzZjMmY4MTgwYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPuxR7zLWjtKi4Udi8/KUuy42iuRQ/B1WAVt JqX1va5MazQGEBjiM31sVjQoFbJGHmBg3PDnjVq72xzENCm4o/MN/NFDx0a7Q8Z5 UIc7kDlysP3MlwgRFOxtLpWaJ6vWP/kAJfxPkP7QlBbV9/KPoLPdOMTQhwGq5FIa 9hRT4ORdeHlonBUHasfRcjuuQeXpuNoBr2ejTkd2IZqrANdIdW/QZjxQcjlH8Vck W9L6N2lwYLSYVaLWirn2cRATMnTIyPaTrARYOwsxiRkUcKj8M6hc1vghRSZRw0e3 eOLX7DfpX+pG5CA1FcVS5KrP6fodtHlraP6tyLlfgXvDCwVkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoTspIeGpRapD4UF1ZaRi1Z/IX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzM1Zjk2YjMtMDQ3ZS0z NjBmLWJiOGEtNDFlOGUwYWYyYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgP1ceEwtkv0t+xBcnuHnOjQpOQywhMZszlFp6XxKtreC3MCS+zPdG5 Cv5LP7AngqNsvRoIqiirpXvkl5VRKrR8wCgop8A+8iO4XdgenjBDroJTfjlvJh2w RMHuujzhZvrzv3oRzgiTUiYLZSFrO8AHWahL/r+ZBtdVTcu7xF/heuYA7Mq42zgF xBUb5iERp5sGPay25xWPHjyXck8ZwxZCnaxWZy3CJQBOgiNULzLp1tZrxc5Qh98s fDmxK2ZTmkWRnqc19MKcn84awFEGu+4ME4gJmltdY/cIKmONJuyIW5HdKqNbi/26 fkUrZRk+reu6DK0lnzMrhr7e8WLAuH0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:50 2025 by rpki-client