$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa File: 7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa (raw, json) Hash identifier: SH4p1Z2sDVcsj3oHEScCHeRQdwfpd3z0Dse4ZUjqtmQ= Subject key identifier: 28:10:EE:28:18:86:AF:92:E0:47:2C:50:E7:E3:E0:F0:24:31:58:36 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D9060730C6F58B7EA66BC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.157.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:60:73:0c:6f:58:b7:ea:66:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=6a8b9db5-58ba-4637-b6d9-30cade220f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:e4:83:ed:2b:58:da:18:75:d0:56:48:17: fd:dc:e8:a9:19:2c:ef:ba:00:45:4f:e1:4b:1b:7a: 2b:f5:18:38:c7:26:ec:cf:3a:0c:a2:8c:8c:a4:d3: 91:1d:ad:cf:cc:b4:cd:9c:a0:b0:c1:3f:f8:af:f1: ce:f7:90:94:44:e0:e1:bb:c2:b4:2e:a3:0a:24:3b: 30:a7:5b:30:56:cd:c3:4d:b8:ad:6b:9a:16:3f:22: 50:59:4e:73:03:04:28:c1:a8:f2:2c:86:b8:52:66: 4d:0a:02:bf:2d:69:5e:5a:3d:27:05:c3:d5:35:82: 1a:f8:a8:a5:02:6a:07:7b:4b:ac:67:11:82:9d:df: b8:cf:98:e4:34:f1:ba:05:20:33:16:78:86:c5:e3: 21:02:28:c2:1a:29:7e:17:91:a0:9a:c5:dd:0f:2f: c6:0e:4d:38:00:14:14:18:7e:8f:32:0a:c2:45:3f: 5f:80:f4:4f:6a:5d:7a:48:12:1e:00:61:78:e8:c9: 4c:be:fb:73:e4:f6:50:2e:ba:b4:48:7a:3d:27:28: f8:2a:a1:05:20:ef:67:ee:24:d2:3c:ba:71:04:b8: a5:94:ed:90:77:ff:a5:fc:8a:f9:a9:a7:88:44:26: 22:a6:82:07:99:10:a8:66:ef:b0:64:c0:0e:a9:4f: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:EE:28:18:86:AF:92:E0:47:2C:50:E7:E3:E0:F0:24:31:58:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:09:7f:ab:23:e2:6d:14:b8:f8:be:8a:99:04:17:f8:28:c7: 5d:fa:80:c4:8c:c1:8e:71:9f:1b:ee:ae:ef:51:1c:8d:7b:ee: b6:04:67:0f:3f:4f:db:eb:94:f8:ed:95:f3:4d:ea:1d:57:2d: fd:41:13:f6:fe:99:9c:9d:e4:59:aa:fe:ae:c0:4f:b7:58:fc: 96:e3:69:bd:53:15:31:44:40:d1:12:28:9d:5a:f0:16:07:3b: d0:93:69:51:52:15:dd:bc:59:5a:17:60:6e:ae:c8:ae:35:ce: bd:53:c4:ea:4c:d1:63:bc:21:51:78:12:f1:ac:f9:92:27:a4: 14:4d:13:9f:06:6e:d1:3d:eb:04:51:fd:01:bd:96:83:ed:cd: 25:1b:54:d6:0d:e0:b3:9c:d4:83:ad:35:92:f6:5e:8a:af:b0: 15:3d:1d:24:31:e0:63:19:53:50:0b:8f:11:73:f5:0d:85:66: 14:2a:46:b8:30:92:7e:b5:eb:2e:00:4a:08:83:d9:4e:41:da: f3:b6:74:35:af:17:27:be:81:93:6f:bc:63:0f:66:e5:7d:bf: ef:1b:be:0c:a2:0e:2c:41:ed:b5:b5:67:f8:f8:34:6d:07:19: 41:c8:d5:d7:ab:d2:ed:e6:be:84:49:c2:8b:15:5f:37:bb:bc: 61:76:11:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGBzDG9Yt+pmvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmE4YjlkYjUtNThiYS00NjM3LWI2ZDktMzBjYWRlMjIwZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58vkg+0rWNoYddBWSBf93OipGSzvugBFT+FL G3or9Rg4xybszzoMooyMpNORHa3PzLTNnKCwwT/4r/HO95CURODhu8K0LqMKJDsw p1swVs3DTbita5oWPyJQWU5zAwQowajyLIa4UmZNCgK/LWleWj0nBcPVNYIa+Kil AmoHe0usZxGCnd+4z5jkNPG6BSAzFniGxeMhAijCGil+F5GgmsXdDy/GDk04ABQU GH6PMgrCRT9fgPRPal16SBIeAGF46MlMvvtz5PZQLrq0SHo9Jyj4KqEFIO9n7iTS PLpxBLillO2Qd/+l/Ir5qaeIRCYipoIHmRCoZu+wZMAOqU8ZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgQ7igYhq+S4EcsUOfj4PAkMVg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2E3YzNlNmQtMWY5YS0z ZTBhLWFmYTktZjhjOTM4MGJkNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUJf6sj4m0UuPi+ipkEF/gox136gMSMwY5xnxvuru9RHI177rYEZw8/ T9vrlPjtlfNN6h1XLf1BE/b+mZyd5Fmq/q7AT7dY/Jbjab1TFTFEQNESKJ1a8BYH O9CTaVFSFd28WVoXYG6uyK41zr1TxOpM0WO8IVF4EvGs+ZInpBRNE58GbtE96wRR /QG9loPtzSUbVNYN4LOc1IOtNZL2XoqvsBU9HSQx4GMZU1ALjxFz9Q2FZhQqRrgw kn616y4ASgiD2U5B2vO2dDWvFye+gZNvvGMPZuV9v+8bvgyiDixB7bW1Z/j4NG0H GUHI1der0u3mvoRJwosVXze7vGF2EaE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:52 2025 by rpki-client