$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa File: 7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa (raw, json) Hash identifier: wOY0e94RJxXKSML0+saDKDw+Ddo22wNc5wAo07mW3dM= Subject key identifier: CE:51:B4:7D:E0:2C:57:0B:FE:A7:DF:4C:3B:59:0E:C7:94:56:FF:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328583DBF5474A85F8451D8CCC72700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa Signing time: Fri 29 Apr 2022 12:00:00 +0000 ROA not before: Fri 29 Apr 2022 12:00:00 +0000 ROA not after: Fri 08 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.157.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:bf:54:74:a8:5f:84:51:d8:cc:c7:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 29 12:00:00 2022 GMT Not After : Mar 8 05:00:00 2030 GMT Subject: CN=efcb9e36-cc0e-4e5f-9599-0f4fe9ca87f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:d5:ca:40:f8:ab:5c:7c:1f:0b:2d:e1:21: 9b:7f:59:66:b9:f9:7a:e4:6b:51:63:fc:c4:df:81: f8:c4:a4:f1:66:82:5b:3b:38:97:00:eb:bd:1b:b3: 72:5d:ab:bf:f5:52:a8:8b:2f:3e:10:86:6f:ba:4a: 7b:0e:44:43:91:cb:ee:ef:ce:86:34:32:f4:ac:86: 65:c3:08:cd:ba:a6:9b:77:ab:b0:fc:30:bd:68:f1: 8d:25:d5:11:89:24:4d:a3:f4:d4:03:fa:6e:92:6c: cf:76:c7:1f:a0:b0:1b:b7:f7:d8:79:c0:45:28:c2: ec:e0:86:d1:3e:7a:6b:2e:61:2c:05:5d:c2:ff:d1: 07:09:68:cf:24:b3:13:65:73:01:ba:9b:a2:f5:68: 0c:35:56:7a:13:b3:b6:33:65:5d:1e:af:f0:c3:d2: 79:fa:33:3f:69:95:16:3b:26:c4:55:95:33:12:77: fa:05:ca:4c:33:e1:95:6d:ce:4c:a6:32:bf:28:9f: fb:ca:f0:10:fb:4a:9f:56:ba:ec:66:fb:ac:48:7a: 89:f8:a8:ba:bd:28:05:1e:3a:1c:c0:9f:7d:64:d3: f9:56:b2:a1:f2:b3:a9:3d:85:e4:df:84:a2:bd:02: 92:4b:a0:82:40:25:a0:79:07:0a:cf:74:5b:c6:bd: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:51:B4:7D:E0:2C:57:0B:FE:A7:DF:4C:3B:59:0E:C7:94:56:FF:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bc6bce8-474a-30cf-ad15-31c9267ad4e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f0:2f:fb:2b:75:93:a8:3d:48:63:8c:0d:fd:72:5b:e4:d8: d0:d8:c2:63:14:e4:e0:8c:08:d2:c1:d9:9f:07:b0:93:8c:ad: f1:b6:82:e5:c7:9f:a7:a2:42:49:55:fb:01:cc:22:67:6b:56: 95:6b:0b:67:e5:e1:7b:1c:21:cb:75:c4:17:d8:1a:25:20:0a: f5:e6:2f:25:90:74:1a:2a:4b:ff:1d:53:76:63:9e:64:a4:6c: 2f:a4:bd:3f:4e:a5:bf:c5:e4:72:2f:ff:0d:22:d7:f5:d6:9e: 8a:ca:99:37:19:85:ef:ea:fd:35:f7:d4:7b:a5:09:f1:f8:fe: 39:f1:e9:ca:7b:21:00:c3:51:0e:fc:9b:68:85:08:77:ff:09: b2:00:8c:f5:57:ff:c5:f6:ea:7b:7b:97:69:39:a9:b1:3d:52: a1:37:d7:00:cb:dd:01:a8:cf:77:1d:f0:b5:42:c6:4d:13:9d: 90:ad:3d:a9:63:fd:19:24:c1:92:88:0a:0d:97:01:e7:f2:c1: 42:7a:87:ac:06:25:3d:f7:35:7f:85:41:1a:47:8b:a1:5b:80: e4:04:ab:70:72:09:f1:0d:78:be:a2:2d:77:63:7f:25:b5:03: 86:14:ed:19:08:dd:14:98:68:1a:1b:0a:a9:d0:af:b0:cf:c0: 05:14:0b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2/VHSoX4RR2MzHJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIyMDQyOTEyMDAwMFoXDTMwMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk ZWZjYjllMzYtY2MwZS00ZTVmLTk1OTktMGY0ZmU5Y2E4N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyjVykD4q1x8Hwst4SGbf1lmufl65GtRY/zE 34H4xKTxZoJbOziXAOu9G7NyXau/9VKoiy8+EIZvukp7DkRDkcvu786GNDL0rIZl wwjNuqabd6uw/DC9aPGNJdURiSRNo/TUA/pukmzPdscfoLAbt/fYecBFKMLs4IbR PnprLmEsBV3C/9EHCWjPJLMTZXMBupui9WgMNVZ6E7O2M2VdHq/ww9J5+jM/aZUW OybEVZUzEnf6BcpMM+GVbc5MpjK/KJ/7yvAQ+0qfVrrsZvusSHqJ+Ki6vSgFHjoc wJ99ZNP5VrKh8rOpPYXk34SivQKSS6CCQCWgeQcKz3Rbxr051QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5RtH3gLFcL/qffTDtZDseUVv/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2JjNmJjZTgtNDc0YS0z MGNmLWFkMTUtMzFjOTI2N2FkNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvwL/srdZOoPUhjjA39clvk2NDYwmMU5OCMCNLB2Z8HsJOMrfG2guXH n6eiQklV+wHMImdrVpVrC2fl4XscIct1xBfYGiUgCvXmLyWQdBoqS/8dU3ZjnmSk bC+kvT9Opb/F5HIv/w0i1/XWnorKmTcZhe/q/TX31HulCfH4/jnx6cp7IQDDUQ78 m2iFCHf/CbIAjPVX/8X26nt7l2k5qbE9UqE31wDL3QGoz3cd8LVCxk0TnZCtPalj /RkkwZKICg2XAefywUJ6h6wGJT33NX+FQRpHi6FbgOQEq3ByCfENeL6iLXdjfyW1 A4YU7RkI3RSYaBobCqnQr7DPwAUUC8A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:30 2025 by rpki-client