$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa File: 7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json) Hash identifier: DmA9Ie6d7L7aYx3WTV7O27YJu+hxW61Axumw4a3bXpw= Subject key identifier: 24:75:0F:F9:C8:5C:D7:47:EF:2B:53:A1:D8:3A:4F:EA:02:D6:9E:16 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD392CA074C40AA2B1C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:92:ca:07:4c:40:aa:2b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=5a93c4a4-1078-4e6f-b8e7-7702c73bf483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:62:84:8a:4f:b6:b5:be:61:0f:db:71:f0: 35:ac:31:c0:f7:48:83:32:4c:77:1b:0e:a7:71:eb: 31:c9:ec:17:d6:bf:2a:46:08:93:51:93:01:df:64: fa:f1:e2:c8:f2:ba:8a:a0:44:d3:2a:37:ac:bf:7b: 29:33:05:5f:8d:f7:90:56:09:31:0b:ae:32:34:a4: ff:03:9a:99:5b:c5:59:e1:4b:d9:ca:b6:a1:f0:1c: 70:69:c9:95:c3:10:39:3b:f1:8f:18:e0:b9:1f:64: 59:1d:19:60:9f:b6:94:5f:c3:e6:b2:9c:5d:9e:30: 90:0c:fb:6e:52:27:20:2d:2a:b1:f0:15:69:b6:d6: 88:db:a7:a9:d8:14:ff:5c:e8:bf:b4:1b:d8:da:22: 5b:a3:fc:b1:ad:e3:e1:d8:12:8a:60:ed:0b:21:ca: 2d:2e:13:c8:3e:b4:35:87:fc:c8:48:95:bc:89:da: 67:a5:0b:20:cc:f5:ec:df:09:c6:21:3a:f5:9c:df: fd:00:80:09:f0:ba:a4:c9:de:4f:e3:c1:4f:49:47: 18:66:ab:25:c1:a0:65:fe:30:cd:e5:ae:72:79:22: ac:06:bd:6d:c0:94:5b:7d:19:49:14:b9:4c:a2:b5: ad:c8:e0:18:22:7e:73:93:bb:02:b4:ca:16:ec:90: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:0F:F9:C8:5C:D7:47:EF:2B:53:A1:D8:3A:4F:EA:02:D6:9E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:93:78:e0:b2:63:50:5c:cb:e1:bb:6f:b1:fc:16:90:82:ea: 6d:36:5d:d0:06:4a:90:f2:1f:f0:42:5e:cd:cd:1b:79:cd:8f: 28:49:3d:3a:71:f0:a6:23:39:44:20:0c:4b:c9:c9:87:1b:c1: 58:04:17:aa:61:30:20:46:f6:40:70:96:ab:1d:c5:01:dc:4b: f2:5a:57:97:d0:e3:d4:41:0f:bc:7e:82:98:a3:8e:59:81:02: bb:80:8b:5f:1f:06:52:7d:d2:a6:95:98:be:1f:2d:4d:b5:ca: be:35:3b:a1:83:4c:43:b8:0e:b5:a3:a5:ee:a5:c2:f4:d6:a6: 20:2a:21:24:b9:23:91:60:b5:4c:da:57:e1:95:91:5a:41:01: 37:29:db:cf:82:59:49:c1:83:64:67:ac:fe:db:65:cb:f7:c5: 17:69:59:9c:05:46:2c:a4:90:a4:d6:73:a1:95:b5:2c:76:8d: dc:37:95:f8:73:7b:5a:2e:32:f7:a6:c2:57:cb:42:66:b0:28: 17:0c:5a:47:6b:43:e6:28:65:07:be:f8:0f:79:77:49:e9:b4: f9:34:3c:68:d2:5a:95:23:6f:16:ec:bf:b6:fb:92:d5:f3:87: 49:ba:9e:13:b7:b4:f4:27:e7:f2:ad:a2:c8:18:4b:0a:dc:dd: 79:b9:c2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9OSygdMQKorHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NWE5M2M0YTQtMTA3OC00ZTZmLWI4ZTctNzcwMmM3M2JmNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA5ihIpPtrW+YQ/bcfA1rDHA90iDMkx3Gw6n cesxyewX1r8qRgiTUZMB32T68eLI8rqKoETTKjesv3spMwVfjfeQVgkxC64yNKT/ A5qZW8VZ4UvZyrah8BxwacmVwxA5O/GPGOC5H2RZHRlgn7aUX8PmspxdnjCQDPtu UicgLSqx8BVpttaI26ep2BT/XOi/tBvY2iJbo/yxrePh2BKKYO0LIcotLhPIPrQ1 h/zISJW8idpnpQsgzPXs3wnGITr1nN/9AIAJ8Lqkyd5P48FPSUcYZqslwaBl/jDN 5a5yeSKsBr1twJRbfRlJFLlMorWtyOAYIn5zk7sCtMoW7JAnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR1D/nIXNdH7ytTodg6T+oC1p4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Mzc1ZDUtZTZmYS0z N2IwLWFhOGUtYWI1M2U0Mzg1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGTeOCyY1Bcy+G7b7H8FpCC6m02XdAGSpDyH/BCXs3NG3nNjyhJPTpx 8KYjOUQgDEvJyYcbwVgEF6phMCBG9kBwlqsdxQHcS/JaV5fQ49RBD7x+gpijjlmB AruAi18fBlJ90qaVmL4fLU21yr41O6GDTEO4DrWjpe6lwvTWpiAqISS5I5FgtUza V+GVkVpBATcp28+CWUnBg2RnrP7bZcv3xRdpWZwFRiykkKTWc6GVtSx2jdw3lfhz e1ouMvemwlfLQmawKBcMWkdrQ+YoZQe++A95d0nptPk0PGjSWpUjbxbsv7b7ktXz h0m6nhO3tPQn5/KtosgYSwrc3Xm5wlQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:28 2025 by rpki-client