$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json) Hash identifier: r7q1SivUhV8aiVwISHCpSbF85PrWMbeuTUtvrNkfnCQ= Subject key identifier: 1A:95:1E:E9:B3:BA:29:44:F7:5B:D7:D8:3F:4A:7C:A0:2C:87:81:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD385BE4310277D83340F Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:85:be:43:10:27:7d:83:34:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=96392dc7-0913-498e-8d5a-89af57f58461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:20:3b:8e:c4:11:5f:b5:57:3e:fc:64:64: 17:ae:6f:86:3a:1b:85:c1:32:ea:7d:65:8b:44:55: 2a:30:14:62:72:af:aa:30:24:fd:c5:cf:49:7d:52: 83:bf:75:86:c3:8d:c1:10:ba:68:17:e2:7c:43:28: 63:91:13:02:7d:0e:c5:15:84:43:7f:2a:79:8b:eb: c0:dd:d0:0a:64:ee:83:f0:0a:86:b4:30:81:10:62: 3d:f0:f4:43:8e:49:5d:59:76:39:33:56:d1:7c:27: f7:09:21:6b:a8:5a:87:08:ee:1c:b6:1b:41:65:92: 6e:f3:e6:8e:06:6a:ed:14:fd:7b:e3:db:da:41:53: 2b:8c:47:5d:be:44:81:bb:eb:24:5b:1c:88:6e:ae: 0c:75:9b:53:43:da:5a:cc:ce:7a:9a:a7:cb:04:6f: bb:1c:2d:10:cd:fd:23:98:2a:1c:2a:0f:9c:7d:e7: aa:7d:5a:d0:92:98:6d:5a:c9:e4:bf:d2:96:35:07: 4b:d1:2a:1f:0a:a2:2a:7d:05:21:82:66:2d:d8:e6: 54:e6:95:1e:f5:7c:0e:44:e0:99:fb:db:fd:33:05: 2a:80:2b:fe:d6:39:f1:cd:59:65:82:ad:bf:cd:1a: 1a:88:dd:5d:ee:68:4f:a4:fe:30:8b:8f:0c:b7:d1: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:1E:E9:B3:BA:29:44:F7:5B:D7:D8:3F:4A:7C:A0:2C:87:81:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:ca:97:38:9d:b2:99:6c:12:b3:0b:36:c8:69:fd:35:ba: 3e:56:af:8d:f4:57:89:31:34:f0:fb:60:90:19:d1:3c:98:91: d5:92:82:55:76:0d:48:5f:9c:10:13:ec:2b:c4:df:d5:8c:0b: e4:8e:59:21:ce:ba:1d:31:62:a1:d7:98:36:20:c2:f1:b5:f3: cc:b2:56:55:0a:0d:3c:72:cf:ab:ba:6e:e0:54:25:d1:d0:c5: 3b:0c:9e:86:37:4a:4d:15:24:ec:7b:14:25:d6:cb:ee:f0:2f: 13:01:60:e1:26:22:98:a4:67:0b:d7:45:7a:3e:4f:8c:0c:ce: 3c:0b:33:f0:ac:b0:92:95:85:f5:50:98:60:25:5b:86:09:5f: c5:32:96:ca:c1:a7:17:6f:0a:75:ab:90:fa:57:7e:ff:01:34: 37:13:65:01:63:c6:b2:1e:11:9f:67:89:a5:d2:fc:e1:dc:2d: 80:74:3c:f8:23:4c:e9:74:06:9a:ce:08:9e:e4:5d:50:62:32: 6c:06:76:bf:9c:47:b0:57:aa:dd:00:76:7c:0e:5c:7b:f3:b7: 79:54:10:23:fc:a7:aa:d1:82:e0:5d:17:f1:98:4a:d2:9c:e0: b2:d7:b7:0c:7c:75:95:a4:e0:91:0f:c0:47:78:7c:27:3c:3c: e9:6f:4f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9OFvkMQJ32DNA8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTYzOTJkYzctMDkxMy00OThlLThkNWEtODlhZjU3ZjU4NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKAgO47EEV+1Vz78ZGQXrm+GOhuFwTLqfWWL RFUqMBRicq+qMCT9xc9JfVKDv3WGw43BELpoF+J8QyhjkRMCfQ7FFYRDfyp5i+vA 3dAKZO6D8AqGtDCBEGI98PRDjkldWXY5M1bRfCf3CSFrqFqHCO4cthtBZZJu8+aO BmrtFP1749vaQVMrjEddvkSBu+skWxyIbq4MdZtTQ9pazM56mqfLBG+7HC0Qzf0j mCocKg+cfeeqfVrQkphtWsnkv9KWNQdL0SofCqIqfQUhgmYt2OZU5pUe9XwOROCZ +9v9MwUqgCv+1jnxzVllgq2/zRoaiN1d7mhPpP4wi48Mt9GcxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqVHumzuilE91vX2D9KfKAsh4G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2NiY2UwZDktMDQxYi0z YzVjLTg3ZTQtMzU3ODc4YWFkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhNypc4nbKZbBKzCzbIaf01uj5Wr430V4kxNPD7YJAZ0TyYkdWSglV2 DUhfnBAT7CvE39WMC+SOWSHOuh0xYqHXmDYgwvG188yyVlUKDTxyz6u6buBUJdHQ xTsMnoY3Sk0VJOx7FCXWy+7wLxMBYOEmIpikZwvXRXo+T4wMzjwLM/CssJKVhfVQ mGAlW4YJX8UylsrBpxdvCnWrkPpXfv8BNDcTZQFjxrIeEZ9niaXS/OHcLYB0PPgj TOl0BprOCJ7kXVBiMmwGdr+cR7BXqt0AdnwOXHvzt3lUECP8p6rRguBdF/GYStKc 4LLXtwx8dZWk4JEPwEd4fCc8POlvT+s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:08 2025 by rpki-client