$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa File: 7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa (raw, json) Hash identifier: yxs8h0xl8l+MIpdUi3xlv1APghQ/VI7UZiRnTdQX3HU= Subject key identifier: 45:18:50:44:BA:FB:E9:22:60:0E:1E:6C:D6:8F:1B:A1:46:70:F0:F4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC7F4CA2649B4A3B2440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:7f:4c:a2:64:9b:4a:3b:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=43d49a32-f682-4508-984c-42bf1c34f565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:23:e4:65:b7:dc:d5:02:6d:be:7f:28:1b: bd:fb:45:0e:5a:13:98:1f:a2:80:3e:26:16:f9:12: a2:a1:ad:57:15:3e:fe:23:84:da:31:07:27:11:74: a2:71:58:a3:25:18:8f:a4:73:2f:c5:72:a6:8d:c7: 46:19:6a:40:31:7e:f4:b7:74:19:f8:b3:27:94:ea: 7c:93:58:d8:69:97:3b:0a:10:ca:6e:00:44:f8:8c: f4:52:4b:92:1e:07:15:58:82:a2:fd:e2:e7:da:24: 57:73:24:8d:03:de:92:4f:b1:ae:8e:eb:62:bb:db: 72:57:1a:35:90:97:ee:88:63:c2:39:f8:7d:f3:ea: dc:56:f5:b8:d0:ec:7f:31:b1:a3:d2:7e:79:e3:4b: 9b:4e:16:37:51:44:8e:09:35:63:ea:de:ae:3e:81: 30:13:b6:f0:28:60:26:12:22:1f:72:d2:0a:95:32: 94:4a:8b:e5:f3:1c:d5:b2:49:f7:4d:9b:17:09:7d: ce:9f:56:75:a0:3d:5d:27:9d:d7:7a:f3:54:9d:9a: 03:af:43:83:64:7b:f1:8b:4c:d2:5c:ee:49:fd:8a: c8:06:c9:01:27:cc:71:26:00:2f:0b:0e:76:f3:3b: 23:66:94:4b:67:84:25:55:f7:7d:57:95:5e:92:d0: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:18:50:44:BA:FB:E9:22:60:0E:1E:6C:D6:8F:1B:A1:46:70:F0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1d:9c:44:19:15:04:8b:c1:d1:83:de:f4:58:1e:7b:37:8a: f4:aa:f9:4d:d6:41:e9:48:db:65:06:4a:d5:75:f5:c6:f8:d0: 36:57:02:57:88:c8:48:8b:ed:dc:70:69:3b:7b:85:f7:90:34: 15:f0:f5:be:d7:28:6a:db:86:da:13:8e:29:9e:d5:84:bb:dc: 31:0e:79:7b:3c:dd:81:11:eb:3e:2c:03:09:5c:41:51:71:60: 0c:9c:c7:4f:2c:fe:e8:6d:c8:04:ce:09:09:bf:a9:5f:c6:53: 14:33:f6:a6:34:6a:fe:2f:cd:be:bb:bf:a3:b7:91:f2:3d:a6: e3:76:bc:dc:c6:0d:c4:10:ef:d6:97:27:51:ec:de:15:e6:07: ea:ec:27:bf:30:bb:34:be:eb:31:77:7e:e2:3d:67:37:3b:c4: 69:13:c1:96:1f:f1:86:73:6f:8e:ff:a2:d3:95:7f:6f:fc:dc: eb:0e:e0:38:73:d2:8f:73:95:4f:43:db:6a:12:06:94:21:9f: 1e:21:13:0d:21:bc:f1:23:66:c4:02:b2:0d:85:e9:54:8d:1c: f5:88:be:bf:8c:d8:02:c9:9e:3d:57:55:b2:17:56:72:eb:ea: 08:20:d2:9e:7d:ee:43:cf:00:06:18:de:82:43:c7:cb:be:85: 63:66:25:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBex/TKJkm0o7JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDNkNDlhMzItZjY4Mi00NTA4LTk4NGMtNDJiZjFjMzRmNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcgj5GW33NUCbb5/KBu9+0UOWhOYH6KAPiYW +RKioa1XFT7+I4TaMQcnEXSicVijJRiPpHMvxXKmjcdGGWpAMX70t3QZ+LMnlOp8 k1jYaZc7ChDKbgBE+Iz0UkuSHgcVWIKi/eLn2iRXcySNA96ST7Gujutiu9tyVxo1 kJfuiGPCOfh98+rcVvW40Ox/MbGj0n5540ubThY3UUSOCTVj6t6uPoEwE7bwKGAm EiIfctIKlTKUSovl8xzVskn3TZsXCX3On1Z1oD1dJ53XevNUnZoDr0ODZHvxi0zS XO5J/YrIBskBJ8xxJgAvCw528zsjZpRLZ4QlVfd9V5VektBvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUYUES6++kiYA4ebNaPG6FGcPD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q2MjA4YWYtYTliZi0z YmY3LWJkMjAtN2RkNzRlYmQwM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQdnEQZFQSLwdGD3vRYHns3ivSq+U3WQelI22UGStV19cb40DZXAleI yEiL7dxwaTt7hfeQNBXw9b7XKGrbhtoTjime1YS73DEOeXs83YER6z4sAwlcQVFx YAycx08s/uhtyATOCQm/qV/GUxQz9qY0av4vzb67v6O3kfI9puN2vNzGDcQQ79aX J1Hs3hXmB+rsJ78wuzS+6zF3fuI9Zzc7xGkTwZYf8YZzb47/otOVf2/83OsO4Dhz 0o9zlU9D22oSBpQhnx4hEw0hvPEjZsQCsg2F6VSNHPWIvr+M2ALJnj1XVbIXVnLr 6ggg0p597kPPAAYY3oJDx8u+hWNmJTk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:19 2025 by rpki-client