$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa File: 8be6d61d-293d-3ed8-a651-1bf004bc5280.roa (raw, json) Hash identifier: 02X1SKLbE0JyAEDkA/1Dz+GHXZNzRsUdef8T6dqEUkc= Subject key identifier: 6C:5D:EF:84:5E:6E:D9:3D:A7:2B:C7:0E:28:EC:FF:6F:97:B8:8C:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848B35B7060C5EBCA06EB293AA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:60:c5:eb:ca:06:eb:29:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=b0f2573d-f470-45e1-9934-8b176babdb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:40:f1:bf:ff:a0:3e:d2:ad:de:31:4f:f6: 58:40:fa:92:d2:6d:23:fc:ce:d0:66:7c:d0:4b:bf: 65:78:74:37:0d:26:4e:c8:e8:64:e9:50:59:e8:c8: fb:48:a0:d2:3f:49:9e:51:d5:27:fc:2f:9c:3f:ba: 40:bf:52:7b:97:11:72:63:06:9c:f0:e1:12:43:68: 3d:06:c1:3a:dd:64:cf:64:a9:f8:fd:3c:84:7f:a4: 13:8e:b3:f0:58:30:b3:6f:eb:23:48:8d:bd:33:a6: 0a:79:e3:01:25:ca:51:ce:f9:18:56:a8:1d:ae:eb: 28:36:94:03:f7:87:70:1a:53:64:91:1f:eb:20:25: 1d:78:f5:68:3b:be:5a:65:33:66:b7:82:b8:23:cd: 27:78:21:48:7e:67:9d:c6:16:9e:e8:70:0b:a6:9d: 3b:24:ee:e3:b5:c6:d6:94:1d:f2:3b:a1:f7:63:0a: 51:44:0a:6f:01:e7:dc:fb:6f:07:b7:07:26:fd:8c: 71:90:83:d6:3b:11:2d:08:f5:e9:ae:23:e0:90:57: 21:1b:91:b9:a3:dd:e0:04:47:df:f0:8a:22:65:1b: 01:42:65:72:b5:ff:88:a3:57:17:b0:d7:a4:b8:b4: ee:8c:fa:e6:1c:db:89:d0:df:5a:56:0a:e1:b8:40: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5D:EF:84:5E:6E:D9:3D:A7:2B:C7:0E:28:EC:FF:6F:97:B8:8C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:2f:60:21:48:a6:8c:9a:b0:9a:e3:52:ac:10:11:12:49: e3:e6:bc:63:4e:47:70:4a:c7:2a:bb:08:32:08:fc:5f:b6:e4: 90:c6:ad:0d:b2:28:49:dc:86:b8:73:3e:61:cf:18:75:b2:19: 1e:bf:f0:7b:e5:f4:d9:36:13:de:21:a2:d7:19:a2:23:ff:5f: 2b:06:bc:06:6c:c9:99:ab:94:ba:cf:47:b3:73:ff:72:39:0a: 22:96:c2:6e:53:5e:5e:ba:61:bc:3d:f0:96:75:6f:5d:17:a9: 96:26:64:07:f1:b6:a1:38:a3:d7:b8:17:84:27:bb:5d:bf:2a: 31:40:f4:34:4c:eb:45:d9:dc:e7:3d:46:01:26:93:db:f6:47: 30:f0:07:2d:20:7a:af:0f:4c:34:46:78:a9:dc:21:e0:b1:43: b2:7e:cd:c3:fe:aa:62:97:0d:e2:a7:9c:4f:f8:05:b4:ae:dd: 88:2f:5b:59:56:67:5d:d9:8e:88:a3:c7:31:22:06:3f:14:90: 40:c4:6a:02:35:90:22:57:dc:23:b5:a7:ed:01:ad:bc:b9:0c: 61:fb:2d:4f:e8:db:ca:8e:12:2c:10:9d:3f:41:c8:0a:9d:f9: 92:52:a4:97:61:cd:27:4c:c1:bf:94:a8:43:da:74:42:05:9e: 52:49:f6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3BgxevKBuspOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjBmMjU3M2QtZjQ3MC00NWUxLTk5MzQtOGIxNzZiYWJkYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ5A8b//oD7Srd4xT/ZYQPqS0m0j/M7QZnzQ S79leHQ3DSZOyOhk6VBZ6Mj7SKDSP0meUdUn/C+cP7pAv1J7lxFyYwac8OESQ2g9 BsE63WTPZKn4/TyEf6QTjrPwWDCzb+sjSI29M6YKeeMBJcpRzvkYVqgdrusoNpQD 94dwGlNkkR/rICUdePVoO75aZTNmt4K4I80neCFIfmedxhae6HALpp07JO7jtcbW lB3yO6H3YwpRRApvAefc+28Htwcm/YxxkIPWOxEtCPXpriPgkFchG5G5o93gBEff 8IoiZRsBQmVytf+Io1cXsNekuLTujPrmHNuJ0N9aVgrhuEDvuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxd74Rebtk9pyvHDijs/2+XuIyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGJlNmQ2MWQtMjkzZC0z ZWQ4LWE2NTEtMWJmMDA0YmM1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJL2AhSKaMmrCa41KsEBESSePmvGNOR3BKxyq7CDII/F+25JDGrQ2y KEnchrhzPmHPGHWyGR6/8Hvl9Nk2E94hotcZoiP/XysGvAZsyZmrlLrPR7Nz/3I5 CiKWwm5TXl66Ybw98JZ1b10XqZYmZAfxtqE4o9e4F4Qnu12/KjFA9DRM60XZ3Oc9 RgEmk9v2RzDwBy0geq8PTDRGeKncIeCxQ7J+zcP+qmKXDeKnnE/4BbSu3YgvW1lW Z13ZjoijxzEiBj8UkEDEagI1kCJX3CO1p+0Brby5DGH7LU/o28qOEiwQnT9ByAqd +ZJSpJdhzSdMwb+UqEPadEIFnlJJ9lI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:43 2025 by rpki-client