$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa File: 95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa (raw, json) Hash identifier: 8z33+qEq/tCZwEVEWWJ3T/cjqFkfz8XGNmH1SBgn5dM= Subject key identifier: FB:92:07:48:D1:2A:A5:B3:45:ED:99:E6:10:57:3B:D7:4D:B7:7E:40 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858485A057A37AA35AE64976DEB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa Signing time: Sat 28 Dec 2024 02:00:38 +0000 ROA not before: Sat 28 Dec 2024 02:00:38 +0000 ROA not after: Fri 28 Mar 2025 01:00:38 +0000 asID: 8069 IP address blocks: 20.33.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5a:05:7a:37:aa:35:ae:64:97:6d:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 28 02:00:38 2024 GMT Not After : Mar 28 01:00:38 2025 GMT Subject: CN=7747e32a-72af-4126-a4b2-9cef429b6c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:88:ac:b9:ae:19:ed:e9:78:b0:52:48:84: f7:65:25:83:e3:e2:46:3b:ea:6e:ab:39:4a:bb:84: fc:18:19:eb:47:56:47:94:4f:09:22:46:66:24:b3: 5d:d3:bd:84:9c:ba:ef:a3:73:c7:20:b0:cb:ca:a4: 95:64:21:92:29:aa:ad:3d:b0:d8:ee:cd:31:a6:f0: e9:bc:8b:e2:15:53:d0:ad:6b:1c:9f:4e:72:63:d5: e1:21:e7:b5:66:cb:61:49:9f:eb:43:5c:0f:6c:4b: 50:35:ff:72:6f:fc:75:b1:a8:43:c2:be:d1:19:cc: fe:c6:a9:37:96:e5:78:af:72:14:f0:44:3d:7c:c4: 60:56:b5:47:0f:49:54:de:2f:24:3e:51:0a:7e:f3: 03:6f:6b:e7:ae:3d:b2:c5:f5:58:a1:ca:c6:f4:56: 86:7b:df:fc:fb:8f:7b:81:a5:e8:48:c2:1d:25:22: 12:34:7f:ce:ae:ce:37:ac:a1:69:be:48:45:c4:9a: 5a:fa:e3:1f:20:28:06:19:fa:7d:d8:ce:58:d1:b0: a2:1a:f0:9a:dd:fe:bd:4c:83:80:59:1b:8f:65:e5: aa:4f:21:d5:29:36:83:ff:4e:79:29:18:5e:b8:2b: d7:f9:ed:cb:b4:6b:65:be:20:01:27:6b:93:b1:f1: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:92:07:48:D1:2A:A5:B3:45:ED:99:E6:10:57:3B:D7:4D:B7:7E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:13:9a:01:ed:54:aa:3b:63:02:d4:45:22:f6:12:e9:cf:68: 9b:20:14:b4:16:43:13:82:c5:aa:41:22:3a:e2:78:e5:f3:3a: 79:19:22:32:e8:e3:eb:61:87:9d:a2:9b:f3:46:7e:4d:8c:33: 4d:f9:41:47:00:c1:e3:ac:5d:35:10:59:33:75:4c:06:58:2c: 4c:81:1e:67:7c:a9:fa:58:85:f5:d7:c3:bb:62:19:ee:c9:32: 82:f4:02:95:a6:b7:4e:b7:e1:f1:e7:ba:94:56:45:d0:55:d4: 51:fb:bb:cf:0c:2c:de:f3:c0:24:e7:ce:55:80:f8:ee:06:d3: 1f:4b:3c:43:88:94:5d:8d:da:01:1d:83:26:8f:02:d4:06:40: 45:da:36:10:8f:80:ea:86:ce:86:dc:5c:f7:90:35:26:b3:98: c5:7b:00:bd:dd:62:12:96:1a:62:42:67:63:79:92:87:65:b9: 88:e2:ea:c4:c8:3f:5f:13:10:bc:82:d5:e5:d4:08:8b:6a:52: 90:75:e9:9e:78:aa:d9:e9:d7:df:14:68:eb:c7:96:fd:9b:af: 72:92:d0:f7:97:20:fe:b9:4a:24:2b:5b:c6:fa:bd:32:8b:47: c6:18:ec:ba:41:a4:69:4f:11:88:53:fa:1e:aa:5c:03:ed:78: 43:f5:c7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhaBXo3qjWuZJdt6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIyODAyMDAzOFoXDTI1MDMyODAxMDAzOFowLzEtMCsGA1UEAxMk Nzc0N2UzMmEtNzJhZi00MTI2LWE0YjItOWNlZjQyOWI2YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArviIrLmuGe3peLBSSIT3ZSWD4+JGO+puqzlK u4T8GBnrR1ZHlE8JIkZmJLNd072EnLrvo3PHILDLyqSVZCGSKaqtPbDY7s0xpvDp vIviFVPQrWscn05yY9XhIee1ZsthSZ/rQ1wPbEtQNf9yb/x1sahDwr7RGcz+xqk3 luV4r3IU8EQ9fMRgVrVHD0lU3i8kPlEKfvMDb2vnrj2yxfVYocrG9FaGe9/8+497 gaXoSMIdJSISNH/Ors43rKFpvkhFxJpa+uMfICgGGfp92M5Y0bCiGvCa3f69TIOA WRuPZeWqTyHVKTaD/055KRheuCvX+e3LtGtlviABJ2uTsfFDIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuSB0jRKqWzRe2Z5hBXO9dNt35AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTVmMTRiM2MtMjI4Ny0z YWM3LTkxYTAtNWU0NTU3MmM4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQTmgHtVKo7YwLURSL2EunPaJsgFLQWQxOCxapBIjrieOXzOnkZIjLo 4+thh52im/NGfk2MM035QUcAweOsXTUQWTN1TAZYLEyBHmd8qfpYhfXXw7tiGe7J MoL0ApWmt0634fHnupRWRdBV1FH7u88MLN7zwCTnzlWA+O4G0x9LPEOIlF2N2gEd gyaPAtQGQEXaNhCPgOqGzobcXPeQNSazmMV7AL3dYhKWGmJCZ2N5kodluYji6sTI P18TELyC1eXUCItqUpB16Z54qtnp198UaOvHlv2br3KS0PeXIP65SiQrW8b6vTKL R8YY7LpBpGlPEYhT+h6qXAPteEP1x8U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:03 2025 by rpki-client