$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa File: 96781fca-906e-351a-8100-dfe1dcb508d0.roa (raw, json) Hash identifier: ddEZJAV79+r85aeag1AfkSn3VuBNmdxf2CB/a6W7hxs= Subject key identifier: 11:21:E7:E4:DA:F4:70:74:0B:68:A3:21:48:C3:B9:9F:BA:5D:C6:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BB3F7E7A17AA6A147B10 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.33.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bb:3f:7e:7a:17:aa:6a:14:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=4b37daf9-9963-45f5-84ec-72b7d00ad8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:a2:d0:1d:95:ca:b3:ee:8c:ed:3d:a8:67: d4:91:0f:5e:b5:d3:e3:50:d3:be:f3:c7:e4:6b:da: 5f:c5:68:6b:33:1b:6e:7d:20:eb:89:30:66:0f:0c: 0b:25:2f:15:01:3b:54:f0:08:78:ee:3a:7c:48:a6: 6a:05:62:e9:f0:4f:3c:d8:84:80:04:1d:b9:d6:1c: ec:56:06:4c:b7:48:d3:cf:92:09:b8:25:9f:f7:a7: 2e:06:fe:e7:d0:e6:4c:d3:0e:05:18:75:dd:22:20: a4:b1:c6:44:a7:ad:d3:d0:d3:ab:5d:4c:62:f8:3d: d9:1d:40:f4:6f:2f:75:a4:e1:96:58:36:98:63:ae: aa:e6:aa:d2:28:d6:f9:85:6e:e5:ee:17:67:1e:f6: 5e:10:de:17:2f:3d:57:3e:25:06:70:32:b8:81:eb: 56:05:6c:fa:de:52:cb:85:e5:85:a0:a7:66:6c:a6: ba:dc:1a:3e:2c:dd:21:a2:91:6f:a4:72:43:78:4b: 9c:1a:b3:72:89:ea:6d:0c:27:ac:46:f2:06:49:4f: 31:6b:ac:a3:32:a4:db:03:73:42:d1:dc:46:ad:18: a6:8f:9d:a5:de:3a:19:a6:bb:60:e0:a3:d8:85:b6: 46:8a:8d:23:92:bc:58:e9:67:df:b9:54:79:81:68: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:21:E7:E4:DA:F4:70:74:0B:68:A3:21:48:C3:B9:9F:BA:5D:C6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:47:4c:3b:0c:b1:56:aa:11:b1:48:7b:d4:54:2c:42:34:fe: 56:f9:a5:a7:48:47:cf:8c:62:fc:e0:8c:98:71:d0:d5:6f:74: cd:d7:2e:ef:f8:0d:2f:95:8d:fb:70:34:0b:24:2e:bb:7d:52: a0:64:22:5b:86:fe:34:b9:74:9c:fa:4f:c8:df:17:ed:75:fe: f0:a2:02:fe:70:e5:f0:09:1c:d7:e5:b8:41:97:b0:00:64:9b: 53:5a:f5:74:a0:e7:5e:4b:1e:66:33:77:37:88:19:c3:1d:55: 4b:76:38:45:c4:76:8c:50:49:40:c9:3c:16:15:39:04:c2:f4: 09:f6:7e:84:db:61:66:3d:ad:e8:59:16:a3:d4:f6:9b:95:70: 13:f4:f0:4e:00:05:d8:b9:43:7f:e2:f4:b8:a1:80:20:26:a6: 58:46:95:fc:59:23:88:42:7e:82:e9:18:f3:c0:84:e1:73:a2: 97:01:1b:b6:fc:7c:a3:52:ec:97:86:cc:4d:24:e9:51:25:71: f1:ed:17:7f:0f:f0:3c:45:fd:c0:9a:84:b9:ae:1a:44:ec:46: ef:34:b7:39:13:26:08:17:26:70:4e:64:8a:27:ad:06:ed:ce: 7c:97:6f:cb:a5:6a:96:01:67:16:2a:78:66:b3:66:c0:96:97: e6:e8:e4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7s/fnoXqmoUexAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk NGIzN2RhZjktOTk2My00NWY1LTg0ZWMtNzJiN2QwMGFkOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn2i0B2VyrPujO09qGfUkQ9etdPjUNO+88fk a9pfxWhrMxtufSDriTBmDwwLJS8VATtU8Ah47jp8SKZqBWLp8E882ISABB251hzs VgZMt0jTz5IJuCWf96cuBv7n0OZM0w4FGHXdIiCkscZEp63T0NOrXUxi+D3ZHUD0 by91pOGWWDaYY66q5qrSKNb5hW7l7hdnHvZeEN4XLz1XPiUGcDK4getWBWz63lLL heWFoKdmbKa63Bo+LN0hopFvpHJDeEucGrNyieptDCesRvIGSU8xa6yjMqTbA3NC 0dxGrRimj52l3joZprtg4KPYhbZGio0jkrxY6WffuVR5gWgsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEh5+Ta9HB0C2ijIUjDuZ+6XcbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY3ODFmY2EtOTA2ZS0z NTFhLTgxMDAtZGZlMWRjYjUwOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZHTDsMsVaqEbFIe9RULEI0/lb5padIR8+MYvzgjJhx0NVvdM3XLu/4 DS+VjftwNAskLrt9UqBkIluG/jS5dJz6T8jfF+11/vCiAv5w5fAJHNfluEGXsABk m1Na9XSg515LHmYzdzeIGcMdVUt2OEXEdoxQSUDJPBYVOQTC9An2foTbYWY9rehZ FqPU9puVcBP08E4ABdi5Q3/i9LihgCAmplhGlfxZI4hCfoLpGPPAhOFzopcBG7b8 fKNS7JeGzE0k6VElcfHtF38P8DxF/cCahLmuGkTsRu80tzkTJggXJnBOZIonrQbt znyXb8ulapYBZxYqeGazZsCWl+bo5Go= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:19 2025 by rpki-client