$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa File: adce9981-1640-3807-863a-5100ced68525.roa (raw, json) Hash identifier: 5C8hAMj2ovr2HcDIrbiGdiV8NKLxFuH2qTDdhG6p0cs= Subject key identifier: 3F:3E:3A:65:F8:B6:76:7E:B4:57:AB:4A:94:A6:58:47:77:AC:0D:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05ED2420F50D8E3EAEBA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ed:24:20:f5:0d:8e:3e:ae:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=dc1b5ff2-60a0-44b6-a963-a239219a580b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:20:b2:e3:b8:23:dc:f2:37:1d:79:f3:be: e4:63:e7:86:89:c5:99:cf:35:38:d4:1f:2a:b2:ec: 42:df:19:52:e9:be:ca:2e:b9:d4:95:49:2d:35:31: c7:ec:3b:2b:ef:4b:3e:ec:a8:ae:f1:7a:14:88:d8: 5e:48:67:eb:10:56:e8:82:e4:35:88:ba:a1:b9:7c: a1:46:12:4b:c1:07:c3:b4:4a:d9:84:68:23:e6:95: cb:6b:46:94:16:0a:29:b1:10:55:4d:8f:b5:e4:cf: 71:87:6a:3a:15:26:b8:b7:ba:2e:02:aa:f1:0c:17: 98:57:1a:aa:2d:9b:2f:3f:8f:bc:a8:a4:c0:5a:42: 9b:12:8f:5e:bd:e4:65:32:27:b9:e2:fd:50:3b:15: d7:6e:6f:49:2e:ba:89:df:88:35:55:10:e7:4b:a2: 00:4d:0f:40:c8:64:f9:72:93:ce:e0:bb:88:30:5a: 8e:71:40:3b:ed:92:63:34:27:61:db:f6:c7:a9:ef: 76:bf:fd:a7:73:90:fe:64:ef:64:b7:55:a3:f1:0f: c1:fb:46:a5:bf:6c:f5:a1:13:7d:66:d9:95:a1:06: 3a:40:98:f3:76:db:8e:c0:93:80:6b:5b:71:8f:38: 01:55:d6:63:84:0d:a3:6a:c2:78:89:ff:0c:76:e8: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3E:3A:65:F8:B6:76:7E:B4:57:AB:4A:94:A6:58:47:77:AC:0D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c7:e5:aa:d1:73:68:a4:9a:5b:cd:9a:88:50:35:8b:a8:a7: e5:7f:01:6b:78:27:27:6a:8c:52:75:a2:db:55:b4:82:54:ea: 91:77:60:8c:ae:30:a5:9a:4c:8d:fe:b5:b8:52:95:a0:d9:1c: 1d:bc:ec:62:76:37:c2:b4:bd:e8:2a:a4:05:dd:0a:85:b6:5e: e8:aa:81:85:df:ee:b5:b5:bb:6f:96:cb:fa:c4:f2:96:c9:2d: 9e:88:b2:a4:5b:f9:e0:19:27:f4:44:13:fa:25:a2:89:7a:64: 45:30:ee:49:7f:94:67:5d:76:26:3c:4c:5c:91:2c:aa:87:3a: fa:01:f5:ef:d5:f5:a4:ab:05:8e:30:f4:ba:90:6d:6f:47:b1: a9:f3:53:81:35:55:8a:19:47:83:2b:3e:57:1a:6e:17:54:01: 2f:47:1b:3c:1a:ff:0e:af:99:6b:fc:c4:d6:3e:76:fe:cd:8d: 21:0e:47:cd:41:c2:39:77:89:1c:c4:f1:ba:5c:2a:c5:17:29: b0:a6:50:0c:cb:1b:6a:14:8f:da:7a:08:d2:d9:d8:48:f2:60: ff:7e:98:65:0a:35:d9:a0:46:b1:3a:82:2e:ac:05:6c:ce:7d: 47:67:3f:6c:e7:91:e3:8b:44:bb:da:68:51:f1:3a:f9:a6:0c: 6b:7a:23:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBe0kIPUNjj6uuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZGMxYjVmZjItNjBhMC00NGI2LWE5NjMtYTIzOTIxOWE1ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPIgsuO4I9zyNx15877kY+eGicWZzzU41B8q suxC3xlS6b7KLrnUlUktNTHH7Dsr70s+7Kiu8XoUiNheSGfrEFboguQ1iLqhuXyh RhJLwQfDtErZhGgj5pXLa0aUFgopsRBVTY+15M9xh2o6FSa4t7ouAqrxDBeYVxqq LZsvP4+8qKTAWkKbEo9eveRlMie54v1QOxXXbm9JLrqJ34g1VRDnS6IATQ9AyGT5 cpPO4LuIMFqOcUA77ZJjNCdh2/bHqe92v/2nc5D+ZO9kt1Wj8Q/B+0alv2z1oRN9 ZtmVoQY6QJjzdtuOwJOAa1txjzgBVdZjhA2jasJ4if8Mdui5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8+OmX4tnZ+tFerSpSmWEd3rA2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWRjZTk5ODEtMTY0MC0z ODA3LTg2M2EtNTEwMGNlZDY4NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDH5arRc2ikmlvNmohQNYuop+V/AWt4JydqjFJ1ottVtIJU6pF3YIyu MKWaTI3+tbhSlaDZHB287GJ2N8K0vegqpAXdCoW2XuiqgYXf7rW1u2+Wy/rE8pbJ LZ6IsqRb+eAZJ/REE/olool6ZEUw7kl/lGdddiY8TFyRLKqHOvoB9e/V9aSrBY4w 9LqQbW9HsanzU4E1VYoZR4MrPlcabhdUAS9HGzwa/w6vmWv8xNY+dv7NjSEOR81B wjl3iRzE8bpcKsUXKbCmUAzLG2oUj9p6CNLZ2EjyYP9+mGUKNdmgRrE6gi6sBWzO fUdnP2znkeOLRLvaaFHxOvmmDGt6I5M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:47 2025 by rpki-client