$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa File: b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa (raw, json) Hash identifier: VVTX14cQxZbh/9GMfNmGIg/LLdz6nyqQ7hOPfVHNnMU= Subject key identifier: A0:51:D2:E6:4C:12:D8:4D:42:7F:76:BE:4F:00:86:94:29:40:4D:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E0069E010917E30354F4CF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9e:01:09:17:e3:03:54:f4:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=982ed810-bc77-42df-9bc0-256d03697297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:ad:4c:12:a4:b8:e0:65:ce:87:33:5e:b2: 8c:a8:4d:eb:4a:4c:c9:9d:18:18:20:d1:d8:b9:ce: ff:5c:c1:66:81:a2:39:c4:dc:f9:5a:25:38:8b:01: 53:f7:7c:4c:35:b7:13:f0:91:da:87:e6:ff:35:92: dd:4f:43:f8:46:0b:5b:77:be:a8:95:af:71:13:d4: ce:52:03:34:21:6e:3c:9b:90:48:84:68:83:30:bf: c1:6a:9e:1c:00:1c:03:a0:79:8c:4f:56:77:54:86: 90:a5:fb:99:7e:1f:ec:65:80:fd:72:cd:9e:61:77: bf:ce:c8:e8:f8:68:7e:bc:0a:86:e3:95:84:81:b7: d9:b7:52:5a:b3:eb:a2:af:52:32:82:cc:05:ff:82: f4:15:49:92:4f:c7:bc:a9:2b:ae:ef:93:a8:fc:af: 76:b4:0d:8f:47:64:45:26:c8:3f:49:17:3d:ed:8d: 2e:db:dd:f0:17:0e:ba:e4:dc:c5:b1:54:9e:0c:5c: c4:c8:f8:3f:28:0b:3d:7f:ed:52:95:fd:cc:94:87: c5:7c:a0:f0:1b:2c:21:49:38:11:31:73:f8:7f:7a: a8:41:54:fb:8a:19:04:f5:7a:82:c3:03:16:4b:26: 8d:47:45:00:bb:6c:71:89:86:00:f8:f5:af:2e:59: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:51:D2:E6:4C:12:D8:4D:42:7F:76:BE:4F:00:86:94:29:40:4D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:18:f2:73:40:f5:9d:2b:22:27:ef:94:ed:9f:d6:d8:8b:f1: 18:df:cd:be:08:58:df:5d:30:ac:0d:71:40:3c:9f:11:68:93: 65:61:35:f1:77:29:4f:e0:3b:97:90:b3:3b:76:ec:0b:9c:a7: f3:5e:ff:7a:f0:70:64:f2:92:09:e5:b3:d4:a6:23:78:89:c1: d5:93:44:14:69:27:a3:28:62:60:06:c0:d9:af:20:18:aa:f9: c2:ad:f5:a6:92:13:3c:30:80:c5:c3:58:86:ce:75:30:d5:18: 74:18:3c:75:5e:69:b2:34:34:6f:7f:15:4a:88:eb:5b:be:1f: e5:7b:6c:28:50:9d:63:60:00:22:8b:4d:57:c6:89:3a:4f:e9: 6b:46:04:39:af:69:60:45:b6:d5:c8:88:d2:61:70:b5:bf:36: 19:f6:a1:6f:2a:49:5e:da:41:4a:2c:9d:1b:ae:e9:6f:d7:3a: 45:9e:76:dc:61:68:73:ba:d9:4d:80:e1:d3:10:b0:ca:c6:2b: fe:c9:d2:c6:ae:97:5e:5c:fb:7c:69:46:5b:d2:0e:25:a3:4b: 9c:1d:b6:52:1a:bb:c7:12:cf:5f:e5:8f:69:1c:12:b0:e9:11: a5:06:7b:f2:8a:40:4d:4c:5a:8c:c2:f6:7c:21:cc:c8:6d:d7: dc:d1:52:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp4BCRfjA1T0z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OTgyZWQ4MTAtYmM3Ny00MmRmLTliYzAtMjU2ZDAzNjk3Mjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgmtTBKkuOBlzoczXrKMqE3rSkzJnRgYINHY uc7/XMFmgaI5xNz5WiU4iwFT93xMNbcT8JHah+b/NZLdT0P4Rgtbd76ola9xE9TO UgM0IW48m5BIhGiDML/Bap4cABwDoHmMT1Z3VIaQpfuZfh/sZYD9cs2eYXe/zsjo +Gh+vAqG45WEgbfZt1Jas+uir1IygswF/4L0FUmST8e8qSuu75Oo/K92tA2PR2RF Jsg/SRc97Y0u293wFw665NzFsVSeDFzEyPg/KAs9f+1Slf3MlIfFfKDwGywhSTgR MXP4f3qoQVT7ihkE9XqCwwMWSyaNR0UAu2xxiYYA+PWvLll6ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBR0uZMEthNQn92vk8AhpQpQE2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjJiYzM1OGYtYzg0Mi0z NzljLWFjYjgtYzU5ZDQ5ZmUxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcY8nNA9Z0rIifvlO2f1tiL8Rjfzb4IWN9dMKwNcUA8nxFok2VhNfF3 KU/gO5eQszt27Aucp/Ne/3rwcGTykgnls9SmI3iJwdWTRBRpJ6MoYmAGwNmvIBiq +cKt9aaSEzwwgMXDWIbOdTDVGHQYPHVeabI0NG9/FUqI61u+H+V7bChQnWNgACKL TVfGiTpP6WtGBDmvaWBFttXIiNJhcLW/Nhn2oW8qSV7aQUosnRuu6W/XOkWedtxh aHO62U2A4dMQsMrGK/7J0saul15c+3xpRlvSDiWjS5wdtlIau8cSz1/lj2kcErDp EaUGe/KKQE1MWozC9nwhzMht19zRUgk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:28 2025 by rpki-client