$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa File: b500f9ea-1f0a-3934-963e-3f57b3b70047.roa (raw, json) Hash identifier: RGs2buJSu19bCaoY20QLxX/5XsAXJ7kEEGWb4Mw2wio= Subject key identifier: 2F:D9:8A:FF:3D:56:CB:78:74:1B:83:FD:36:D5:37:2A:44:CD:60:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848DA71024B0D881BB083811380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:02:4b:0d:88:1b:b0:83:81:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b42c394e-1595-4a11-92ca-cdd45181b44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:2c:10:b1:a1:da:d2:d8:84:65:b3:9b:77: a1:65:22:69:98:e0:16:6c:6f:91:3d:37:1b:f2:63: 8c:23:f1:e8:b9:cd:11:8d:11:6c:ae:93:c8:39:a2: bc:71:0e:fe:7f:ad:a2:9c:9b:fa:cc:a6:fd:53:ea: af:3e:e1:cb:a6:3b:77:dd:e9:3c:3e:4b:29:0b:c2: 36:ef:bf:39:a2:eb:7c:27:3c:77:ab:32:90:ed:b4: b4:00:04:1d:48:96:ca:c1:25:8a:d3:4e:f8:09:fd: df:85:3e:d8:ac:e7:cb:d5:a8:2e:d1:c2:9f:46:36: 0c:5c:a9:79:f4:24:ba:96:ce:f8:fd:32:2e:85:a9: 9a:13:12:02:ba:e6:34:c4:7c:e3:6f:27:7c:b3:d4: f5:99:1f:92:35:11:13:f2:f9:7e:22:c3:71:8a:a6: 15:0f:da:19:5c:0d:fc:9b:6e:fc:a0:c2:c4:9f:d6: d8:a8:ae:4e:15:51:66:25:7c:37:9a:5f:31:6a:c6: d7:47:44:b7:f8:49:37:3d:2f:05:64:0d:3b:7e:97: 2b:66:21:61:af:e5:8b:fd:27:3d:23:03:cb:8a:4c: 3d:50:19:9f:31:8c:11:83:fa:dd:46:e8:d8:ad:b5: 89:8d:bc:ec:9e:b2:c0:45:48:f9:13:b7:8c:9a:e8: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D9:8A:FF:3D:56:CB:78:74:1B:83:FD:36:D5:37:2A:44:CD:60:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:db:bd:24:13:61:51:63:18:51:f7:86:01:87:af:a4:ab:e7: 03:3a:7a:f4:83:e4:ff:d4:aa:b7:5a:38:b3:ff:2b:b7:ee:fb: 40:d3:44:06:4a:ec:58:e6:0f:d8:16:e4:9e:f0:65:4b:d6:99: 08:ee:a4:9b:f8:72:2f:91:91:be:f8:60:2a:58:6a:56:c6:dc: f4:1c:4a:56:57:fc:b4:bc:cb:f3:85:9c:44:98:f2:ce:21:24: d4:57:07:49:f1:8a:22:c9:3a:d9:7a:7c:2c:25:10:e6:e0:26: 9c:42:c0:05:60:57:40:85:56:bc:6d:76:61:02:7d:d1:e4:6c: 52:77:97:2a:52:af:48:3d:01:46:7f:7f:ca:54:50:1f:f2:a4: f1:92:7e:18:7f:36:8b:8e:f8:70:06:92:b3:72:0d:8b:59:01: 28:1c:04:fb:d0:97:4b:de:96:cc:11:ca:58:d0:4c:e2:f5:cc: d5:1b:df:33:e1:30:e2:79:6e:3a:33:f6:b2:e6:45:55:76:16: cc:4e:44:5a:27:9c:51:aa:72:12:29:6d:fb:53:e5:e1:4b:1f: 98:9b:01:bb:ed:4e:23:af:36:65:ac:82:e7:ab:96:65:46:d7: 61:29:3d:2a:d6:77:d7:c8:4d:d3:70:75:83:7a:15:db:26:cd: 06:55:8f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQJLDYgbsIOBE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjQyYzM5NGUtMTU5NS00YTExLTkyY2EtY2RkNDUxODFiNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCYsELGh2tLYhGWzm3ehZSJpmOAWbG+RPTcb 8mOMI/Houc0RjRFsrpPIOaK8cQ7+f62inJv6zKb9U+qvPuHLpjt33ek8PkspC8I2 7785out8Jzx3qzKQ7bS0AAQdSJbKwSWK0074Cf3fhT7YrOfL1agu0cKfRjYMXKl5 9CS6ls74/TIuhamaExICuuY0xHzjbyd8s9T1mR+SNRET8vl+IsNxiqYVD9oZXA38 m278oMLEn9bYqK5OFVFmJXw3ml8xasbXR0S3+Ek3PS8FZA07fpcrZiFhr+WL/Sc9 IwPLikw9UBmfMYwRg/rdRujYrbWJjbzsnrLARUj5E7eMmuh3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/Ziv89Vst4dBuD/TbVNypEzWBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUwMGY5ZWEtMWYwYS0z OTM0LTk2M2UtM2Y1N2IzYjcwMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnbvSQTYVFjGFH3hgGHr6Sr5wM6evSD5P/UqrdaOLP/K7fu+0DTRAZK 7FjmD9gW5J7wZUvWmQjupJv4ci+Rkb74YCpYalbG3PQcSlZX/LS8y/OFnESY8s4h JNRXB0nxiiLJOtl6fCwlEObgJpxCwAVgV0CFVrxtdmECfdHkbFJ3lypSr0g9AUZ/ f8pUUB/ypPGSfhh/NouO+HAGkrNyDYtZASgcBPvQl0velswRyljQTOL1zNUb3zPh MOJ5bjoz9rLmRVV2FsxORFonnFGqchIpbftT5eFLH5ibAbvtTiOvNmWsguerlmVG 12EpPSrWd9fITdNwdYN6FdsmzQZVj6A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:44 2025 by rpki-client