$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa File: c849a306-4c2a-3fc3-b123-c6713222f536.roa (raw, json) Hash identifier: 7QVErOsDlly7gG8CdBP2HBQLibysGeimAoLtBRr09VU= Subject key identifier: DC:51:51:CA:30:FE:5E:F1:9D:AA:2E:38:68:BE:56:CB:F4:B8:10:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC6AB530D15DB434B440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:6a:b5:30:d1:5d:b4:34:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=ac446caf-4299-4784-ab0e-83458c4c200f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:11:90:66:94:bd:80:1c:c7:4b:94:e7:47: 7d:9f:c7:30:16:bf:8a:b7:26:76:5f:90:29:2c:ad: 02:85:8d:97:85:06:b4:92:7c:da:20:bf:48:d9:a5: e4:8c:66:06:9b:64:5c:3f:fe:b1:e8:6c:4c:9e:1d: 19:7f:45:9a:d1:58:ca:ea:83:68:92:17:ad:4a:6c: 7d:b6:f4:80:64:1e:06:0b:8d:eb:58:b8:44:a0:5d: aa:d1:20:18:28:71:a1:aa:eb:5b:bc:53:8b:e8:95: d0:a6:05:b4:9f:68:25:13:02:24:b2:60:91:b7:b4: b0:f8:04:a6:68:9b:e4:ca:eb:14:3e:0a:c2:3b:7f: e4:c8:81:0e:ac:d6:05:6c:c0:5f:b9:f6:76:b3:8c: 80:6b:1c:6d:53:31:7e:bb:53:3b:5a:48:c4:ad:56: 88:f6:bd:a0:1f:00:3c:2b:5a:d8:7f:3f:a1:b0:74: e6:28:92:b6:11:df:c9:81:65:e2:81:6c:43:27:fa: 63:fc:79:9b:05:7e:d0:ef:19:f9:f6:8d:fd:49:4a: d9:0f:7c:99:0d:3b:fe:32:6b:d9:8e:af:33:ba:7e: 7d:f2:e9:b5:56:f9:e2:af:32:a1:24:ba:5f:64:61: ed:1d:54:6e:fe:97:f4:c1:d4:9e:4b:24:22:91:da: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:51:CA:30:FE:5E:F1:9D:AA:2E:38:68:BE:56:CB:F4:B8:10:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d5:1c:63:a6:d6:e7:99:90:fd:d5:20:01:fd:70:a4:f5:f6: 17:13:ab:b7:4b:55:ba:80:2c:fa:22:ed:d0:40:49:21:2b:e8: ad:7b:b0:f2:16:f1:a9:c1:ea:41:2b:4a:e2:63:6e:34:61:bc: 7e:a2:19:01:5d:45:e0:a2:53:5a:db:0f:d4:f2:aa:b1:19:08: 76:f5:67:53:bc:56:5a:0f:7f:b8:37:85:4a:03:f6:04:ea:ce: 9f:fd:17:d6:6c:cb:4a:6e:6f:39:1c:e3:a0:c3:21:37:ee:55: 5f:11:a1:20:9e:92:0f:63:a2:f2:7d:e0:bd:c1:5c:40:fa:9b: 7b:62:6e:36:b3:45:5f:e0:dc:b6:c2:62:46:0f:91:50:6f:0e: d9:f3:df:f7:ae:f2:93:08:16:eb:8f:a3:b6:0b:3c:1f:a2:d4: c5:dd:0e:c8:e7:3e:c3:78:7d:41:c1:a7:63:35:a2:f1:ba:91: 6e:70:fb:b6:ed:ff:7c:19:c2:ad:00:af:39:47:79:df:36:1a: 66:b6:95:68:eb:bf:aa:16:b9:db:15:e1:c8:9b:be:e6:d3:42: 1d:08:f4:a6:5a:f5:fa:b4:80:81:8d:dd:a3:63:be:bb:e8:5d: 76:20:26:3a:54:e0:40:a4:00:3f:da:2c:b7:f6:cb:16:7e:08: da:89:bd:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBexqtTDRXbQ0tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk YWM0NDZjYWYtNDI5OS00Nzg0LWFiMGUtODM0NThjNGMyMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYoRkGaUvYAcx0uU50d9n8cwFr+KtyZ2X5Ap LK0ChY2XhQa0knzaIL9I2aXkjGYGm2RcP/6x6GxMnh0Zf0Wa0VjK6oNokhetSmx9 tvSAZB4GC43rWLhEoF2q0SAYKHGhqutbvFOL6JXQpgW0n2glEwIksmCRt7Sw+ASm aJvkyusUPgrCO3/kyIEOrNYFbMBfufZ2s4yAaxxtUzF+u1M7WkjErVaI9r2gHwA8 K1rYfz+hsHTmKJK2Ed/JgWXigWxDJ/pj/HmbBX7Q7xn59o39SUrZD3yZDTv+MmvZ jq8zun598um1VvnirzKhJLpfZGHtHVRu/pf0wdSeSyQikdoyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxRUcow/l7xnaouOGi+Vsv0uBBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg0OWEzMDYtNGMyYS0z ZmMzLWIxMjMtYzY3MTMyMjJmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjVHGOm1ueZkP3VIAH9cKT19hcTq7dLVbqALPoi7dBASSEr6K17sPIW 8anB6kErSuJjbjRhvH6iGQFdReCiU1rbD9TyqrEZCHb1Z1O8VloPf7g3hUoD9gTq zp/9F9Zsy0pubzkc46DDITfuVV8RoSCekg9jovJ94L3BXED6m3tibjazRV/g3LbC YkYPkVBvDtnz3/eu8pMIFuuPo7YLPB+i1MXdDsjnPsN4fUHBp2M1ovG6kW5w+7bt /3wZwq0ArzlHed82Gma2lWjrv6oWudsV4cibvubTQh0I9KZa9fq0gIGN3aNjvrvo XXYgJjpU4ECkAD/aLLf2yxZ+CNqJvaw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:33 2025 by rpki-client