$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: Srne5ERIEkisv+r5GNoH4LYLk11C2fFvGT+v5vU9LXU= Subject key identifier: AD:F9:02:16:B8:27:B2:69:FF:6E:F3:5E:F4:CA:02:2A:AC:D7:63:7C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848530B069DFDECBC5DFD3D2E20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0b:06:9d:fd:ec:bc:5d:fd:3d:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=2606b6b4-6972-4ef3-981b-97f101673790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:a5:37:13:8b:6e:39:04:cf:73:46:d2:b4: 2a:1b:40:a7:1c:0a:f4:12:cc:9e:b0:64:1b:d1:9e: 1b:c8:67:93:32:e9:77:3a:85:e9:71:13:46:9f:25: 4a:6d:1b:c7:7c:7b:57:72:6b:e7:d1:33:04:5a:35: 77:69:1e:5d:13:2f:27:8e:4c:e5:0b:46:19:c8:7d: c2:f5:af:28:33:ce:a2:1c:26:62:1a:23:41:d2:5b: 41:24:b4:df:51:03:63:6e:33:c6:a0:5d:65:ad:25: d5:21:9a:95:65:06:8d:b7:6f:05:a8:da:75:94:5d: b5:f6:af:ea:26:7b:49:79:47:80:6c:4f:c9:34:a3: 6b:fc:0e:2d:5f:5c:31:71:fd:08:cc:ce:fb:2d:fc: ac:a0:fc:7b:fe:a6:80:a7:8f:2c:5f:3f:34:0d:9f: 66:70:56:1d:33:30:a1:64:ee:65:83:76:df:24:df: 6a:6a:e9:a8:3e:e0:ec:25:bd:da:1c:00:8c:48:69: 82:08:c2:61:3d:e3:d1:42:41:fd:a7:2b:a3:ef:02: dc:be:af:7b:18:5a:d6:6a:d2:5c:96:fc:12:3f:96: d3:cf:66:b8:0c:4d:dd:c7:e1:71:19:55:c8:ff:63: 2d:88:41:77:b1:9f:38:b8:4c:6d:58:f6:cb:47:dc: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:02:16:B8:27:B2:69:FF:6E:F3:5E:F4:CA:02:2A:AC:D7:63:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f3:88:7d:47:ad:eb:5e:be:c1:25:cb:d7:1c:60:03:1c:84: 92:65:b0:31:7f:19:a7:0c:ba:ec:02:c5:af:ee:ce:52:85:bf: c1:00:40:ba:7a:ec:13:8c:9d:2b:1f:ff:18:bc:88:86:04:f4: 45:b6:5a:f7:17:0b:4c:4c:b9:a4:94:bf:8e:c0:9f:05:f0:a2: 70:45:a8:2d:8b:d0:00:50:68:8c:b1:c3:0d:08:50:7d:75:d0: 8f:43:2c:f3:7f:02:78:8d:db:3b:8f:27:dd:b4:d3:92:06:5d: 88:ae:42:63:e4:6b:00:40:cd:ae:dc:da:12:f1:5e:69:1f:d5: 80:f6:33:c7:aa:46:8c:04:4b:67:da:a8:1d:49:1e:60:0d:8c: 7b:bb:be:2d:56:b7:20:50:99:4a:0e:86:2b:c7:ce:02:01:e0: 26:16:3d:fd:c2:28:f4:1d:10:4b:30:18:83:28:d0:52:b1:8e: 10:ca:d4:5f:61:08:69:47:d1:30:10:0f:2c:7f:9c:f9:99:bb: a6:8f:f9:eb:47:9e:e0:3f:67:12:a7:f8:93:1a:cb:78:42:4b: aa:91:64:24:45:2d:76:b3:66:1a:6d:d2:fe:c5:bf:01:1c:2d: d4:ec:39:da:ac:ef:a3:e8:34:45:9f:bc:6e:d2:97:ca:23:41: 39:10:e7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwad/ey8Xf09LiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjYwNmI2YjQtNjk3Mi00ZWYzLTk4MWItOTdmMTAxNjczNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5elNxOLbjkEz3NG0rQqG0CnHAr0EsyesGQb 0Z4byGeTMul3OoXpcRNGnyVKbRvHfHtXcmvn0TMEWjV3aR5dEy8njkzlC0YZyH3C 9a8oM86iHCZiGiNB0ltBJLTfUQNjbjPGoF1lrSXVIZqVZQaNt28FqNp1lF219q/q JntJeUeAbE/JNKNr/A4tX1wxcf0IzM77LfysoPx7/qaAp48sXz80DZ9mcFYdMzCh ZO5lg3bfJN9qaumoPuDsJb3aHACMSGmCCMJhPePRQkH9pyuj7wLcvq97GFrWatJc lvwSP5bTz2a4DE3dx+FxGVXI/2MtiEF3sZ84uExtWPbLR9z4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK35Aha4J7Jp/27zXvTKAiqs12N8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLziH1HretevsEly9ccYAMchJJlsDF/GacMuuwCxa/uzlKFv8EAQLp6 7BOMnSsf/xi8iIYE9EW2WvcXC0xMuaSUv47AnwXwonBFqC2L0ABQaIyxww0IUH11 0I9DLPN/AniN2zuPJ92005IGXYiuQmPkawBAza7c2hLxXmkf1YD2M8eqRowES2fa qB1JHmANjHu7vi1WtyBQmUoOhivHzgIB4CYWPf3CKPQdEEswGIMo0FKxjhDK1F9h CGlH0TAQDyx/nPmZu6aP+etHnuA/ZxKn+JMay3hCS6qRZCRFLXazZhpt0v7FvwEc LdTsOdqs76PoNEWfvG7Sl8ojQTkQ58c= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:53 2025 by rpki-client