$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa File: d0a7225f-2047-3944-a23d-469eab9df0ec.roa (raw, json) Hash identifier: xvpL3e8mkotifMHGQTCETiOMJgZWChAA6Yzk/3OQixk= Subject key identifier: 1D:AE:78:5D:BE:3A:BF:CE:04:F0:C7:30:72:13:3E:3E:77:E3:9F:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486530442EF33DC08084A16B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:44:2e:f3:3d:c0:80:84:a1:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=1cab66ad-8d08-4655-9c97-f4e0010d3c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:e4:8d:dc:4c:de:5b:02:ff:84:51:2c:e0: 01:9f:13:98:1f:2c:c6:57:10:3b:72:15:02:6b:bc: 5c:f0:ca:79:0c:ba:27:93:8a:dc:12:4b:99:88:33: fc:40:e3:ea:9b:e1:4a:1c:0d:ca:dc:1a:d8:05:ee: b9:36:57:04:36:6a:d5:7b:17:13:4a:c6:aa:ae:03: d8:63:21:11:fc:fe:7a:7e:f8:f0:a0:83:d5:1e:51: 7e:18:7b:e2:a9:3f:0a:da:07:7d:38:88:dc:76:28: fb:0f:eb:b0:cd:5a:7e:37:a4:ef:4c:4e:4b:0d:de: 4b:3b:45:d7:99:80:7d:f2:a6:a2:84:27:74:ed:84: 1e:8e:a7:a0:47:e7:28:35:1f:b7:48:7e:66:b3:fd: 6a:cd:0e:05:c9:59:63:35:cc:e2:2e:83:0b:5c:28: 8d:23:b8:c1:6f:ff:95:4c:e3:a0:ab:4a:f7:6a:43: fb:32:32:02:37:06:23:d8:08:cf:a9:d5:8a:68:1a: 61:a9:bc:1b:da:ef:12:8d:46:d2:0d:93:ae:59:8b: 08:84:a2:b0:1e:5b:b4:92:17:50:a0:a6:57:68:1c: 34:d1:50:3d:a6:18:c0:a0:00:2d:b9:68:62:88:39: a1:75:6b:0a:5a:8b:61:54:5e:f6:48:0d:d1:31:d4: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:78:5D:BE:3A:BF:CE:04:F0:C7:30:72:13:3E:3E:77:E3:9F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e3:27:8c:ba:0d:eb:80:44:02:75:2f:da:36:b5:55:19:aa: c5:36:43:eb:df:64:62:9b:80:b6:65:67:28:e5:2f:d7:2f:8c: 65:b4:35:1f:c3:b9:9a:30:42:c0:20:62:d0:3f:5f:39:5c:d0: 92:10:1d:8f:cb:70:19:6c:fe:71:78:fe:a1:15:35:0a:ce:e8: af:5b:1e:c2:64:1c:56:8a:63:48:5f:d8:08:10:5a:29:a2:c8: 1d:c0:c1:1b:52:fe:50:71:3d:f2:e1:86:04:83:7a:a3:75:4e: c2:16:97:12:db:0a:fa:ef:92:42:d1:f0:56:da:9d:37:95:ad: 73:78:95:22:53:b3:c8:a3:4a:0a:c0:1f:81:8c:3e:a2:e1:25: 86:81:d7:67:38:4f:dd:7b:df:76:13:f7:85:11:86:19:a5:f7: 39:24:2b:f7:59:73:de:73:bd:08:84:f8:d6:8d:5a:cc:e1:06: 6f:d7:a4:15:4e:e1:e1:e1:57:d2:79:e5:dd:de:72:20:db:00: 18:f2:cf:7c:ea:19:d0:8b:1f:cb:b8:dc:d2:56:31:4a:fe:7a: 8b:da:4e:0f:d0:6a:ba:df:36:31:5e:fb:fb:0c:1d:08:9d:2d: 00:13:9e:de:3c:6b:ac:08:c5:83:fe:6d:b1:30:60:55:ff:1e: 88:53:1e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEQu8z3AgIShawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MWNhYjY2YWQtOGQwOC00NjU1LTljOTctZjRlMDAxMGQzYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA7kjdxM3lsC/4RRLOABnxOYHyzGVxA7chUC a7xc8Mp5DLonk4rcEkuZiDP8QOPqm+FKHA3K3BrYBe65NlcENmrVexcTSsaqrgPY YyER/P56fvjwoIPVHlF+GHviqT8K2gd9OIjcdij7D+uwzVp+N6TvTE5LDd5LO0XX mYB98qaihCd07YQejqegR+coNR+3SH5ms/1qzQ4FyVljNcziLoMLXCiNI7jBb/+V TOOgq0r3akP7MjICNwYj2AjPqdWKaBphqbwb2u8SjUbSDZOuWYsIhKKwHlu0khdQ oKZXaBw00VA9phjAoAAtuWhiiDmhdWsKWothVF72SA3RMdSgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2ueF2+Or/OBPDHMHITPj5345/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDBhNzIyNWYtMjA0Ny0z OTQ0LWEyM2QtNDY5ZWFiOWRmMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnjJ4y6DeuARAJ1L9o2tVUZqsU2Q+vfZGKbgLZlZyjlL9cvjGW0NR/D uZowQsAgYtA/Xzlc0JIQHY/LcBls/nF4/qEVNQrO6K9bHsJkHFaKY0hf2AgQWimi yB3AwRtS/lBxPfLhhgSDeqN1TsIWlxLbCvrvkkLR8FbanTeVrXN4lSJTs8ijSgrA H4GMPqLhJYaB12c4T91733YT94URhhml9zkkK/dZc95zvQiE+NaNWszhBm/XpBVO 4eHhV9J55d3eciDbABjyz3zqGdCLH8u43NJWMUr+eovaTg/QarrfNjFe+/sMHQid LQATnt48a6wIxYP+bbEwYFX/HohTHk0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:14 2025 by rpki-client