$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa File: db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa (raw, json) Hash identifier: RIY+bnWGkh9IqFPbkL6Fh2E2zS9I23EpKyaDwXIrhvQ= Subject key identifier: 70:4B:93:C3:34:2B:5A:3D:40:95:C7:CB:5D:85:5C:B4:BF:A1:6E:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486530436D6D203451BA76DC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:43:6d:6d:20:34:51:ba:76:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=045e5be7-2551-41ea-8405-839dcbf1d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:1d:55:88:fb:08:49:60:b8:f0:18:63:13: 0b:00:83:c2:76:25:0c:e0:ad:aa:85:70:bc:ec:b4: 04:c5:66:72:05:99:1b:51:b3:12:e9:a0:8e:3c:f2: 44:ab:98:79:9f:91:aa:17:48:79:d9:c0:4a:66:93: 20:70:d2:34:41:e8:06:a8:f8:46:20:3a:ba:8e:a4: 8e:8e:75:d0:f6:60:09:fe:ad:06:2d:25:48:62:f5: ca:53:c1:a2:72:fd:29:58:77:58:1f:89:0d:c4:87: 9f:4c:9b:f5:09:46:13:f3:4e:e1:d9:54:b5:61:6a: 8e:50:b9:1b:38:0c:3a:25:e6:9b:5c:c6:58:b5:ed: 12:4c:7c:66:d3:ae:88:e1:f3:b5:90:bf:a6:14:93: 40:31:d3:ed:36:4c:69:ba:d3:cc:c6:44:c4:a5:a5: 87:f2:5e:99:65:2d:8c:ec:34:a9:bf:af:a2:d5:77: 21:ff:17:7b:de:96:e4:ec:8a:17:ed:27:b6:82:90: b2:19:7e:91:7c:6a:62:5b:c2:c9:b4:17:ce:b8:79: ab:90:0a:e2:d9:9b:2c:ac:24:3d:fd:f3:e4:ff:77: 10:23:5b:87:43:4d:1f:e3:ad:8a:af:a4:e4:b7:dc: 70:27:9d:e5:da:ef:5e:b9:39:1b:b9:5c:e0:cf:19: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:93:C3:34:2B:5A:3D:40:95:C7:CB:5D:85:5C:B4:BF:A1:6E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:6b:48:f7:01:8b:94:fa:87:44:35:a8:87:cb:30:1a:78: 6e:b2:0d:ea:d6:01:9b:b3:f4:19:36:18:4a:46:99:c4:78:e3: 25:04:ba:8b:b8:05:ed:b5:f2:e3:c2:24:de:8e:41:3f:5a:b5: 1c:ad:33:89:33:2b:19:4a:b3:39:ad:4c:69:0e:17:f8:b3:96: 67:3e:cc:a7:5d:b3:e5:41:bb:7e:e3:21:f3:7a:f6:bc:da:06: 0b:98:76:cf:18:a5:fb:42:34:b7:c2:5e:9f:b6:5e:df:ed:b2: 28:d8:4b:de:bd:15:15:f9:b3:af:a8:48:ee:3e:2d:ec:49:3c: 8b:a0:da:2a:94:e0:b7:63:ae:8e:b9:54:1e:c6:90:56:46:3b: c8:d9:4a:ae:83:9b:91:0a:b8:bd:c8:6b:0f:f9:c7:44:46:e5: 11:1b:2d:3e:c3:0f:a6:cf:37:ab:df:54:cd:17:7a:27:69:f2: d7:9d:74:e3:ef:9b:92:95:88:3c:25:71:95:66:81:63:97:40: 81:dd:77:1e:65:48:b9:d7:4b:52:1f:35:42:48:cc:c5:83:91: 6e:48:08:5a:de:94:d7:b1:89:e0:21:13:25:92:52:51:92:8b: 2e:80:a6:a9:87:c4:4b:01:27:8c:57:17:d7:d9:62:4f:d4:d4: 20:d6:5b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMENtbSA0Ubp23IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk MDQ1ZTViZTctMjU1MS00MWVhLTg0MDUtODM5ZGNiZjFkODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfkdVYj7CElguPAYYxMLAIPCdiUM4K2qhXC8 7LQExWZyBZkbUbMS6aCOPPJEq5h5n5GqF0h52cBKZpMgcNI0QegGqPhGIDq6jqSO jnXQ9mAJ/q0GLSVIYvXKU8Gicv0pWHdYH4kNxIefTJv1CUYT807h2VS1YWqOULkb OAw6JeabXMZYte0STHxm066I4fO1kL+mFJNAMdPtNkxputPMxkTEpaWH8l6ZZS2M 7DSpv6+i1Xch/xd73pbk7IoX7Se2gpCyGX6RfGpiW8LJtBfOuHmrkAri2ZssrCQ9 /fPk/3cQI1uHQ00f462Kr6Tkt9xwJ53l2u9euTkbuVzgzxl52wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBLk8M0K1o9QJXHy12FXLS/oW5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI0ZTRmNmEtZDY5NC0z MmE3LWIyZTEtZjRkNGVlOTdjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ya0j3AYuU+odENaiHyzAaeG6yDerWAZuz9Bk2GEpGmcR44yUEuou4 Be218uPCJN6OQT9atRytM4kzKxlKszmtTGkOF/izlmc+zKdds+VBu37jIfN69rza BguYds8YpftCNLfCXp+2Xt/tsijYS969FRX5s6+oSO4+LexJPIug2iqU4Ldjro65 VB7GkFZGO8jZSq6Dm5EKuL3Iaw/5x0RG5REbLT7DD6bPN6vfVM0Xeidp8teddOPv m5KViDwlcZVmgWOXQIHddx5lSLnXS1IfNUJIzMWDkW5ICFrelNexieAhEyWSUlGS iy6ApqmHxEsBJ4xXF9fZYk/U1CDWW1Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:32 2025 by rpki-client