$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa File: df3eb266-c9e2-32ed-8864-322363c13974.roa (raw, json) Hash identifier: Jukj36g9Fkq+oBcQpJGT18i5LATntG0bouxfYDuM0+k= Subject key identifier: D8:79:85:8D:FE:7F:32:27:6A:20:8C:7B:3A:31:DA:99:6C:CE:A1:DB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285840C3494A9BFAA6FDE62E48ED00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa Signing time: Mon 30 Jan 2023 12:00:00 +0000 ROA not before: Mon 30 Jan 2023 12:00:00 +0000 ROA not after: Sun 10 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.157.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:c3:49:4a:9b:fa:a6:fd:e6:2e:48:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 30 12:00:00 2023 GMT Not After : Mar 10 05:00:00 2030 GMT Subject: CN=6d1cc25d-4976-44ff-af0c-0c9d85a55edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:5d:27:bb:c6:61:f8:23:e5:22:cf:80:86: c4:5d:f7:55:10:1c:1f:d2:a3:aa:82:8a:a5:e3:59: 88:a8:5c:4a:ec:d6:69:ae:11:f9:26:dd:cb:e1:fd: ac:f0:c4:3b:7c:41:02:75:b8:e4:3a:fd:2e:d0:09: e8:09:af:95:65:fa:61:1b:3b:0c:f8:f0:b9:f4:9a: 66:1f:05:16:e0:28:82:21:28:ec:57:a0:13:54:51: 97:9b:a7:ab:31:35:ba:2f:07:c0:e1:6c:7a:86:21: 61:52:0b:4f:77:66:5b:c6:69:74:2a:fc:85:d3:fc: 9c:8f:99:ae:7e:9f:78:4e:b5:33:46:ce:5e:1b:0c: d4:a3:89:44:14:4c:03:43:33:05:7e:f6:3c:38:da: c8:e6:8b:e8:85:ad:0a:79:ec:45:5a:2c:ec:e5:9d: cd:eb:95:62:92:8d:89:51:37:5f:28:58:32:af:77: 1b:4a:5d:87:d6:4d:47:eb:7c:d5:97:67:1c:90:c4: 8e:0c:4b:88:65:f4:31:37:68:24:3a:53:a1:80:b5: 7b:ec:6c:4f:25:f1:e5:5e:b8:a1:5f:65:4b:d4:43: ac:7b:7a:70:10:ab:f0:09:ea:36:64:a8:f1:06:59: a4:d8:8b:14:25:61:be:b5:72:fa:3a:22:52:1a:3d: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:79:85:8D:FE:7F:32:27:6A:20:8C:7B:3A:31:DA:99:6C:CE:A1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df3eb266-c9e2-32ed-8864-322363c13974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:29:d5:06:52:db:ea:14:83:9a:74:68:6c:4c:a0:66:a9:54: d7:3b:dd:6c:fa:9e:dd:d0:89:c0:2a:67:ff:d5:4b:de:29:be: 1f:c4:36:de:73:55:c6:97:d7:a7:19:f7:c7:8e:48:55:0b:65: 93:67:7e:db:e2:69:d5:27:48:89:83:6c:07:e8:a3:94:06:16: 57:1d:83:35:87:83:75:43:c8:4b:3c:4d:9f:b0:be:36:a5:3c: 89:ac:da:da:4f:79:86:77:ff:06:1a:3b:b4:64:5e:26:a9:7e: 54:ac:41:c3:0d:a8:12:92:70:d4:98:a0:42:98:c9:3e:a1:11: 46:3a:6f:b1:08:b0:13:dd:75:a8:5c:ee:ab:f2:1c:91:3e:42: f9:ab:91:90:92:4f:c0:b3:fc:71:b9:3a:cf:1e:7c:fa:ce:fe: 04:14:3f:78:f6:52:4c:aa:35:6c:1d:f7:17:01:f6:26:73:17: e2:49:2b:87:4c:8c:4c:37:d5:9e:51:80:30:5f:49:8d:e4:eb: 54:42:76:4c:1d:f1:ea:cc:40:62:f4:24:be:2c:c9:c3:7a:fb: 6f:8a:8e:ab:57:88:48:a2:02:77:8d:37:df:36:ab:35:48:55: 99:da:23:cb:16:cf:6d:18:b7:ea:ae:a6:33:87:eb:e2:85:40: 74:09:13:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDDSUqb+qb95i5I7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIzMDEzMDEyMDAwMFoXDTMwMDMxMDA1MDAwMFowLzEtMCsGA1UEAxMk NmQxY2MyNWQtNDk3Ni00NGZmLWFmMGMtMGM5ZDg1YTU1ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBdJ7vGYfgj5SLPgIbEXfdVEBwf0qOqgoql 41mIqFxK7NZprhH5Jt3L4f2s8MQ7fEECdbjkOv0u0AnoCa+VZfphGzsM+PC59Jpm HwUW4CiCISjsV6ATVFGXm6erMTW6LwfA4Wx6hiFhUgtPd2Zbxml0KvyF0/ycj5mu fp94TrUzRs5eGwzUo4lEFEwDQzMFfvY8ONrI5ovoha0KeexFWizs5Z3N65Viko2J UTdfKFgyr3cbSl2H1k1H63zVl2cckMSODEuIZfQxN2gkOlOhgLV77GxPJfHlXrih X2VL1EOse3pwEKvwCeo2ZKjxBlmk2IsUJWG+tXL6OiJSGj05yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh5hY3+fzInaiCMezox2plszqHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGYzZWIyNjYtYzllMi0z MmVkLTg4NjQtMzIyMzYzYzEzOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAp1QZS2+oUg5p0aGxMoGapVNc73Wz6nt3QicAqZ//VS94pvh/ENt5z VcaX16cZ98eOSFULZZNnftviadUnSImDbAfoo5QGFlcdgzWHg3VDyEs8TZ+wvjal PIms2tpPeYZ3/wYaO7RkXiapflSsQcMNqBKScNSYoEKYyT6hEUY6b7EIsBPddahc 7qvyHJE+QvmrkZCST8Cz/HG5Os8efPrO/gQUP3j2UkyqNWwd9xcB9iZzF+JJK4dM jEw31Z5RgDBfSY3k61RCdkwd8erMQGL0JL4sycN6+2+KjqtXiEiiAneNN982qzVI VZnaI8sWz20Yt+qupjOH6+KFQHQJE7o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:28 2025 by rpki-client