$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa File: e0a983e4-3360-3f43-af95-dfcb084edaa1.roa (raw, json) Hash identifier: 7vmddLjFAPaeLHW/k1Aof6m/J53OS2Mzmbfz3htwOyQ= Subject key identifier: 2B:88:87:E9:E9:2D:89:74:24:56:A4:AF:AF:80:AB:CE:1C:48:30:EB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C25E98120AE46DDFD4FA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:25:e9:81:20:ae:46:dd:fd:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=15ebb4f6-daf0-4b70-b204-c57f86145050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:ba:f5:21:75:19:d6:74:d0:62:73:80:3a: ae:43:da:10:54:fe:a4:bd:64:20:c7:ec:c8:78:44: d5:e4:87:7a:1e:1b:9d:67:a0:82:0e:85:72:55:65: c9:ed:bd:62:f7:8b:72:14:3e:03:20:e7:54:62:e8: 62:0c:f9:ff:5b:fe:e4:85:1d:a0:60:9a:e2:c2:a0: 08:16:f5:85:a1:67:3e:8e:cb:a7:61:2c:c0:2b:0a: c9:bf:a0:aa:c9:57:78:06:03:c5:e5:29:b8:6a:44: 50:e3:e9:87:67:57:ff:4d:60:a7:08:21:de:4c:26: a3:a6:5e:08:40:e1:c7:97:7b:a8:a6:69:e0:c4:10: b9:30:77:07:8a:cb:12:0c:b3:13:85:23:ba:8f:3d: e4:6f:75:6c:b3:80:32:9d:10:90:ee:29:ad:48:8b: f3:e7:21:d9:ac:0b:5b:1d:0a:d0:2b:12:8b:3b:71: 4f:58:e4:90:85:88:1e:05:de:3d:4b:17:7c:97:f7: 35:af:51:d4:ac:20:27:58:6a:2b:f1:4a:e3:ca:55: 65:e1:63:43:cb:2d:25:ed:74:53:36:35:88:80:27: da:a3:45:2e:73:62:8b:94:bf:3b:0e:5d:7a:1d:5d: a1:4c:6f:c2:ad:50:44:bc:99:33:5f:91:26:fb:7d: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:88:87:E9:E9:2D:89:74:24:56:A4:AF:AF:80:AB:CE:1C:48:30:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3e:d1:90:3f:72:cd:0e:6b:ce:6c:ae:5c:c2:fc:2c:62:1f: 2c:53:4b:1e:b6:eb:ad:04:80:0b:1b:f5:cc:72:d7:76:50:54: 01:dc:1c:dc:2c:37:44:f4:cd:d5:ad:7c:32:ed:84:c1:14:4b: 23:cb:0c:e8:f8:f4:68:05:3d:3d:05:42:54:b0:bb:89:c8:71: c8:48:9d:6b:68:77:47:d4:d6:72:45:35:c6:77:8e:94:47:d2: 39:ba:e9:a8:95:e7:06:20:80:04:56:61:55:f1:41:90:7d:09: 54:66:41:0d:12:bc:31:65:a7:92:2f:bc:d4:21:9d:05:b4:9e: 12:fd:65:06:9c:f9:8f:70:9d:12:9b:1f:22:52:44:ec:44:43: bb:e3:e0:e1:b0:00:71:0c:46:67:16:12:cd:aa:dc:41:b4:e5: 6e:f0:83:33:c7:1e:01:3d:9a:bc:b8:77:39:0e:2b:a7:db:54: 77:08:a2:64:d0:df:02:f5:49:6e:73:43:ce:13:d5:d5:d9:61: 53:77:50:6a:53:33:46:d4:b5:d7:67:ea:da:5a:fd:95:27:ca: 14:e7:55:24:93:1c:b9:2c:09:15:d3:25:43:ff:bf:91:f9:b5: 95:f3:28:52:b4:b0:e1:e7:b2:a4:a1:95:b2:b9:ae:d2:46:5b: c9:ed:93:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCXpgSCuRt39T6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTVlYmI0ZjYtZGFmMC00YjcwLWIyMDQtYzU3Zjg2MTQ1MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHW69SF1GdZ00GJzgDquQ9oQVP6kvWQgx+zI eETV5Id6HhudZ6CCDoVyVWXJ7b1i94tyFD4DIOdUYuhiDPn/W/7khR2gYJriwqAI FvWFoWc+jsunYSzAKwrJv6CqyVd4BgPF5Sm4akRQ4+mHZ1f/TWCnCCHeTCajpl4I QOHHl3uopmngxBC5MHcHissSDLMThSO6jz3kb3Vss4AynRCQ7imtSIvz5yHZrAtb HQrQKxKLO3FPWOSQhYgeBd49Sxd8l/c1r1HUrCAnWGor8UrjylVl4WNDyy0l7XRT NjWIgCfao0Uuc2KLlL87Dl16HV2hTG/CrVBEvJkzX5Em+31V0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuIh+npLYl0JFakr6+Aq84cSDDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTBhOTgzZTQtMzM2MC0z ZjQzLWFmOTUtZGZjYjA4NGVkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ+0ZA/cs0Oa85srlzC/CxiHyxTSx62660EgAsb9cxy13ZQVAHcHNws N0T0zdWtfDLthMEUSyPLDOj49GgFPT0FQlSwu4nIcchInWtod0fU1nJFNcZ3jpRH 0jm66aiV5wYggARWYVXxQZB9CVRmQQ0SvDFlp5IvvNQhnQW0nhL9ZQac+Y9wnRKb HyJSROxEQ7vj4OGwAHEMRmcWEs2q3EG05W7wgzPHHgE9mry4dzkOK6fbVHcIomTQ 3wL1SW5zQ84T1dXZYVN3UGpTM0bUtddn6tpa/ZUnyhTnVSSTHLksCRXTJUP/v5H5 tZXzKFK0sOHnsqShlbK5rtJGW8ntk/Y= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:40 2025 by rpki-client