$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa File: e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa (raw, json) Hash identifier: ZXBErDQdPmzym02lDU0ZE4ePdTBiIIMmhX7XVXHHFk8= Subject key identifier: BE:92:A2:D9:3E:4D:54:CB:4E:2B:B2:9F:EC:8E:52:F9:10:80:04:2B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584883E5CA0ADFA8D06C35C08300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 8069 IP address blocks: 20.33.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:ca:0a:df:a8:d0:6c:35:c0:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=f10d8a0b-3805-4e7d-90c2-89920197095d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:e6:83:3e:41:56:ea:95:4a:68:bc:59:54: 29:ff:d2:8e:94:b6:4a:9d:26:1c:72:91:2a:b0:aa: b5:20:06:85:2b:fa:21:e9:66:d6:6e:ae:3d:e9:6d: 3a:c8:f8:64:a0:40:39:b5:2b:43:8f:eb:f4:27:ae: b1:85:bb:91:10:f9:de:a4:75:ac:c9:85:b9:17:f1: ed:c2:62:32:bc:8e:0e:ba:d6:e0:40:c6:ed:05:f1: 19:1a:8b:c1:07:0d:7a:44:d0:11:45:a6:52:b1:7a: c5:3a:5c:0a:eb:11:d3:2f:af:f7:24:9d:01:04:fd: 26:58:87:64:ed:31:57:eb:3e:00:e5:cd:08:d3:bb: 57:f4:39:15:c1:bf:cd:25:b1:b3:79:96:64:48:ce: be:de:5a:66:1e:fb:35:2c:32:84:05:b0:4f:25:a2: 6e:08:b7:64:0f:69:78:b4:b2:95:df:a0:06:3d:d1: 73:f8:b6:c7:33:74:4c:ea:b1:89:c4:a2:86:e6:c1: 66:dc:ea:34:60:cb:fe:6b:bd:94:d9:91:5c:f5:56: a6:94:27:b5:92:e3:e6:ab:15:56:31:04:58:30:73: c0:cf:17:b2:12:f7:a7:d2:73:98:4c:93:e9:f4:b7: 67:91:5a:aa:73:95:bf:1f:c5:b0:80:20:4c:72:8a: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:A2:D9:3E:4D:54:CB:4E:2B:B2:9F:EC:8E:52:F9:10:80:04:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e15108f0-4e7f-3ae2-9d82-42d91cfe5bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4f:c9:62:ce:ef:fd:4e:09:f1:42:db:79:2a:a7:ed:b0:b1: 78:20:38:7d:87:40:46:91:5d:d0:de:d1:28:1e:d0:68:31:71: 95:8d:6b:44:bc:20:4b:be:ac:8b:b2:8f:74:2f:39:a6:d7:1c: 3d:8f:26:b9:6d:d2:e7:f9:e8:bf:cd:4c:02:dc:2a:f9:5c:d5: 68:d3:5c:7b:35:44:fe:9b:2f:80:44:f2:cb:d0:5a:c3:e6:3a: d2:0b:bb:90:13:61:ee:52:c8:88:b7:31:45:0c:ee:ec:1a:10: 86:83:68:e9:c6:26:f0:1c:a1:b7:0b:52:a9:cf:61:40:64:9f: 5e:4b:70:b1:a3:35:7a:45:0e:54:e9:11:d8:a0:86:1a:de:ea: b6:b7:86:fc:8a:f3:58:4f:9d:ba:c0:b6:f0:c4:13:42:35:bc: 04:be:e3:92:75:75:a6:47:41:df:d5:53:51:27:22:cf:02:cb: da:4e:44:f1:74:0c:6a:68:04:71:9a:6f:30:96:96:8c:20:fb: 01:f7:fb:6f:f8:26:18:5d:ba:93:b4:f6:54:ca:72:dc:6b:5d: dc:c3:77:bf:cd:59:30:96:79:78:cd:6e:ab:4d:04:2e:e5:63: 0d:0c:b7:37:63:ea:23:db:79:e2:2a:69:3a:f1:8a:cd:49:54: 71:85:3f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5coK36jQbDXAgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk ZjEwZDhhMGItMzgwNS00ZTdkLTkwYzItODk5MjAxOTcwOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpDmgz5BVuqVSmi8WVQp/9KOlLZKnSYccpEq sKq1IAaFK/oh6WbWbq496W06yPhkoEA5tStDj+v0J66xhbuREPnepHWsyYW5F/Ht wmIyvI4OutbgQMbtBfEZGovBBw16RNARRaZSsXrFOlwK6xHTL6/3JJ0BBP0mWIdk 7TFX6z4A5c0I07tX9DkVwb/NJbGzeZZkSM6+3lpmHvs1LDKEBbBPJaJuCLdkD2l4 tLKV36AGPdFz+LbHM3RM6rGJxKKG5sFm3Oo0YMv+a72U2ZFc9VamlCe1kuPmqxVW MQRYMHPAzxeyEven0nOYTJPp9LdnkVqqc5W/H8WwgCBMcoom2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Sotk+TVTLTiuyn+yOUvkQgAQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE1MTA4ZjAtNGU3Zi0z YWUyLTlkODItNDJkOTFjZmU1YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1PyWLO7/1OCfFC23kqp+2wsXggOH2HQEaRXdDe0Sge0GgxcZWNa0S8 IEu+rIuyj3QvOabXHD2PJrlt0uf56L/NTALcKvlc1WjTXHs1RP6bL4BE8svQWsPm OtILu5ATYe5SyIi3MUUM7uwaEIaDaOnGJvAcobcLUqnPYUBkn15LcLGjNXpFDlTp Edighhre6ra3hvyK81hPnbrAtvDEE0I1vAS+45J1daZHQd/VU1EnIs8Cy9pORPF0 DGpoBHGabzCWlowg+wH3+2/4JhhdupO09lTKctxrXdzDd7/NWTCWeXjNbqtNBC7l Yw0Mtzdj6iPbeeIqaTrxis1JVHGFP7k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:04 2025 by rpki-client