$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa File: e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa (raw, json) Hash identifier: vFzy9ZCG3EeYNoWzVrtVJwmdpS5xcAKn1O1z7AvJH6s= Subject key identifier: 77:98:4C:B7:47:22:AB:72:40:EF:46:F2:94:AD:6F:78:42:E0:C7:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC90AC49DD27279DC600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:90:ac:49:dd:27:27:9d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=6fe77a15-3478-4b29-bb99-aafcb4e639c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:6a:ba:00:7d:56:ba:48:98:ac:7e:85:8f: b8:26:f5:36:b2:fb:b0:cc:37:b4:03:b2:28:99:7f: 18:3b:13:c1:07:af:b9:ad:48:8f:40:92:80:37:94: 2c:64:f4:ec:13:e4:d9:d5:86:e9:6e:13:96:1f:6a: ae:49:34:ef:e8:8d:1a:0f:db:a6:96:02:4a:d0:d6: fd:f6:eb:79:6b:8e:99:b6:57:0d:b9:cc:52:82:9b: 02:84:bf:31:24:ec:c8:5c:e6:9b:ae:8d:9d:a9:8f: 2e:1e:7a:3f:5a:7e:6b:e0:86:12:45:f5:79:0a:52: 83:4f:d0:c1:5d:60:8b:62:5c:40:b3:41:1a:45:a2: 9a:73:fc:d6:40:76:fe:34:b3:20:2f:68:01:fa:a5: 22:f3:36:5f:f0:70:7d:34:47:25:4a:3f:db:ad:7f: 1b:e3:15:f0:3b:1b:01:ed:63:bb:1b:a4:3b:28:b4: 8f:f9:ab:28:cb:2a:9c:ad:aa:d6:c3:09:20:81:7c: bc:8d:e3:51:38:3b:87:bd:62:63:76:04:0f:9d:09: 73:e5:e2:08:5d:f0:ba:39:76:e9:01:55:e2:c4:69: f4:9d:76:89:96:dc:66:b3:ae:01:19:a2:a4:2e:b7: ab:28:aa:52:52:eb:28:75:93:46:1f:54:ac:b6:b2: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:4C:B7:47:22:AB:72:40:EF:46:F2:94:AD:6F:78:42:E0:C7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e77af2fe-13f4-311e-ab3d-b9fd1b61d29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:77:01:03:e4:12:f1:d6:e5:70:be:a7:ea:21:95:b7:d9:27: 90:74:de:20:1d:dd:68:12:53:29:94:fa:11:69:68:44:0f:5c: 4a:f0:35:c6:14:8d:a2:16:5d:ed:7d:1d:10:d4:c3:03:14:a9: 65:07:82:f4:5b:e1:20:3b:3b:44:5e:07:6a:25:97:45:3c:68: f4:9d:5b:ab:cd:65:10:42:2f:8d:de:f2:5e:51:3c:d8:7a:0d: 70:10:09:59:70:83:1b:75:d3:d0:19:f2:2b:57:3f:7d:87:7f: 41:fd:2f:49:f7:a7:2e:45:93:61:6a:51:25:9f:89:63:f4:7b: 77:e3:1a:9b:7e:fa:8c:28:5b:1e:59:03:ad:de:56:a2:75:bd: ec:fc:0c:64:d9:f4:c8:39:3f:f9:fc:22:cf:b4:9b:73:9b:d3: a6:c8:54:3f:2c:b2:f9:a2:9f:7b:9e:51:84:86:99:05:7a:de: f7:26:62:46:13:88:6d:ae:cc:a4:c8:42:13:18:da:82:e0:bd: 0d:57:d0:fc:e8:f8:ca:52:82:d7:34:11:94:9a:66:5a:37:bc: 7f:1e:97:6e:0e:5c:32:42:5c:ab:76:e4:76:00:0f:1e:2d:ad: 29:0b:b4:af:6b:f2:6a:f4:29:34:1a:aa:d5:1b:98:16:fb:b6: 42:81:24:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBeyQrEndJyedxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk NmZlNzdhMTUtMzQ3OC00YjI5LWJiOTktYWFmY2I0ZTYzOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA1qugB9VrpImKx+hY+4JvU2svuwzDe0A7Io mX8YOxPBB6+5rUiPQJKAN5QsZPTsE+TZ1YbpbhOWH2quSTTv6I0aD9umlgJK0Nb9 9ut5a46ZtlcNucxSgpsChL8xJOzIXOabro2dqY8uHno/Wn5r4IYSRfV5ClKDT9DB XWCLYlxAs0EaRaKac/zWQHb+NLMgL2gB+qUi8zZf8HB9NEclSj/brX8b4xXwOxsB 7WO7G6Q7KLSP+asoyyqcrarWwwkggXy8jeNRODuHvWJjdgQPnQlz5eIIXfC6OXbp AVXixGn0nXaJltxms64BGaKkLrerKKpSUusodZNGH1SstrKP2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeYTLdHIqtyQO9G8pStb3hC4MeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTc3YWYyZmUtMTNmNC0z MTFlLWFiM2QtYjlmZDFiNjFkMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx3AQPkEvHW5XC+p+ohlbfZJ5B03iAd3WgSUymU+hFpaEQPXErwNcYU jaIWXe19HRDUwwMUqWUHgvRb4SA7O0ReB2oll0U8aPSdW6vNZRBCL43e8l5RPNh6 DXAQCVlwgxt109AZ8itXP32Hf0H9L0n3py5Fk2FqUSWfiWP0e3fjGpt++owoWx5Z A63eVqJ1vez8DGTZ9Mg5P/n8Is+0m3Ob06bIVD8ssvmin3ueUYSGmQV63vcmYkYT iG2uzKTIQhMY2oLgvQ1X0Pzo+MpSgtc0EZSaZlo3vH8el24OXDJCXKt25HYADx4t rSkLtK9r8mr0KTQaqtUbmBb7tkKBJOE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:17 2025 by rpki-client