$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa File: f13f890e-5b59-3195-880b-1a8d7832163d.roa (raw, json) Hash identifier: jW++Moa8b0qJua0/ERYOJn8l40MouWeSQfXYvv73rMI= Subject key identifier: 64:23:BF:9B:29:A7:59:E6:96:D4:44:AA:41:1B:61:AA:EA:E3:CD:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848116FFA084FB2CF6731279780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 8069 IP address blocks: 20.33.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:fa:08:4f:b2:cf:67:31:27:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=df58cf46-d0e4-4b84-a7f4-91a2d7dab7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:3c:16:0e:eb:cf:e3:28:ff:15:d2:04:2a: 80:05:5e:47:25:19:32:01:64:79:d0:2a:b4:04:b2: 4b:59:1d:b1:1a:1c:7b:29:0a:ad:1b:cf:a3:0c:c3: 86:43:9d:db:1a:7f:fd:31:17:c2:da:9d:3e:98:3f: 0b:27:b2:83:4f:dc:0d:c2:96:87:34:4c:1b:5e:ad: 75:10:fd:eb:05:9d:63:9f:af:02:01:15:bb:eb:db: cd:6a:32:94:64:fd:bd:01:58:29:ca:88:91:6b:2d: 60:74:01:fd:04:7d:1b:df:b7:f7:98:9b:53:55:77: 9d:b8:02:64:ff:7b:fa:f0:ca:40:a7:43:06:6b:a6: 54:96:a2:d4:df:dc:3a:94:eb:61:ab:bf:7f:e6:d2: a1:38:d7:b6:4b:80:80:63:b4:21:f3:2f:b0:6b:18: 51:93:fe:0c:0d:84:21:4f:77:00:aa:63:bd:39:ae: f2:14:83:fe:f9:90:92:5b:75:15:da:d2:fd:a5:1c: 42:df:ad:67:b5:36:f1:fd:63:f3:89:b6:59:7d:d3: 85:2f:77:20:ab:da:09:1a:58:31:6d:f6:de:d6:42: 86:ef:d9:ab:79:b2:aa:48:10:25:d7:c1:04:bc:15: 10:b3:c8:3d:25:68:06:88:83:4e:be:9e:83:66:b3: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:23:BF:9B:29:A7:59:E6:96:D4:44:AA:41:1B:61:AA:EA:E3:CD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b4:77:91:5f:ce:a4:3c:ff:18:1d:e1:88:07:a9:ae:15:75: bf:73:b2:17:2b:2c:8d:6a:0b:af:c6:bc:fa:bf:28:02:2a:30: 33:36:47:4f:ae:c3:eb:2d:5b:a2:81:2b:6c:31:07:32:69:34: a0:d6:8a:5c:37:59:01:84:38:1d:e6:6c:a1:55:19:93:eb:8e: 1d:12:94:0a:02:de:89:65:f8:53:9d:80:e3:d8:78:e2:c0:ab: 99:14:02:eb:1c:76:af:5a:8f:cc:50:e2:0d:94:5a:95:63:e9: 68:03:eb:ce:c2:db:9c:f7:c0:e0:cb:fb:8c:f0:87:67:2d:fd: 26:6e:99:93:7c:f5:9d:a1:36:a5:4b:f4:b5:ff:dd:7a:38:01: a7:fc:03:da:c6:1e:a5:90:05:1b:73:b2:51:64:04:b7:eb:7d: ce:c6:80:69:7c:19:a4:cf:00:c4:9d:3a:c4:c5:5e:39:bb:c7: 7b:fb:c3:d7:e7:37:4d:e4:dc:d3:a4:8f:89:2b:a2:0c:9e:a3: f6:dc:61:05:60:ea:40:43:81:1d:7c:1a:94:6f:ac:79:67:ef: dd:48:33:d5:d3:27:8f:e1:58:de:8f:f9:4a:42:4d:64:4a:d9: f2:48:77:d6:90:a9:09:14:60:d6:c8:87:3f:cb:a6:be:f4:0f: e8:d6:a0:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb/oIT7LPZzEnl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk ZGY1OGNmNDYtZDBlNC00Yjg0LWE3ZjQtOTFhMmQ3ZGFiN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9k8Fg7rz+Mo/xXSBCqABV5HJRkyAWR50Cq0 BLJLWR2xGhx7KQqtG8+jDMOGQ53bGn/9MRfC2p0+mD8LJ7KDT9wNwpaHNEwbXq11 EP3rBZ1jn68CARW769vNajKUZP29AVgpyoiRay1gdAH9BH0b37f3mJtTVXeduAJk /3v68MpAp0MGa6ZUlqLU39w6lOthq79/5tKhONe2S4CAY7Qh8y+waxhRk/4MDYQh T3cAqmO9Oa7yFIP++ZCSW3UV2tL9pRxC361ntTbx/WPzibZZfdOFL3cgq9oJGlgx bfbe1kKG79mrebKqSBAl18EEvBUQs8g9JWgGiINOvp6DZrPyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQjv5spp1nmltREqkEbYarq481lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjEzZjg5MGUtNWI1OS0z MTk1LTg4MGItMWE4ZDc4MzIxNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe0d5FfzqQ8/xgd4YgHqa4Vdb9zshcrLI1qC6/GvPq/KAIqMDM2R0+u w+stW6KBK2wxBzJpNKDWilw3WQGEOB3mbKFVGZPrjh0SlAoC3oll+FOdgOPYeOLA q5kUAuscdq9aj8xQ4g2UWpVj6WgD687C25z3wODL+4zwh2ct/SZumZN89Z2hNqVL 9LX/3Xo4Aaf8A9rGHqWQBRtzslFkBLfrfc7GgGl8GaTPAMSdOsTFXjm7x3v7w9fn N03k3NOkj4krogyeo/bcYQVg6kBDgR18GpRvrHln791IM9XTJ4/hWN6P+UpCTWRK 2fJId9aQqQkUYNbIhz/Lpr70D+jWoBY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:27 2025 by rpki-client