$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa File: f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa (raw, json) Hash identifier: 5SeUIwsKQz+QUgzB1vyno74BT+RNntkcYzOfHcLjg40= Subject key identifier: C5:24:11:DE:A4:62:F8:00:37:9F:32:E4:71:90:DE:23:D8:1A:68:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC4B43423B39591D43C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:4b:43:42:3b:39:59:1d:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=bcd0608c-877c-4653-8f7b-ecba2e63f172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:1c:12:fb:ca:7c:1d:6e:82:20:a3:b2:e3: e7:39:b6:81:c6:cc:96:61:2d:3c:b6:28:23:79:e2: 91:6a:84:51:15:c9:52:12:5a:39:8f:d9:b3:45:a5: b3:e9:a5:c8:35:7c:9e:c3:1e:ba:52:f0:05:06:54: cd:fa:c6:f4:50:94:76:e9:b2:da:23:c6:f6:fa:c1: 77:75:59:65:e2:10:44:b6:bc:45:80:f8:a2:8e:e7: 2b:e2:24:68:a1:1a:10:47:dd:ec:2d:e0:1d:93:45: f8:ec:a2:0a:39:1b:63:25:23:00:e1:ac:74:ba:77: f0:92:de:78:8d:76:be:1d:e2:89:15:8b:b6:25:2b: 01:51:7f:e6:75:14:82:20:be:8e:c3:db:92:01:3a: cd:0b:67:a3:a9:bb:3a:47:4b:52:a6:5d:cc:a4:7b: 92:e4:36:e9:4c:30:9e:6d:6b:43:d3:7d:e6:4f:0e: ad:a8:7c:0c:3c:74:2a:db:c9:c0:86:33:c8:77:99: 61:b9:71:78:08:5e:03:0c:f5:97:39:fd:15:f1:ca: af:62:e2:44:d2:ea:99:f9:0f:0b:6c:34:48:f3:46: 03:53:71:e2:ab:7d:0d:d7:bf:ca:9f:98:05:ea:9a: 71:96:a4:6e:be:98:00:51:63:d8:fe:52:91:b1:ae: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:24:11:DE:A4:62:F8:00:37:9F:32:E4:71:90:DE:23:D8:1A:68:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f23f5204-3dae-3cd7-a838-dc6e9e0e0684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a4:58:84:b3:92:e1:de:18:65:72:48:2b:95:87:07:25:28: 0a:3c:c3:ed:96:3f:ef:f3:4d:2f:0b:c8:50:aa:32:24:1a:44: 24:ce:24:d4:6f:e8:7e:36:3e:4c:f1:2d:20:e5:03:f6:fd:0e: b5:03:8b:27:a2:e4:6b:0a:3a:77:fb:e4:55:67:ef:0c:a0:d3: 73:34:1b:85:db:ea:aa:67:84:4d:52:97:15:69:2b:a5:d0:cb: e7:32:20:d3:56:1a:59:32:8d:9c:7c:f5:a5:98:2c:7c:88:3f: f8:ca:0a:7e:79:76:26:a7:ab:c3:f9:a8:8c:68:17:40:0b:3a: 82:21:f2:a8:2c:c5:3e:9a:ae:13:a6:d2:e2:5f:8c:1c:26:7c: 75:48:70:e0:8f:20:aa:84:e2:cd:c0:86:bb:f3:ab:cf:9f:33: 11:98:07:13:d1:f0:85:80:0f:a9:02:46:cb:f8:03:01:3e:62: 51:2b:b5:63:06:24:73:78:fa:8b:7d:7a:e4:4a:94:2f:74:ea: cc:37:d9:33:bc:d3:54:72:b1:07:a2:8d:f2:0b:4a:e2:f0:36: 0b:b7:63:0e:63:1a:ef:1c:33:8a:d1:4d:cd:e7:cd:1a:97:4c: 05:d9:cf:dc:f9:47:6a:09:34:92:33:63:89:01:60:84:7d:dc: 43:6a:fe:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBexLQ0I7OVkdQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk YmNkMDYwOGMtODc3Yy00NjUzLThmN2ItZWNiYTJlNjNmMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpgcEvvKfB1ugiCjsuPnObaBxsyWYS08tigj eeKRaoRRFclSElo5j9mzRaWz6aXINXyewx66UvAFBlTN+sb0UJR26bLaI8b2+sF3 dVll4hBEtrxFgPiijucr4iRooRoQR93sLeAdk0X47KIKORtjJSMA4ax0unfwkt54 jXa+HeKJFYu2JSsBUX/mdRSCIL6Ow9uSATrNC2ejqbs6R0tSpl3MpHuS5DbpTDCe bWtD033mTw6tqHwMPHQq28nAhjPId5lhuXF4CF4DDPWXOf0V8cqvYuJE0uqZ+Q8L bDRI80YDU3Hiq30N17/Kn5gF6ppxlqRuvpgAUWPY/lKRsa5vIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUkEd6kYvgAN58y5HGQ3iPYGmhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjIzZjUyMDQtM2RhZS0z Y2Q3LWE4MzgtZGM2ZTllMGUwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKkWISzkuHeGGVySCuVhwclKAo8w+2WP+/zTS8LyFCqMiQaRCTOJNRv 6H42PkzxLSDlA/b9DrUDiyei5GsKOnf75FVn7wyg03M0G4Xb6qpnhE1SlxVpK6XQ y+cyINNWGlkyjZx89aWYLHyIP/jKCn55dianq8P5qIxoF0ALOoIh8qgsxT6arhOm 0uJfjBwmfHVIcOCPIKqE4s3Ahrvzq8+fMxGYBxPR8IWAD6kCRsv4AwE+YlErtWMG JHN4+ot9euRKlC906sw32TO801RysQeijfILSuLwNgu3Yw5jGu8cM4rRTc3nzRqX TAXZz9z5R2oJNJIzY4kBYIR93ENq/iM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:45 2025 by rpki-client