$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: g/cEtUhmt/mls26SbwVWHy8oh7QyUOdmWftoAM8OzmQ= Subject key identifier: 5A:C6:FC:E2:54:9E:B0:C0:58:6F:95:57:14:94:A4:3C:77:EE:7B:B5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D90608FC28F821C83BC84C8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:60:8f:c2:8f:82:1c:83:bc:84:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=afe206d1-9778-42f7-9a5c-6bfa074ae28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:a4:43:ca:c7:1f:27:d9:d7:1d:22:9f:87: 0e:71:86:64:be:62:87:46:ae:6d:0f:29:eb:e0:c4: fa:ba:a8:ef:b2:b3:f1:ed:2d:3e:45:73:28:a3:53: ce:8b:20:9e:96:ff:bb:ed:59:ff:3d:99:3f:bf:d9: c9:f4:15:e2:e4:80:f4:bd:48:a4:9a:71:6d:f8:53: 6e:0c:0e:55:ca:e9:d6:98:13:a5:84:ec:c1:37:60: 84:df:e3:52:11:e4:68:db:03:25:8c:40:65:cc:38: 03:63:97:f9:d9:db:21:b6:93:6a:bd:a4:70:aa:00: e7:9a:8e:ab:c7:bc:d8:56:8b:87:ce:d1:ef:34:61: 8e:75:58:a1:09:ac:60:8b:f1:b6:32:7d:b7:7f:97: 0e:57:b9:40:fe:d5:1b:0e:c0:e1:12:3e:cd:45:a0: 66:60:cb:b8:a6:7e:5a:02:89:10:09:0a:18:bd:be: 7e:37:2c:77:16:13:2f:0f:39:8b:ea:5e:37:a2:06: e7:ec:0a:cb:8c:44:e9:41:bc:46:f8:90:1e:a4:73: be:8f:71:27:89:03:e0:c9:ab:27:a7:a0:18:74:65: 9e:d1:67:9b:b2:35:fc:33:b0:68:e4:e3:78:87:90: 59:e2:ba:5d:15:0f:86:0a:56:b8:13:e0:93:c6:1e: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:FC:E2:54:9E:B0:C0:58:6F:95:57:14:94:A4:3C:77:EE:7B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d0:3f:ff:6d:a6:5c:db:0b:34:89:d6:f0:5a:e3:ff:d8:73: 92:fa:09:00:8b:92:26:c7:e7:3d:3a:1e:26:70:ef:47:6f:16: 7e:78:4e:f1:45:00:3f:ab:8d:da:49:78:6a:96:b3:39:92:6f: 47:f2:f2:73:80:35:1d:70:cb:7f:ad:86:f1:12:73:0a:59:d7: 1b:51:24:dd:f6:8e:ee:64:21:8b:e0:cb:91:1f:d2:6f:2d:09: 2c:9b:44:a6:a9:d7:0c:47:c6:42:0c:aa:dd:92:cc:8c:b2:17: f2:e9:48:8c:f1:f0:f6:0b:18:5b:3e:94:95:78:ec:97:5c:40: ec:28:61:b2:43:fd:36:c0:78:5e:60:b2:5f:6f:b0:57:4a:c5: 34:3c:8b:57:7d:2b:1b:03:41:6f:0d:4a:df:63:ce:35:55:48: 2c:2c:65:4c:7a:ca:1b:95:8e:07:d7:ee:e4:07:6b:30:6f:ed: cc:69:c5:27:54:72:08:e3:6a:79:bc:45:10:6e:e9:16:35:e1: 6d:c6:4a:3f:52:12:1b:8c:b5:c9:f3:a7:39:e4:c5:15:40:20: ee:2a:b3:e4:23:a0:79:18:27:fa:96:19:c3:29:48:a9:ac:a9: d5:9e:fa:3b:58:3c:a5:35:d4:46:f5:61:7d:d3:b6:5c:0c:28: 9d:06:fd:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGCPwo+CHIO8hMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk YWZlMjA2ZDEtOTc3OC00MmY3LTlhNWMtNmJmYTA3NGFlMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYukQ8rHHyfZ1x0in4cOcYZkvmKHRq5tDynr 4MT6uqjvsrPx7S0+RXMoo1POiyCelv+77Vn/PZk/v9nJ9BXi5ID0vUikmnFt+FNu DA5VyunWmBOlhOzBN2CE3+NSEeRo2wMljEBlzDgDY5f52dshtpNqvaRwqgDnmo6r x7zYVouHztHvNGGOdVihCaxgi/G2Mn23f5cOV7lA/tUbDsDhEj7NRaBmYMu4pn5a AokQCQoYvb5+Nyx3FhMvDzmL6l43ogbn7ArLjETpQbxG+JAepHO+j3EniQPgyasn p6AYdGWe0WebsjX8M7Bo5ON4h5BZ4rpdFQ+GCla4E+CTxh5MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrG/OJUnrDAWG+VVxSUpDx37nu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLQP/9tplzbCzSJ1vBa4//Yc5L6CQCLkibH5z06HiZw70dvFn54TvFF AD+rjdpJeGqWszmSb0fy8nOANR1wy3+thvEScwpZ1xtRJN32ju5kIYvgy5Ef0m8t CSybRKap1wxHxkIMqt2SzIyyF/LpSIzx8PYLGFs+lJV47JdcQOwoYbJD/TbAeF5g sl9vsFdKxTQ8i1d9KxsDQW8NSt9jzjVVSCwsZUx6yhuVjgfX7uQHazBv7cxpxSdU cgjjanm8RRBu6RY14W3GSj9SEhuMtcnzpznkxRVAIO4qs+QjoHkYJ/qWGcMpSKms qdWe+jtYPKU11Eb1YX3TtlwMKJ0G/ek= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:39 2025 by rpki-client