$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa File: f5b719d4-4447-35da-a6f8-e4663027e94d.roa (raw, json) Hash identifier: Zb/1+nd4yt1ipKAD48So6taQkX0AwLWO/19pMb3PbL4= Subject key identifier: C5:52:BD:62:ED:15:81:51:6B:DA:20:25:26:A4:87:C2:CD:45:AE:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EB0C80570D34C65AD100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.153.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:eb:0c:80:57:0d:34:c6:5a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=da578535-28ff-4255-8707-0843e371fc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:8b:0b:70:59:f0:d2:b2:88:59:17:d3:93: 25:35:e2:24:aa:ab:c5:fb:a4:81:21:77:97:1c:c1: 1a:a8:9d:89:6f:b9:c6:99:6f:50:69:8e:a6:97:9a: dc:c0:9c:fc:3c:dc:5b:17:69:37:70:ef:d1:76:b2: d0:4f:7b:83:7e:69:ee:aa:2d:29:81:21:da:4a:69: d1:b8:9d:7e:05:9e:dc:5a:84:a6:27:f6:d3:04:9b: 02:a4:3e:8e:db:7d:4f:43:8b:3a:c6:90:a0:ab:ea: 61:2e:b5:c4:20:28:d2:ab:cb:a5:c2:3b:21:24:64: 6a:3a:2c:c4:80:fa:da:d1:8d:91:97:e8:73:95:10: b4:17:10:6b:09:1d:bc:56:c5:b5:66:2a:40:1e:10: 36:9c:f3:b2:3b:9e:91:be:35:03:d2:a3:7c:4d:4a: 70:ea:e9:eb:fe:7c:41:da:fa:55:14:6a:8b:e0:82: 05:2c:88:99:f6:46:e5:b0:cf:ea:98:2d:14:f7:c0: 85:d6:de:c3:07:a1:79:b3:33:b6:57:55:84:f8:74: 5b:38:cf:73:f0:c8:39:f5:cf:a3:91:85:da:d9:3b: e7:96:f3:a4:c4:c5:22:cf:21:1c:21:0c:e7:b3:9b: 75:75:42:4f:2f:c0:f9:2e:69:fc:3e:90:d8:b5:3d: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:BD:62:ED:15:81:51:6B:DA:20:25:26:A4:87:C2:CD:45:AE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2a:b9:d1:3a:8b:a4:cf:52:68:5a:7f:91:93:e0:9a:de:a5: 7f:d7:86:3a:20:c0:2d:30:c1:86:7a:4e:78:a4:dd:77:03:30: 42:c2:4a:4b:2d:3c:0f:49:99:c2:d6:35:b1:a0:43:c3:ae:37: 08:1f:3b:c2:1e:92:15:3a:74:91:aa:74:f0:a1:d1:fc:bc:1d: 53:4b:6f:dd:52:88:e5:87:54:8f:e2:47:dd:68:6c:be:33:e6: db:5d:e4:ea:29:fb:71:99:f7:3d:25:41:fa:f7:d6:b9:61:01: da:94:a9:18:75:d0:78:5a:a3:03:71:6e:54:38:46:69:de:60: 37:a9:09:fe:1f:48:2a:a2:c2:d8:9a:a0:49:f1:52:13:19:aa: 4e:2e:3e:ff:c7:69:4e:9c:a4:45:32:cc:ba:9e:f2:4a:6f:ad: 54:7e:ae:7d:68:0c:0f:70:39:c3:07:90:9f:fa:32:43:23:74: 0b:7e:cb:26:86:b3:01:d3:5e:1c:b9:74:d5:db:c7:a3:49:05: d3:67:24:60:39:64:52:45:58:96:9b:dc:8b:41:21:9f:6f:7f: f7:df:2a:14:c3:c8:16:fb:27:e8:eb:30:bf:6b:3d:26:fe:25: be:c6:ae:dc:c4:9f:02:58:bd:5c:96:63:81:f9:6b:17:99:da: 68:06:e7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBesMgFcNNMZa0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZGE1Nzg1MzUtMjhmZi00MjU1LTg3MDctMDg0M2UzNzFmYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYmLC3BZ8NKyiFkX05MlNeIkqqvF+6SBIXeX HMEaqJ2Jb7nGmW9QaY6ml5rcwJz8PNxbF2k3cO/RdrLQT3uDfmnuqi0pgSHaSmnR uJ1+BZ7cWoSmJ/bTBJsCpD6O231PQ4s6xpCgq+phLrXEICjSq8ulwjshJGRqOizE gPra0Y2Rl+hzlRC0FxBrCR28VsW1ZipAHhA2nPOyO56RvjUD0qN8TUpw6unr/nxB 2vpVFGqL4IIFLIiZ9kblsM/qmC0U98CF1t7DB6F5szO2V1WE+HRbOM9z8Mg59c+j kYXa2TvnlvOkxMUizyEcIQzns5t1dUJPL8D5Lmn8PpDYtT2DNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVSvWLtFYFRa9ogJSakh8LNRa56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjViNzE5ZDQtNDQ0Ny0z NWRhLWE2ZjgtZTQ2NjMwMjdlOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUqudE6i6TPUmhaf5GT4JrepX/XhjogwC0wwYZ6Tnik3XcDMELCSkst PA9JmcLWNbGgQ8OuNwgfO8IekhU6dJGqdPCh0fy8HVNLb91SiOWHVI/iR91obL4z 5ttd5Oop+3GZ9z0lQfr31rlhAdqUqRh10HhaowNxblQ4RmneYDepCf4fSCqiwtia oEnxUhMZqk4uPv/HaU6cpEUyzLqe8kpvrVR+rn1oDA9wOcMHkJ/6MkMjdAt+yyaG swHTXhy5dNXbx6NJBdNnJGA5ZFJFWJab3ItBIZ9vf/ffKhTDyBb7J+jrML9rPSb+ Jb7GrtzEnwJYvVyWY4H5axeZ2mgG5+Q= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:10 2025 by rpki-client