$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json) Hash identifier: XoCR4Mjj/lXxuV/DLmngN2zwwXYzzm6FlvJaoRvMuZM= Subject key identifier: CF:13:DE:3F:F6:A3:59:B7:0C:31:B4:9D:00:03:7F:6C:EB:98:06:6A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E0069E37CF09AA9926130180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9e:37:cf:09:aa:99:26:13:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=3e7a5257-ffd0-450f-881b-99a5a5fb3619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:05:b6:b7:dc:7b:9b:8f:e6:8c:56:a2:d8:b3: c9:25:79:66:2e:6f:aa:c8:54:61:11:5d:97:df:93: f9:ca:04:2a:07:f9:32:22:ed:51:de:cf:1a:d3:5c: 54:9d:46:f5:eb:58:47:1e:2e:e6:20:10:11:8e:2b: 96:19:44:75:42:f5:9c:6c:2a:82:66:f7:81:3c:2d: 2b:b5:fb:78:c7:12:e9:27:09:6a:5a:f8:11:fb:89: 9b:b6:e1:f7:9b:28:1b:2f:b6:62:f6:6f:1b:76:e4: 92:a3:a3:a1:9d:8a:4f:df:aa:64:8e:f0:6a:3b:25: 93:5f:b2:87:61:a2:4a:d9:00:95:94:a4:3b:6f:13: c6:fb:9e:19:16:91:58:ce:79:c7:a1:d0:ee:08:93: 28:58:26:de:37:51:70:f7:4b:8f:99:1b:4a:c9:56: 8c:40:dd:61:cc:80:77:b9:5b:4a:65:fc:50:60:9b: b9:31:44:d7:56:c6:f5:5f:a1:56:96:bb:a0:45:fc: af:8e:9f:c3:cf:9f:c4:b8:02:2f:9c:5a:82:ba:29: fa:9c:75:34:83:0c:22:f9:c0:fb:7b:e4:4a:ea:b2: 00:de:1f:93:40:d3:6a:f5:38:ab:70:84:b4:3c:32: ec:48:c7:fe:14:6f:12:03:25:13:7c:9a:e9:8f:63: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:13:DE:3F:F6:A3:59:B7:0C:31:B4:9D:00:03:7F:6C:EB:98:06:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7e:c6:a1:d4:77:e5:92:21:7f:f5:6a:0e:91:8a:cc:e8:f7: ef:53:fc:95:33:6d:d0:6c:60:31:27:15:fa:f6:86:f7:aa:99: 4a:fc:46:dd:9c:ec:93:b3:5d:f6:77:eb:61:46:64:45:21:43: 45:e6:78:31:e4:2f:da:35:6d:f2:f2:38:b6:04:97:8d:ee:25: 66:fd:a6:21:3c:ac:bc:7b:11:b2:08:d7:c0:d9:eb:f7:29:38: 58:55:6a:48:9c:84:f9:7e:46:99:29:67:4a:3b:f1:65:02:1d: f0:2a:63:8a:a0:40:14:c1:62:83:a9:b7:92:c3:f1:b9:a9:93: d3:77:26:73:4c:c1:a7:8f:3e:75:bc:db:72:09:19:0b:d7:f2: 11:e8:d9:22:91:17:a5:93:69:5b:34:f2:40:dc:8c:cf:f7:58: 99:d5:a4:65:1d:f1:43:5b:3a:4d:dc:d7:71:f7:c0:6e:6d:fd: 45:b2:4f:31:f9:f0:03:37:6b:8b:d1:93:57:52:60:fe:ca:91: be:b0:b3:d8:ed:3d:02:93:53:60:11:a2:e2:19:3a:62:60:08: 3b:bf:c3:52:92:f7:f3:4f:b5:76:c3:e7:c6:25:48:97:28:85: 75:e6:e9:38:59:99:ac:c9:43:68:ab:1b:9b:07:58:66:86:2e: 02:a3:86:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp43zwmqmSYTAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk M2U3YTUyNTctZmZkMC00NTBmLTg4MWItOTlhNWE1ZmIzNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQW2t9x7m4/mjFai2LPJJXlmLm+qyFRhEV2X 35P5ygQqB/kyIu1R3s8a01xUnUb161hHHi7mIBARjiuWGUR1QvWcbCqCZveBPC0r tft4xxLpJwlqWvgR+4mbtuH3mygbL7Zi9m8bduSSo6OhnYpP36pkjvBqOyWTX7KH YaJK2QCVlKQ7bxPG+54ZFpFYznnHodDuCJMoWCbeN1Fw90uPmRtKyVaMQN1hzIB3 uVtKZfxQYJu5MUTXVsb1X6FWlrugRfyvjp/Dz5/EuAIvnFqCuin6nHU0gwwi+cD7 e+RK6rIA3h+TQNNq9TircIS0PDLsSMf+FG8SAyUTfJrpj2OduwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8T3j/2o1m3DDG0nQADf2zrmAZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg3MThlNTYtNzk0YS0z OTdkLTgwZDYtMzM0ZTlmZDNlODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh+xqHUd+WSIX/1ag6Riszo9+9T/JUzbdBsYDEnFfr2hveqmUr8Rt2c 7JOzXfZ362FGZEUhQ0XmeDHkL9o1bfLyOLYEl43uJWb9piE8rLx7EbII18DZ6/cp OFhVakichPl+RpkpZ0o78WUCHfAqY4qgQBTBYoOpt5LD8bmpk9N3JnNMwaePPnW8 23IJGQvX8hHo2SKRF6WTaVs08kDcjM/3WJnVpGUd8UNbOk3c13H3wG5t/UWyTzH5 8AM3a4vRk1dSYP7Kkb6ws9jtPQKTU2ARouIZOmJgCDu/w1KS9/NPtXbD58YlSJco hXXm6ThZmazJQ2irG5sHWGaGLgKjhgk= -----END CERTIFICATE-----Generated at Sun Apr 27 14:49:35 2025 by rpki-client