$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: n1m8UdgxKmtudxxljbO/dfPI9cbzdGThGnYn7TXY/s4= Subject key identifier: 8E:A6:ED:DE:BA:DF:0E:E5:A0:46:ED:67:5F:0E:E6:DF:9A:19:E0:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E0069E2B53039A2EB18B04C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9e:2b:53:03:9a:2e:b1:8b:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=697318e0-00d4-4abc-b16f-fb5b848e16b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:87:40:e6:97:2d:36:67:6e:b8:a9:06:db: 0f:f6:aa:8b:56:a4:20:9e:66:91:82:78:42:a8:54: 47:b8:24:c5:86:b9:ef:75:6f:8d:3a:73:ef:6c:99: e3:a8:cc:5e:db:c5:7b:79:47:94:1d:fe:5c:d1:d2: 36:ea:8d:30:41:55:16:20:5b:c0:f3:f6:97:00:17: 51:3a:34:2f:85:9c:d1:63:f7:74:02:70:29:14:ab: d8:c8:50:2f:5a:7e:6c:ee:23:36:0f:72:7a:80:4a: e5:d5:82:d2:9c:6c:bd:86:e8:13:bb:01:b4:9f:7a: 9e:e1:2b:a0:d8:b2:a2:01:80:e2:d6:ed:07:d0:59: 5b:b1:7c:1a:92:e6:9b:25:bd:6b:67:e8:00:b6:ad: c3:53:5e:ed:56:de:a6:ea:8b:4b:e9:47:49:ad:75: 8f:91:c9:2a:f3:7b:ae:3a:8b:7c:4a:63:5e:1f:a5: c7:44:54:9d:d2:7a:bf:9a:fa:64:1f:ad:2f:27:8f: 5f:20:63:3e:c9:f6:d7:32:b6:65:d0:01:3f:65:1b: fa:46:06:0e:b0:64:fa:58:c5:5b:e0:67:07:58:ad: 5b:be:5b:db:5a:5c:ba:ac:49:51:6a:93:fa:8a:a9: cd:88:cb:b5:a7:96:63:b4:11:bf:7f:9f:33:d8:d6: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:ED:DE:BA:DF:0E:E5:A0:46:ED:67:5F:0E:E6:DF:9A:19:E0:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:02:32:50:14:72:7e:89:1f:e1:7d:9b:a9:38:30:3d:67:79: 5c:f8:7b:d2:b9:b2:36:a9:bb:aa:10:88:95:5e:bf:4d:8a:31: 02:9e:21:db:fc:3a:70:4b:45:c2:2d:50:91:ac:33:36:0e:0a: c2:9f:26:29:ec:4d:f7:ad:a6:9b:58:84:54:9b:8e:fc:29:68: 1b:7b:b6:86:ab:e3:61:dd:62:57:7b:cb:bf:95:a4:75:f2:67: 10:2a:4d:73:5b:64:3d:4b:b6:a5:f3:a0:33:83:eb:c5:34:bd: 9d:c0:04:c1:52:f8:97:92:f4:a8:01:76:af:36:25:13:ca:df: db:c2:e2:38:95:ca:96:fc:3f:6e:d0:34:91:8d:39:d2:52:6f: 69:c6:98:36:00:4a:98:e6:85:f4:b1:67:d2:dd:6b:04:e3:29: 91:83:0e:2f:62:73:3e:47:e7:33:85:ee:df:cc:85:25:61:ee: 99:97:a7:63:fd:b7:95:c8:51:dd:e9:b5:20:ae:da:a7:6a:1e: 81:81:9a:4f:d0:a2:bf:49:7a:c9:f4:94:6b:ba:de:d6:1f:b7: f8:be:93:eb:a6:22:87:e8:1d:c9:14:68:16:7e:ae:0e:58:1d: cd:28:c7:20:50:1b:c9:40:ee:0f:cf:f6:b8:8e:3e:f2:e5:ba: 01:22:08:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp4rUwOaLrGLBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk Njk3MzE4ZTAtMDBkNC00YWJjLWIxNmYtZmI1Yjg0OGUxNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJOHQOaXLTZnbripBtsP9qqLVqQgnmaRgnhC qFRHuCTFhrnvdW+NOnPvbJnjqMxe28V7eUeUHf5c0dI26o0wQVUWIFvA8/aXABdR OjQvhZzRY/d0AnApFKvYyFAvWn5s7iM2D3J6gErl1YLSnGy9hugTuwG0n3qe4Sug 2LKiAYDi1u0H0FlbsXwakuabJb1rZ+gAtq3DU17tVt6m6otL6UdJrXWPkckq83uu Oot8SmNeH6XHRFSd0nq/mvpkH60vJ49fIGM+yfbXMrZl0AE/ZRv6RgYOsGT6WMVb 4GcHWK1bvlvbWly6rElRapP6iqnNiMu1p5ZjtBG/f58z2Na2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6m7d663w7loEbtZ18O5t+aGeBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFECMlAUcn6JH+F9m6k4MD1neVz4e9K5sjapu6oQiJVev02KMQKeIdv8 OnBLRcItUJGsMzYOCsKfJinsTfetpptYhFSbjvwpaBt7toar42HdYld7y7+VpHXy ZxAqTXNbZD1LtqXzoDOD68U0vZ3ABMFS+JeS9KgBdq82JRPK39vC4jiVypb8P27Q NJGNOdJSb2nGmDYASpjmhfSxZ9LdawTjKZGDDi9icz5H5zOF7t/MhSVh7pmXp2P9 t5XIUd3ptSCu2qdqHoGBmk/Qor9Jesn0lGu63tYft/i+k+umIofoHckUaBZ+rg5Y Hc0oxyBQG8lA7g/P9riOPvLlugEiCKM= -----END CERTIFICATE-----Generated at Mon Apr 28 02:05:29 2025 by rpki-client