$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa File: f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa (raw, json) Hash identifier: gLicZXEe6Jb8biGpSl4lzX9Smryhs4LpvoW7L1SyoaE= Subject key identifier: 26:8A:3E:9D:FD:F3:1A:04:72:DA:E4:69:72:92:65:C3:B0:20:7A:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF2939958389A8AFD9480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:93:99:58:38:9a:8a:fd:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=264fa891-b9e0-4714-9d4e-800cb29b5dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:19:66:a9:a7:0a:6e:ba:b6:d3:d9:40:db:b6: 1a:bf:19:72:dc:f6:5c:36:3a:9b:9a:f8:35:61:f0: 1e:13:1b:9d:44:2c:b2:cb:6b:cf:69:d8:a3:09:0e: 38:8a:92:59:94:1e:f5:48:0b:06:9f:fa:1e:73:98: 41:97:85:b5:5a:9a:bd:d3:03:4a:a2:4c:36:87:de: b8:a5:49:3e:48:69:5e:c9:12:9e:b6:98:6e:e2:65: 95:76:c8:ef:cd:72:c0:31:47:72:26:c8:c0:c8:08: 47:e1:21:61:ed:e8:8a:04:bc:a3:9b:12:70:d9:91: 1a:97:1d:76:d4:09:ae:93:c4:f5:e8:76:e2:4f:26: bb:2f:49:c4:7c:18:f5:57:01:f1:56:33:1c:86:ea: 40:06:f6:19:42:b9:4f:0b:d0:e9:2e:47:ab:6e:00: 46:2a:97:a0:d3:21:09:9d:1b:b5:b6:23:2b:5d:a8: e4:8f:80:eb:24:c6:9e:de:de:1b:ec:8b:64:d7:0f: 9d:7c:c2:d0:01:d4:32:42:14:12:1d:89:ac:91:d6: 6e:a0:68:93:f6:d1:16:c2:0f:a5:84:4d:f1:22:2c: 23:f7:b6:e6:11:8c:27:5b:28:25:b0:fd:8b:66:6c: 85:f2:80:d2:dd:6c:cc:0c:5e:08:e2:d3:ff:bb:b5: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:3E:9D:FD:F3:1A:04:72:DA:E4:69:72:92:65:C3:B0:20:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:77:06:ec:ae:6a:45:44:7e:7a:a9:19:43:67:31:77:26:7b: f6:cf:77:74:a2:ae:89:72:fe:88:79:67:e1:46:f9:af:33:56: bf:f8:ea:ab:a9:d8:ee:14:81:c6:b3:4f:b5:1c:66:df:6d:74: 97:d0:67:e0:65:74:2d:07:bc:bc:d8:3c:f6:5d:6e:6f:5f:da: 7a:0e:4d:07:62:fa:da:99:76:d9:dd:d5:bc:9a:94:b5:5b:fa: 6a:a8:86:c5:38:98:64:a9:1f:af:66:7a:9b:54:66:bb:de:9f: 82:2c:ce:66:54:dd:2b:18:3e:46:39:5b:a4:d3:fb:0e:e4:f7: 05:9e:d9:31:cf:7c:43:c4:01:49:72:20:14:b9:97:6c:9b:8d: 1d:0e:96:93:72:a6:3b:a4:3e:4c:6d:50:e9:d2:91:8d:61:a2: a4:08:a1:95:b8:32:9c:ef:e9:e0:da:54:62:0d:62:be:b3:99: 42:27:ec:7b:bb:62:26:ab:c2:ab:70:b2:d2:5f:46:c1:69:97: bc:db:0e:66:64:cb:f4:9b:7f:39:07:8f:11:51:46:31:c9:07: 61:87:b9:e8:1a:d0:b1:89:6e:4d:20:9e:9e:a8:47:f9:75:76: aa:97:53:1a:36:2e:49:c6:86:f6:12:6b:44:dd:fe:f9:0b:6a: 18:0c:90:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvKTmVg4mor9lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk MjY0ZmE4OTEtYjllMC00NzE0LTlkNGUtODAwY2IyOWI1ZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghlmqacKbrq209lA27Yavxly3PZcNjqbmvg1 YfAeExudRCyyy2vPadijCQ44ipJZlB71SAsGn/oec5hBl4W1Wpq90wNKokw2h964 pUk+SGleyRKetphu4mWVdsjvzXLAMUdyJsjAyAhH4SFh7eiKBLyjmxJw2ZEalx12 1Amuk8T16HbiTya7L0nEfBj1VwHxVjMchupABvYZQrlPC9DpLkerbgBGKpeg0yEJ nRu1tiMrXajkj4DrJMae3t4b7Itk1w+dfMLQAdQyQhQSHYmskdZuoGiT9tEWwg+l hE3xIiwj97bmEYwnWyglsP2LZmyF8oDS3WzMDF4I4tP/u7XVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaKPp398xoEctrkaXKSZcOwIHrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjdkNDEwZGItZDdhZS0z NzkxLTljOWMtNDRjNTVhMjQ2NWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV3BuyuakVEfnqpGUNnMXcme/bPd3Siroly/oh5Z+FG+a8zVr/46qup 2O4UgcazT7UcZt9tdJfQZ+BldC0HvLzYPPZdbm9f2noOTQdi+tqZdtnd1byalLVb +mqohsU4mGSpH69meptUZrven4IszmZU3SsYPkY5W6TT+w7k9wWe2THPfEPEAUly IBS5l2ybjR0OlpNypjukPkxtUOnSkY1hoqQIoZW4Mpzv6eDaVGINYr6zmUIn7Hu7 YiarwqtwstJfRsFpl7zbDmZky/SbfzkHjxFRRjHJB2GHuega0LGJbk0gnp6oR/l1 dqqXUxo2LknGhvYSa0Td/vkLahgMkLQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:08:15 2025 by rpki-client