$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa File: 19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa (raw, json) Hash identifier: 7u35ljfO4xprI64+KPO2k3+d6Mgdqp/qDTT56TxQYLk= Subject key identifier: 55:18:E2:7E:1A:D0:EE:60:55:B3:B6:4F:55:0C:E5:56:18:7D:91:0E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493AA3E5B206A0D4668910DD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 8069 IP address blocks: 20.33.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e5:b2:06:a0:d4:66:89:10:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=f3fe5433-86fb-45e4-88c3-6cd0a8168f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:41:37:7e:8d:bf:38:85:74:fd:4a:33:43: 6b:fd:43:1b:bd:51:bc:db:c7:aa:b5:48:58:a3:65: ab:0a:18:8f:0a:bd:0d:96:c6:d6:98:95:5c:e8:9e: a5:cc:cc:c2:9f:98:8d:21:7f:50:4e:d2:f3:62:69: 77:ce:9b:db:d2:bf:1c:c2:a1:7c:b6:07:33:f6:da: d3:f0:cb:dd:27:ac:ae:5d:e0:3b:b0:64:5c:0d:ec: 3d:8a:cf:b1:6b:99:00:9a:09:8a:aa:84:02:55:84: fd:1d:82:a6:bb:ba:d3:79:0a:e9:78:7a:fd:d4:f5: f0:d4:39:7e:41:95:58:98:b1:77:32:32:45:c9:d2: 4f:ae:3f:d7:1f:ba:f5:e6:37:25:31:be:a5:ec:9f: 2a:df:a8:f2:0b:7f:3d:5f:bd:60:e7:b8:aa:10:be: e3:1b:d8:2e:2c:5c:ae:f6:c7:27:36:2b:50:2a:d9: c9:ad:f4:4c:40:68:b6:62:10:3e:33:8e:6f:c8:e4: 37:9f:b5:65:48:ab:01:7f:ff:be:70:00:2a:cb:b4: f9:36:0d:52:dc:ff:29:19:3d:29:30:46:f9:8f:e1: dd:47:d5:3b:2f:bb:bd:6c:3f:34:21:3e:1e:79:96: 73:5a:f8:de:a9:cc:f1:5d:bc:a6:dd:67:7f:6f:ec: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:18:E2:7E:1A:D0:EE:60:55:B3:B6:4F:55:0C:E5:56:18:7D:91:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:73:b2:d7:c7:4c:68:16:85:10:f5:b5:5a:03:a9:9a:97:ad: e6:07:f0:5d:b2:fe:6a:f3:65:39:6e:74:5c:4d:49:87:0a:c2: 12:68:61:30:fc:bb:32:7f:c5:c8:43:95:a9:aa:22:34:98:17: c8:d1:0f:ab:9b:db:0a:96:8d:f2:aa:68:fe:16:15:08:4e:2b: 2c:ab:76:c6:62:80:cf:e5:d3:69:d3:b2:30:24:2a:c4:3e:70: f0:e4:c3:f9:02:7c:c6:06:b7:a0:2a:19:b7:58:89:14:36:52: d9:dc:67:bf:08:1d:cb:f0:e7:59:b2:68:0b:23:bd:d0:97:01: 82:ad:b6:80:02:71:06:79:27:c4:cf:e3:09:64:27:9c:81:51: 0c:91:8f:a4:19:0c:94:01:4b:e4:57:db:3e:6b:a7:3c:7d:97: 77:1e:29:f3:53:0d:2f:ce:26:f5:29:91:9b:7d:72:d1:67:53: 71:e7:89:b6:66:5f:da:42:d7:bf:51:60:b5:6e:ae:cf:06:5d: d7:f5:6d:38:57:b0:09:56:0c:3c:a9:c4:e3:82:0b:8f:33:9c: 37:ab:8c:70:73:47:ae:dd:f9:3a:fa:0a:c4:33:6e:81:d9:2c: 89:cd:7b:65:8e:ed:93:73:24:ea:c1:42:03:30:04:d9:ba:05: 0a:d6:7b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+WyBqDUZokQ3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZjNmZTU0MzMtODZmYi00NWU0LTg4YzMtNmNkMGE4MTY4ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhshBN36NvziFdP1KM0Nr/UMbvVG828eqtUhY o2WrChiPCr0NlsbWmJVc6J6lzMzCn5iNIX9QTtLzYml3zpvb0r8cwqF8tgcz9trT 8MvdJ6yuXeA7sGRcDew9is+xa5kAmgmKqoQCVYT9HYKmu7rTeQrpeHr91PXw1Dl+ QZVYmLF3MjJFydJPrj/XH7r15jclMb6l7J8q36jyC389X71g57iqEL7jG9guLFyu 9scnNitQKtnJrfRMQGi2YhA+M45vyOQ3n7VlSKsBf/++cAAqy7T5Ng1S3P8pGT0p MEb5j+HdR9U7L7u9bD80IT4eeZZzWvjeqczxXbym3Wd/b+xYlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUY4n4a0O5gVbO2T1UM5VYYfZEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTllZWIxYjgtNGVlNi0z YTVhLTg2NjktMGVjNWQ1ZTIwMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVzstfHTGgWhRD1tVoDqZqXreYH8F2y/mrzZTludFxNSYcKwhJoYTD8 uzJ/xchDlamqIjSYF8jRD6ub2wqWjfKqaP4WFQhOKyyrdsZigM/l02nTsjAkKsQ+ cPDkw/kCfMYGt6AqGbdYiRQ2UtncZ78IHcvw51myaAsjvdCXAYKttoACcQZ5J8TP 4wlkJ5yBUQyRj6QZDJQBS+RX2z5rpzx9l3ceKfNTDS/OJvUpkZt9ctFnU3HnibZm X9pC179RYLVurs8GXdf1bThXsAlWDDypxOOCC48znDerjHBzR67d+Tr6CsQzboHZ LInNe2WO7ZNzJOrBQgMwBNm6BQrWe7w= -----END CERTIFICATE-----Generated at Sun Apr 27 05:37:37 2025 by rpki-client