$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json) Hash identifier: SGcVd9EaROxLLqwbzJd+xBqxPwbQ7zAtQHmggv6+MKE= Subject key identifier: 3E:6E:D9:49:E8:E8:45:D1:F1:8D:7C:BD:C1:2B:C6:A1:11:F7:78:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694E0D03C05A4FAA29AF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:0d:03:c0:5a:4f:aa:29:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=6662b6f1-ae90-4075-9b97-c0c3d4dad462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:c8:cd:6e:1c:74:42:d8:e7:4c:70:fa:30: 3e:85:6f:28:82:7a:45:72:f3:d9:8c:a9:92:4f:4a: f7:6b:cf:91:76:dd:99:45:70:43:d5:c6:f3:80:80: 78:8c:62:49:f7:78:25:2a:67:e7:af:5c:04:3f:e4: 79:73:07:7f:66:74:7c:af:41:19:0c:58:a6:06:0c: d8:4e:f1:df:80:e7:06:fa:48:65:c9:20:16:99:b2: 0f:92:47:a7:a6:cb:d8:f9:b7:37:91:59:a2:e5:13: b8:5d:35:e8:5c:f8:37:23:0e:4b:cf:13:9d:01:d6: 77:3f:22:94:e7:7b:2c:9f:10:60:bb:21:4e:e0:e2: aa:b5:15:8d:b1:ed:65:c7:cd:50:f9:1d:6e:21:b0: 12:09:01:16:29:6c:7b:89:f0:1b:46:8a:fd:ba:ee: 13:02:74:d4:c4:49:c1:97:1a:a6:22:64:33:ba:ca: 05:ec:cf:a7:c9:ae:32:07:f9:49:3a:a2:e9:d8:e4: 22:bb:85:35:e5:7f:00:c8:99:d9:25:ee:de:70:7b: 03:96:a2:bf:1c:11:ca:3e:cf:87:8c:41:1e:7d:58: 1a:e4:a3:6f:3d:05:96:fd:ed:17:ba:e4:02:1c:71: 57:f2:5f:c6:cc:49:bf:dd:83:2b:a9:27:97:85:bd: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:D9:49:E8:E8:45:D1:F1:8D:7C:BD:C1:2B:C6:A1:11:F7:78:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5f:4f:91:7b:b1:83:2e:b3:c6:de:dd:64:9b:78:dd:64:1f: 30:77:e4:b0:7c:ca:3b:30:75:3b:45:70:c6:b2:36:f9:26:3a: 30:08:0d:e1:d9:12:68:bb:dc:8c:55:af:14:fe:68:ab:17:e2: c2:e4:fc:d6:47:8c:0f:44:f4:a4:95:85:5c:db:10:f7:fb:78: cf:4a:a5:21:c5:06:70:53:dd:6d:fc:e2:c0:b6:b9:3c:69:44: 5e:db:35:c8:0f:82:67:d6:ca:fc:78:58:ef:5d:ba:98:97:d3: d7:59:26:6f:df:9e:52:38:1e:52:15:26:a0:f5:b9:5e:14:08: b0:6c:dc:6f:b6:7c:37:42:a1:48:79:cb:9a:e3:6a:03:d1:81: 97:21:af:52:2f:a8:b6:79:5a:44:59:e0:cd:d4:15:20:de:89: c5:30:cf:9d:a3:01:c9:8d:fb:ed:38:1a:a5:46:3e:96:49:63: 09:b5:95:ab:82:3a:d6:99:8f:6d:16:05:5d:fe:02:88:71:22: 1e:91:f5:41:5c:27:3f:2f:fb:bc:7f:e1:8f:28:ca:1e:ed:d2: 98:65:de:42:27:fa:e4:76:a6:c8:57:27:41:c8:c3:fd:a5:5b: 42:05:eb:5b:e6:e6:04:7f:47:d8:45:bc:10:61:1d:dc:78:9e: cf:ba:f3:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU4NA8BaT6oprwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NjY2MmI2ZjEtYWU5MC00MDc1LTliOTctYzBjM2Q0ZGFkNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiLIzW4cdELY50xw+jA+hW8ognpFcvPZjKmS T0r3a8+Rdt2ZRXBD1cbzgIB4jGJJ93glKmfnr1wEP+R5cwd/ZnR8r0EZDFimBgzY TvHfgOcG+khlySAWmbIPkkenpsvY+bc3kVmi5RO4XTXoXPg3Iw5LzxOdAdZ3PyKU 53ssnxBguyFO4OKqtRWNse1lx81Q+R1uIbASCQEWKWx7ifAbRor9uu4TAnTUxEnB lxqmImQzusoF7M+nya4yB/lJOqLp2OQiu4U15X8AyJnZJe7ecHsDlqK/HBHKPs+H jEEefVga5KNvPQWW/e0XuuQCHHFX8l/GzEm/3YMrqSeXhb2XYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5u2Uno6EXR8Y18vcErxqER93hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQzYjU2ZTQtMjc4NS0z NzU4LThiOTgtN2I4ZWU0Yjg2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5fT5F7sYMus8be3WSbeN1kHzB35LB8yjswdTtFcMayNvkmOjAIDeHZ Emi73IxVrxT+aKsX4sLk/NZHjA9E9KSVhVzbEPf7eM9KpSHFBnBT3W384sC2uTxp RF7bNcgPgmfWyvx4WO9dupiX09dZJm/fnlI4HlIVJqD1uV4UCLBs3G+2fDdCoUh5 y5rjagPRgZchr1IvqLZ5WkRZ4M3UFSDeicUwz52jAcmN++04GqVGPpZJYwm1lauC OtaZj20WBV3+AohxIh6R9UFcJz8v+7x/4Y8oyh7t0phl3kIn+uR2pshXJ0HIw/2l W0IF61vm5gR/R9hFvBBhHdx4ns+68x8= -----END CERTIFICATE-----Generated at Sun Apr 27 05:37:41 2025 by rpki-client