$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json) Hash identifier: vBaNYAz81NKIbnxKbhAFP/naPuuduxJ3px9297skses= Subject key identifier: 29:BB:40:F8:C7:22:12:E7:AD:84:D2:46:61:E4:00:DA:F4:46:E6:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858496A19B0C44A8DC683EF9E1400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.157.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b0:c4:4a:8d:c6:83:ef:9e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=45706d8e-b9fd-4d47-a5c4-47ae0e5ab7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:5b:c2:ac:15:e3:c8:a4:ce:c7:48:9b:24: 22:b1:b0:19:6a:8c:a1:fe:6f:93:4e:be:f0:21:ce: bc:06:8a:04:5f:c9:d5:9c:6e:37:93:9f:52:cb:29: 88:4b:19:3e:86:c9:da:b1:57:f4:83:96:00:3d:93: 0b:cf:71:89:38:96:52:71:07:10:0b:c0:25:ed:0c: 86:08:82:22:fe:d7:b0:04:d6:40:9e:80:3d:66:d9: 23:fd:c0:5c:22:9b:c7:64:6a:eb:e5:62:7c:5d:fb: 91:30:b3:5d:c4:74:62:54:42:c1:fd:c2:f7:8d:a1: 47:c0:89:09:5a:ca:3f:f8:ac:18:23:cd:bc:d7:cd: 27:38:48:12:ed:51:2b:f5:a7:d6:3c:c7:6a:ac:68: a6:79:76:4d:5c:9b:e7:81:88:88:91:cf:fc:1e:4c: d8:7f:7a:49:65:fc:d7:ae:24:8f:23:a4:2f:39:e1: df:b1:ca:d9:05:74:38:39:74:4f:2c:e9:3b:5e:37: 3d:4d:ba:d6:d6:66:4a:e7:6c:0b:86:c7:4e:76:37: cb:89:01:ad:dd:fd:48:26:0d:06:95:73:34:9c:98: cc:28:37:80:c5:b2:18:d7:0a:fa:13:af:25:c6:45: 4e:7a:7d:48:43:a7:c7:66:7d:c6:01:99:51:3f:41: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:40:F8:C7:22:12:E7:AD:84:D2:46:61:E4:00:DA:F4:46:E6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:be:e2:75:54:2b:4c:ff:da:70:07:a3:92:96:8a:7a:72:02: 1c:4e:29:e3:1c:67:5a:aa:8b:e7:a4:29:bd:dd:46:a5:b8:82: 17:90:6f:93:57:83:23:47:bd:bf:f0:c7:8e:63:f6:1c:c6:3d: cc:8a:7a:ee:64:75:1b:ec:41:5b:c1:90:6d:c4:65:0c:54:61: 8c:32:19:00:11:f4:ab:59:06:fb:7a:98:20:29:7b:09:da:21: e5:65:40:0e:5f:24:f9:4f:ea:01:a2:65:1c:81:71:9b:43:d2: bc:fd:43:1f:dc:c3:a8:7e:eb:04:4d:23:19:a5:b7:c6:7e:2c: e6:27:23:57:9a:dd:9d:bb:f9:aa:43:aa:62:8d:c0:63:e7:bd: 7d:34:38:53:ad:d1:a8:2a:ab:53:68:08:0a:c5:15:09:84:05: ac:3a:d7:d0:0e:e1:a8:b7:39:19:64:5e:22:b2:ee:74:63:48: cd:be:f9:80:58:ca:98:66:d2:65:94:40:16:e1:bf:02:3c:c5: ff:39:23:d2:b1:38:e3:8c:61:e1:4d:3e:57:3c:91:4a:3d:3b: 96:a5:57:f0:6c:fd:8b:ef:0c:dc:72:34:3c:29:d3:ac:7b:ea: 7b:d3:c0:c6:92:5c:98:88:21:9b:18:1c:b6:eb:29:f0:c8:c2: 2c:34:96:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbDESo3Gg++eFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NDU3MDZkOGUtYjlmZC00ZDQ3LWE1YzQtNDdhZTBlNWFiN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1bwqwV48ikzsdImyQisbAZaoyh/m+TTr7w Ic68BooEX8nVnG43k59SyymISxk+hsnasVf0g5YAPZMLz3GJOJZScQcQC8Al7QyG CIIi/tewBNZAnoA9Ztkj/cBcIpvHZGrr5WJ8XfuRMLNdxHRiVELB/cL3jaFHwIkJ Wso/+KwYI828180nOEgS7VEr9afWPMdqrGimeXZNXJvngYiIkc/8HkzYf3pJZfzX riSPI6QvOeHfscrZBXQ4OXRPLOk7Xjc9TbrW1mZK52wLhsdOdjfLiQGt3f1IJg0G lXM0nJjMKDeAxbIY1wr6E68lxkVOen1IQ6fHZn3GAZlRP0E/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm7QPjHIhLnrYTSRmHkANr0RuYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu+4nVUK0z/2nAHo5KWinpyAhxOKeMcZ1qqi+ekKb3dRqW4gheQb5NX gyNHvb/wx45j9hzGPcyKeu5kdRvsQVvBkG3EZQxUYYwyGQAR9KtZBvt6mCApewna IeVlQA5fJPlP6gGiZRyBcZtD0rz9Qx/cw6h+6wRNIxmlt8Z+LOYnI1ea3Z27+apD qmKNwGPnvX00OFOt0agqq1NoCArFFQmEBaw619AO4ai3ORlkXiKy7nRjSM2++YBY yphm0mWUQBbhvwI8xf85I9KxOOOMYeFNPlc8kUo9O5alV/Bs/YvvDNxyNDwp06x7 6nvTwMaSXJiIIZsYHLbrKfDIwiw0lqg= -----END CERTIFICATE-----Generated at Sun Apr 27 06:39:53 2025 by rpki-client