$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: vF/eukvoym1MrIsWH7jybWARKNcMeplLcpd0m4LQrpA= Subject key identifier: 02:4C:42:47:59:38:AE:82:44:A2:FD:84:D5:70:FB:85:93:7C:3F:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493243F774785E488474623400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:f7:74:78:5e:48:84:74:62:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=54a44b67-4f5f-42bf-9c78-4582fd0e45ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:6a:d9:68:e8:7e:27:64:7f:f2:85:37:1d: f7:5e:86:2c:0e:b4:00:dd:08:34:5b:14:cc:aa:17: 06:80:8e:5c:fb:3e:94:e7:52:ce:b2:ca:d9:0f:9d: 8e:30:77:ee:53:b4:08:0e:a3:59:78:54:c8:d0:28: 62:8e:ef:7b:da:61:d2:85:50:9f:a6:16:17:e8:27: eb:70:b3:52:48:2a:64:0d:1d:7c:e9:a9:07:33:1e: b1:6c:e9:e5:8c:9d:4a:7b:ba:7a:73:2f:1c:68:fd: 71:93:58:c4:3f:99:34:05:22:e5:eb:21:4d:bb:62: 5e:b4:d7:0f:eb:59:38:33:ee:8b:4c:8f:e9:95:0e: 16:5a:9f:6b:d2:0b:f6:63:eb:a0:e0:be:47:50:78: bd:d8:d5:43:c5:e8:e6:3d:ae:a6:d0:d8:f1:a6:2e: ef:3c:51:f9:b0:1e:d4:42:5e:0d:0a:b9:d3:c0:d0: 8a:d4:49:7b:bd:de:c1:9b:a9:4b:d9:43:0e:69:fc: 4b:30:af:a9:3d:b0:3f:9c:06:af:d8:dd:cf:0c:85: 38:af:9b:09:67:c2:a8:e9:12:8b:d7:a1:88:ec:92: 78:0f:a7:c8:39:27:ae:05:89:bf:1f:b4:8d:63:40: 9f:31:b2:b6:88:e1:0c:93:4c:4b:ac:8c:08:99:28: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:42:47:59:38:AE:82:44:A2:FD:84:D5:70:FB:85:93:7C:3F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b1:79:f2:33:3a:5d:1c:55:33:96:99:6e:fb:70:5f:4c:10: 1c:e9:da:ec:03:68:3b:aa:91:6d:41:67:14:58:42:72:19:c3: b4:74:cb:a9:b7:ca:c1:6b:af:15:38:ce:28:70:eb:13:3e:6c: 45:84:2b:ea:41:49:55:c3:b0:bb:4e:7f:15:0b:27:02:a2:dd: f9:fa:9b:7b:ad:d2:30:44:c8:c7:f6:05:47:3c:04:56:1f:f8: 96:38:fc:78:86:99:34:87:09:b5:d8:a3:68:9e:42:8c:13:2e: 15:c2:dc:41:97:77:32:23:48:a5:bd:ab:8f:67:84:ac:f9:34: 9e:46:bd:6a:13:84:9f:1c:76:b1:29:4f:28:aa:fb:c2:9b:f6: e5:fc:39:95:ec:76:27:45:6f:fc:db:b2:57:20:c0:6e:4b:11: 03:97:37:ae:d3:20:90:f5:ba:7d:dd:c5:8a:70:6f:1c:3a:fb: 9b:cc:1c:ca:3b:a9:ee:33:92:3b:17:53:76:e4:d0:11:5e:b4: bb:c0:0e:99:c5:4b:62:7e:00:92:4e:c8:8d:bd:f8:b7:31:b9: ef:58:e5:57:e6:b3:90:d3:2e:15:dd:c6:79:75:2d:5d:6d:36: 4d:e7:82:4c:79:4b:3a:fe:a0:af:95:3a:49:55:79:6a:34:f9: b3:8d:af:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/d0eF5IhHRiNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NTRhNDRiNjctNGY1Zi00MmJmLTljNzgtNDU4MmZkMGU0NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr99q2Wjofidkf/KFNx33XoYsDrQA3Qg0WxTM qhcGgI5c+z6U51LOssrZD52OMHfuU7QIDqNZeFTI0Chiju972mHShVCfphYX6Cfr cLNSSCpkDR186akHMx6xbOnljJ1Ke7p6cy8caP1xk1jEP5k0BSLl6yFNu2JetNcP 61k4M+6LTI/plQ4WWp9r0gv2Y+ug4L5HUHi92NVDxejmPa6m0Njxpi7vPFH5sB7U Ql4NCrnTwNCK1El7vd7Bm6lL2UMOafxLMK+pPbA/nAav2N3PDIU4r5sJZ8Ko6RKL 16GI7JJ4D6fIOSeuBYm/H7SNY0CfMbK2iOEMk0xLrIwImSicewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJMQkdZOK6CRKL9hNVw+4WTfD95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCxefIzOl0cVTOWmW77cF9MEBzp2uwDaDuqkW1BZxRYQnIZw7R0y6m3 ysFrrxU4zihw6xM+bEWEK+pBSVXDsLtOfxULJwKi3fn6m3ut0jBEyMf2BUc8BFYf +JY4/HiGmTSHCbXYo2ieQowTLhXC3EGXdzIjSKW9q49nhKz5NJ5GvWoThJ8cdrEp Tyiq+8Kb9uX8OZXsdidFb/zbslcgwG5LEQOXN67TIJD1un3dxYpwbxw6+5vMHMo7 qe4zkjsXU3bk0BFetLvADpnFS2J+AJJOyI29+Lcxue9Y5Vfms5DTLhXdxnl1LV1t Nk3ngkx5Szr+oK+VOklVeWo0+bONr+c= -----END CERTIFICATE-----Generated at Tue Apr 29 00:21:55 2025 by rpki-client