$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa File: 4e958850-6659-3d52-bbff-26a04f499d8d.roa (raw, json) Hash identifier: SIF2CMN5cmwrblSjBlL64CjUit8d3Rn3+c8db+Oyb5U= Subject key identifier: 0B:ED:E6:18:02:00:34:36:42:5F:D2:BC:C8:76:AC:51:A3:08:D5:39 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF34DD35525D5389C1A880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:dd:35:52:5d:53:89:c1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2afae070-20d2-4b25-9216-ebbfc5c5a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:16:ba:35:e5:23:0c:1c:b0:6c:13:cd:6a: ac:6d:0f:ae:49:72:15:69:77:2d:bb:1e:7e:c6:d3: e3:1e:d8:10:ba:6a:61:e7:1c:08:46:29:61:c2:13: a2:89:27:27:9f:2b:1b:0c:e3:0f:aa:87:2b:dc:16: 76:cc:94:e7:9f:b8:54:ec:00:23:6e:07:7d:6d:0e: 69:b3:da:45:59:ad:c9:1f:84:89:d5:a4:2c:c4:a1: 56:97:f1:97:9c:ea:36:a5:74:cf:de:1b:e6:bb:59: 17:1d:ea:0c:f7:c3:08:a9:5f:80:92:42:57:f5:ed: 62:ef:cc:c9:40:61:9d:aa:51:7c:72:3f:93:c6:e8: 85:ad:bf:0e:e7:06:61:4a:08:91:78:17:e8:dc:fc: 5e:0c:16:2c:7f:92:ba:24:46:44:d0:3f:4d:c6:a4: a1:03:cc:41:c9:1c:6c:1f:a4:4b:9c:1b:c9:f0:a7: 4c:7c:47:04:54:5e:50:9a:41:c5:bc:f9:c4:e5:d4: b4:86:f2:91:e8:c9:f1:ca:ac:ac:08:17:32:cc:45: 5a:66:e2:f4:61:9b:e4:a6:a5:13:4c:3d:f0:7a:e2: 8a:3d:0f:7d:65:bf:d9:69:97:d0:af:e9:f5:91:bb: 57:78:11:c8:c9:8e:30:16:36:7e:4a:81:e4:91:fe: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:ED:E6:18:02:00:34:36:42:5F:D2:BC:C8:76:AC:51:A3:08:D5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8e:92:6b:c8:28:23:f6:ee:e4:eb:7c:06:4b:5a:86:2a:04: 0b:c7:a9:8f:f1:01:b9:7b:be:d0:da:a1:0b:ac:80:1c:f2:39: 55:4d:66:50:b8:fa:04:49:cd:24:21:96:02:70:27:56:56:3a: af:c3:b0:61:c6:d9:bc:49:35:4c:13:97:eb:24:84:8b:c4:56: dc:88:bf:c3:a3:26:7e:1e:9a:f6:42:83:50:47:b0:00:f9:4c: ed:c9:6e:5e:0a:50:e6:c2:85:09:48:85:80:7f:2c:73:7e:6a: b5:af:b1:09:6d:b5:0a:8a:4e:91:31:da:c1:38:bb:a9:73:b1: a1:19:65:26:f3:1f:e8:be:ec:af:b5:16:14:bb:d0:be:b0:9e: e3:db:33:68:48:4b:a8:3e:bf:df:b4:c3:44:fa:5c:f8:49:8c: 5e:46:8e:23:ca:e1:53:a7:a8:ed:f2:32:2a:42:26:e0:8d:33: f7:2d:7d:bd:ac:de:53:83:cf:35:bd:58:31:d7:1a:57:59:09: 38:54:a1:15:25:03:51:52:2f:ec:e3:2c:a5:78:a4:44:61:2f: 96:89:1c:f2:a9:ce:ee:88:b7:e7:57:a9:39:f2:4a:8b:3e:a1: 8f:ac:41:98:d3:3f:c1:32:18:63:94:91:01:16:04:b2:f3:c0: cf:b4:3b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzTdNVJdU4nBqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmFmYWUwNzAtMjBkMi00YjI1LTkyMTYtZWJiZmM1YzVhMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrwWujXlIwwcsGwTzWqsbQ+uSXIVaXctux5+ xtPjHtgQumph5xwIRilhwhOiiScnnysbDOMPqocr3BZ2zJTnn7hU7AAjbgd9bQ5p s9pFWa3JH4SJ1aQsxKFWl/GXnOo2pXTP3hvmu1kXHeoM98MIqV+AkkJX9e1i78zJ QGGdqlF8cj+TxuiFrb8O5wZhSgiReBfo3PxeDBYsf5K6JEZE0D9NxqShA8xByRxs H6RLnBvJ8KdMfEcEVF5QmkHFvPnE5dS0hvKR6MnxyqysCBcyzEVaZuL0YZvkpqUT TD3weuKKPQ99Zb/ZaZfQr+n1kbtXeBHIyY4wFjZ+SoHkkf7YRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvt5hgCADQ2Ql/SvMh2rFGjCNU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU5NTg4NTAtNjY1OS0z ZDUyLWJiZmYtMjZhMDRmNDk5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCOkmvIKCP27uTrfAZLWoYqBAvHqY/xAbl7vtDaoQusgBzyOVVNZlC4 +gRJzSQhlgJwJ1ZWOq/DsGHG2bxJNUwTl+skhIvEVtyIv8OjJn4emvZCg1BHsAD5 TO3Jbl4KUObChQlIhYB/LHN+arWvsQlttQqKTpEx2sE4u6lzsaEZZSbzH+i+7K+1 FhS70L6wnuPbM2hIS6g+v9+0w0T6XPhJjF5GjiPK4VOnqO3yMipCJuCNM/ctfb2s 3lODzzW9WDHXGldZCThUoRUlA1FSL+zjLKV4pERhL5aJHPKpzu6It+dXqTnySos+ oY+sQZjTP8EyGGOUkQEWBLLzwM+0Ozk= -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:18 2025 by rpki-client