$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa File: 5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa (raw, json) Hash identifier: 34RnTSQWvMTsU1xTU/vPtgsoggwjeW9uE7Gjfcxxdok= Subject key identifier: B2:5A:8E:B8:80:13:35:07:4C:A3:82:C0:DE:87:1E:20:0A:F2:3D:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF2BA10AD3ED7D8A5B380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:ba:10:ad:3e:d7:d8:a5:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=3abaefbc-1df1-4035-9d51-886bbd35c4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:a7:f9:68:a6:e5:b4:90:3c:ad:b6:30:dd: 16:8e:49:a0:8f:06:15:76:14:5d:69:9d:24:b2:50: ce:b0:aa:29:6c:3c:f8:65:ad:2a:b9:ab:5e:87:9e: ae:e2:2b:eb:cc:20:da:d6:6e:b5:b1:ca:fb:f9:2c: ea:ba:d6:fe:5c:58:08:c0:87:dc:47:7d:36:c9:cb: ec:b9:1c:03:a2:18:21:6c:26:5f:ee:85:fe:c8:d7: d2:2c:60:58:c3:0e:a3:bc:c1:d9:ea:af:c0:ea:bd: 69:5a:df:bb:16:2d:4e:d5:ca:c8:60:fe:de:c2:7a: 5a:55:e1:69:c6:ed:43:26:c7:37:8c:12:84:f2:00: 3b:f9:9c:04:ac:e8:04:c3:ba:2d:4f:db:08:a5:97: 6d:0a:91:d1:40:f4:7c:c1:f3:c9:2a:cf:7a:4f:23: c5:ba:86:81:de:3f:79:8f:e7:92:24:a3:15:4b:a2: 5b:df:19:30:7a:2c:01:58:24:a0:5f:dc:da:2c:60: 01:36:f6:72:51:01:27:c8:e2:7b:f2:69:b4:78:08: aa:22:e8:df:39:ef:8f:04:04:17:81:9e:31:d9:a6: fe:46:41:ba:44:73:ab:13:fb:92:dc:ad:b7:dd:29: 3f:c9:5c:be:b6:b3:22:cd:10:49:41:63:20:c2:99: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:8E:B8:80:13:35:07:4C:A3:82:C0:DE:87:1E:20:0A:F2:3D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cd:ec:d3:b2:83:29:c2:e2:8e:68:90:59:96:b2:ff:59:e4: c1:1f:95:06:80:a1:27:73:a0:8e:ae:2f:48:5f:1c:47:e2:d4: bc:88:0d:a5:1b:f1:e5:81:70:6e:05:c6:51:2d:f1:7f:b3:19: 1a:e7:b1:03:6b:19:da:0a:9d:89:96:23:53:03:87:9e:61:28: 41:85:67:8d:ac:d8:79:d3:84:49:0f:59:3d:1b:25:e6:5f:b6: cf:88:d1:fa:61:0e:9d:1e:b4:36:92:c7:09:83:79:2e:45:fd: 14:35:29:cd:82:66:7c:fb:76:a3:8f:14:51:36:ac:8b:fb:6e: 46:4c:57:72:90:74:31:88:1a:5f:41:b1:f1:b5:14:36:f1:4a: e2:3f:73:d6:f3:5a:9b:e0:5c:df:2f:5b:ff:14:d6:03:9a:c0: eb:24:4c:bf:90:3d:27:7a:e6:a0:03:ea:92:a1:f5:91:bf:52: 99:48:da:b7:cc:c9:99:c9:9f:7c:dc:29:1e:4d:c6:c8:70:75: 11:41:c0:4f:01:a1:ff:c7:d2:ad:88:42:33:73:29:ef:2b:d2: 5d:77:d0:3d:e7:83:fc:70:19:e5:43:6e:af:07:4b:d4:33:80: d6:cc:2a:0c:b8:3d:e1:6f:10:3d:0f:d0:25:dc:cf:c9:94:26: 74:67:3c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvK6EK0+19ils4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk M2FiYWVmYmMtMWRmMS00MDM1LTlkNTEtODg2YmJkMzVjNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmn+Wim5bSQPK22MN0WjkmgjwYVdhRdaZ0k slDOsKopbDz4Za0quateh56u4ivrzCDa1m61scr7+Szqutb+XFgIwIfcR302ycvs uRwDohghbCZf7oX+yNfSLGBYww6jvMHZ6q/A6r1pWt+7Fi1O1crIYP7ewnpaVeFp xu1DJsc3jBKE8gA7+ZwErOgEw7otT9sIpZdtCpHRQPR8wfPJKs96TyPFuoaB3j95 j+eSJKMVS6Jb3xkweiwBWCSgX9zaLGABNvZyUQEnyOJ78mm0eAiqIujfOe+PBAQX gZ4x2ab+RkG6RHOrE/uS3K233Sk/yVy+trMizRBJQWMgwpmrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJajriAEzUHTKOCwN6HHiAK8j3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTg2M2VmODQtNTZlOC0z NmQ3LWE1YTgtMzNiMmRlMWViMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjN7NOygynC4o5okFmWsv9Z5MEflQaAoSdzoI6uL0hfHEfi1LyIDaUb 8eWBcG4FxlEt8X+zGRrnsQNrGdoKnYmWI1MDh55hKEGFZ42s2HnThEkPWT0bJeZf ts+I0fphDp0etDaSxwmDeS5F/RQ1Kc2CZnz7dqOPFFE2rIv7bkZMV3KQdDGIGl9B sfG1FDbxSuI/c9bzWpvgXN8vW/8U1gOawOskTL+QPSd65qAD6pKh9ZG/UplI2rfM yZnJn3zcKR5NxshwdRFBwE8Bof/H0q2IQjNzKe8r0l130D3ng/xwGeVDbq8HS9Qz gNbMKgy4PeFvED0P0CXcz8mUJnRnPAY= -----END CERTIFICATE-----Generated at Sun Apr 27 07:49:28 2025 by rpki-client