$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json) Hash identifier: Uea6V6qn5WPnabVDYH0XxuZDtbDt1mN3BRgSYXuXKsQ= Subject key identifier: 98:3E:B6:5D:97:21:1A:BA:E5:D9:A5:88:D4:CC:2C:C2:1F:32:5B:27 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF2EFB77AAB56DF9DE4B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:ef:b7:7a:ab:56:df:9d:e4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=29d91a7b-3b22-4ee6-b3c0-63b985a0fe9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:b8:c2:06:02:60:9f:ef:20:d5:74:15:42: fd:f8:6b:3a:5d:cb:16:04:81:37:bf:c1:c4:77:6e: 2f:d7:31:28:1a:13:f5:6b:07:79:75:9a:00:e8:6c: 21:06:ca:5e:a9:61:5a:55:50:48:b4:c2:0c:c1:2a: bd:b8:57:9a:ce:d5:e0:de:9d:70:11:9d:6b:e3:e2: 32:67:87:af:64:53:ab:a3:a5:e0:ee:bf:a5:f7:6f: 8f:2c:ed:43:40:74:f8:53:25:0a:e4:ad:65:ac:20: a4:54:9b:01:00:35:6d:33:8f:33:f9:77:d1:1b:06: be:fb:83:b6:e7:ee:73:6a:bb:06:a7:51:7a:28:63: c3:04:25:07:28:4e:3c:d1:eb:a2:26:5d:68:d4:1f: 93:07:11:30:ca:31:9a:a7:35:c4:8f:06:f1:99:c5: f6:07:26:0c:cd:d6:17:64:24:82:c5:ba:54:69:39: da:78:f0:4e:b0:b3:a4:36:fd:34:56:8f:95:9e:2b: 6c:16:99:7e:3e:d8:2b:ef:38:8d:f5:f1:a1:54:f8: ac:bc:03:44:82:73:7a:9c:ee:69:3c:6f:d3:56:14: bd:c7:12:d5:62:5d:82:1a:f4:c8:2b:58:3d:94:2f: 1e:8b:2a:1f:d1:82:7f:62:b9:20:db:7b:00:52:7d: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:B6:5D:97:21:1A:BA:E5:D9:A5:88:D4:CC:2C:C2:1F:32:5B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:05:87:37:e4:ca:85:48:1c:a2:99:2d:44:a2:c4:91:e2:6e: 2b:23:45:df:85:74:56:35:5d:bc:2f:92:f4:a9:4f:9b:ae:02: 24:ed:da:c5:36:90:0f:b1:ad:f9:ce:a2:55:5d:4f:00:b1:9b: 0d:d0:64:e3:c3:1e:32:ff:39:a0:51:78:25:78:8c:53:f4:d6: 19:a6:96:32:05:46:6c:62:83:b1:f9:12:ea:a6:fd:15:78:bb: 4c:41:cc:10:ea:76:72:67:5a:21:ac:e2:3b:af:36:34:a1:c1: cb:c4:14:54:08:7d:3f:41:4e:95:2b:19:3b:56:c8:40:b5:c1: a9:78:51:07:80:5b:25:5c:0a:41:2b:60:6a:ff:00:67:cc:c4: 25:80:01:bf:fb:a1:52:6a:5d:87:25:0d:ab:0f:f4:fc:1a:58: a4:a3:b9:fc:3a:69:91:16:39:54:c3:0e:0b:ea:2f:51:6b:fa: e1:21:19:16:d8:98:60:7b:04:2c:4c:30:8e:60:1f:67:4b:5f: e8:46:04:4b:75:64:66:47:62:68:fa:9f:fc:e0:6e:eb:25:ce: 38:4f:9c:03:89:82:ab:b7:72:d1:3a:1f:a2:99:00:3e:6d:4a: bd:31:aa:8f:36:97:18:8e:51:05:17:8f:80:d4:ab:d9:71:03: dd:50:0b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvLvt3qrVt+d5LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk MjlkOTFhN2ItM2IyMi00ZWU2LWIzYzAtNjNiOTg1YTBmZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmu4wgYCYJ/vINV0FUL9+Gs6XcsWBIE3v8HE d24v1zEoGhP1awd5dZoA6GwhBspeqWFaVVBItMIMwSq9uFeaztXg3p1wEZ1r4+Iy Z4evZFOro6Xg7r+l92+PLO1DQHT4UyUK5K1lrCCkVJsBADVtM48z+XfRGwa++4O2 5+5zarsGp1F6KGPDBCUHKE480euiJl1o1B+TBxEwyjGapzXEjwbxmcX2ByYMzdYX ZCSCxbpUaTnaePBOsLOkNv00Vo+VnitsFpl+Ptgr7ziN9fGhVPisvANEgnN6nO5p PG/TVhS9xxLVYl2CGvTIK1g9lC8eiyof0YJ/Yrkg23sAUn1kRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg+tl2XIRq65dmliNTMLMIfMlsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM4NDJkYjItZDAxMi0z NTUxLTg3ZWEtN2I2YjIyMzQ4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMFhzfkyoVIHKKZLUSixJHibisjRd+FdFY1XbwvkvSpT5uuAiTt2sU2 kA+xrfnOolVdTwCxmw3QZOPDHjL/OaBReCV4jFP01hmmljIFRmxig7H5Euqm/RV4 u0xBzBDqdnJnWiGs4juvNjShwcvEFFQIfT9BTpUrGTtWyEC1wal4UQeAWyVcCkEr YGr/AGfMxCWAAb/7oVJqXYclDasP9PwaWKSjufw6aZEWOVTDDgvqL1Fr+uEhGRbY mGB7BCxMMI5gH2dLX+hGBEt1ZGZHYmj6n/zgbuslzjhPnAOJgqu3ctE6H6KZAD5t Sr0xqo82lxiOUQUXj4DUq9lxA91QCyk= -----END CERTIFICATE-----Generated at Sun Apr 27 10:14:53 2025 by rpki-client