$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa File: 83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa (raw, json) Hash identifier: zzBAHslMb2ytMeZ0kNSBIdj2eD2HwY4g/0CeDMEbXe8= Subject key identifier: F9:25:3A:2D:48:75:31:73:71:22:AC:B3:30:5C:87:31:A7:BF:86:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C2658A3D05C3835863B40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:26:58:a3:d0:5c:38:35:86:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=43831505-a44e-4d18-a182-832a92a37b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:42:b8:9a:0b:61:e8:44:48:8d:e3:b2:ec: c5:4e:bc:ad:82:8c:22:15:0a:12:6a:4f:13:c2:45: 59:ca:94:3c:c3:e9:9a:1c:b5:e3:6d:7d:66:46:15: 61:d9:24:72:ae:a2:da:c5:ed:df:ad:66:18:87:a5: b2:0b:ec:53:4f:29:e9:8c:cb:c2:29:eb:dc:11:d6: 94:1d:ff:d7:41:d2:7f:03:e3:7f:d6:de:a2:0d:1e: c2:24:5c:b9:36:b0:39:0e:5b:c0:d9:1a:91:19:7f: 91:5f:10:6b:94:91:5c:25:0c:77:72:a5:9d:e4:1a: 92:4d:e3:2f:a2:44:63:ad:b4:a1:81:44:ed:c5:61: 1d:c7:a6:e0:26:3c:71:40:5f:f7:9c:69:f8:69:45: b3:e0:ed:9c:62:41:0e:ab:c0:48:a5:37:14:d6:ab: 9b:77:4d:65:24:a5:c4:6c:cc:a3:51:88:a3:17:8a: 3a:7e:e2:9d:04:08:97:84:c3:18:8c:67:d2:a9:ac: c9:0f:a4:88:c4:9b:bf:6b:2c:b4:19:a1:85:28:46: 9d:ae:05:61:43:6c:3e:47:6d:4e:b4:9e:44:29:1f: d6:cb:8c:75:c6:02:f5:5e:07:f6:d8:78:c0:a2:5d: 17:fc:6f:33:ed:71:d4:53:9d:ce:f3:27:0c:3c:7d: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:3A:2D:48:75:31:73:71:22:AC:B3:30:5C:87:31:A7:BF:86:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/83bcf86e-8d86-36c4-9a14-fcfd04e9b8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:91:be:c4:67:fe:2c:2e:4f:a1:a2:20:5e:27:33:75:03:29: b8:54:bd:aa:d1:c5:92:b6:07:2a:15:75:d2:87:e3:81:6e:2b: 33:01:ee:99:e4:b8:e8:b8:75:4f:23:66:1a:a7:2f:3a:f5:7e: 81:c5:9d:4b:4b:25:d8:98:99:01:8c:65:46:2e:f1:d1:8f:56: 7e:49:a6:ad:50:dc:db:09:5b:99:c1:14:31:47:b1:d2:fd:73: e2:a0:2d:7a:0a:97:3e:81:fe:1b:6d:a7:d0:f4:1f:46:4d:0f: 1b:67:e6:7b:6a:d8:45:77:94:73:cd:06:b5:cb:d1:a3:aa:53: 43:b5:e8:72:26:ee:ed:36:09:27:1c:86:d7:27:b3:24:d1:59: 7d:41:ea:3a:2f:c6:b0:11:52:54:f3:27:fe:0a:3b:93:f3:f4: 1f:ef:8c:54:cf:00:e2:7e:d2:65:22:51:55:2a:f5:21:5d:6b: 20:1a:50:ac:53:9c:07:53:5e:f7:aa:57:c7:dd:2d:71:01:76: cc:3f:e5:31:39:b1:7d:fe:42:67:f4:77:ef:d0:14:42:1e:05: 4b:52:a1:83:32:1e:d1:85:47:ec:5f:c3:24:47:28:26:5b:39: 94:fa:db:35:b1:1d:fe:db:65:b3:d0:97:70:35:26:00:c9:f3: 94:56:d0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCZYo9BcODWGO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NDM4MzE1MDUtYTQ0ZS00ZDE4LWExODItODMyYTkyYTM3YjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+BCuJoLYehESI3jsuzFTrytgowiFQoSak8T wkVZypQ8w+maHLXjbX1mRhVh2SRyrqLaxe3frWYYh6WyC+xTTynpjMvCKevcEdaU Hf/XQdJ/A+N/1t6iDR7CJFy5NrA5DlvA2RqRGX+RXxBrlJFcJQx3cqWd5BqSTeMv okRjrbShgUTtxWEdx6bgJjxxQF/3nGn4aUWz4O2cYkEOq8BIpTcU1qubd01lJKXE bMyjUYijF4o6fuKdBAiXhMMYjGfSqazJD6SIxJu/ayy0GaGFKEadrgVhQ2w+R21O tJ5EKR/Wy4x1xgL1Xgf22HjAol0X/G8z7XHUU53O8ycMPH3DQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPklOi1IdTFzcSKsszBchzGnv4ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODNiY2Y4NmUtOGQ4Ni0z NmM0LTlhMTQtZmNmZDA0ZTliOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACRvsRn/iwuT6GiIF4nM3UDKbhUvarRxZK2ByoVddKH44FuKzMB7pnk uOi4dU8jZhqnLzr1foHFnUtLJdiYmQGMZUYu8dGPVn5Jpq1Q3NsJW5nBFDFHsdL9 c+KgLXoKlz6B/http9D0H0ZNDxtn5ntq2EV3lHPNBrXL0aOqU0O16HIm7u02CScc htcnsyTRWX1B6jovxrARUlTzJ/4KO5Pz9B/vjFTPAOJ+0mUiUVUq9SFdayAaUKxT nAdTXveqV8fdLXEBdsw/5TE5sX3+Qmf0d+/QFEIeBUtSoYMyHtGFR+xfwyRHKCZb OZT62zWxHf7bZbPQl3A1JgDJ85RW0Cg= -----END CERTIFICATE-----Generated at Sun Apr 27 07:50:35 2025 by rpki-client