$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f6285a8-f723-31f5-9e7b-1bcd7f886db0.roa File: 9f6285a8-f723-31f5-9e7b-1bcd7f886db0.roa (raw, json) Hash identifier: AuD89+yp/Q4mZ7SDPBL6zPj1XVFT36v9EEaIa+7lV8U= Subject key identifier: 2A:A8:EA:B3:00:3B:34:8D:91:EF:9B:83:68:58:3E:1F:81:80:B4:71 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494CC954B8CDFF3915530A6380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f6285a8-f723-31f5-9e7b-1bcd7f886db0.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:54:b8:cd:ff:39:15:53:0a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=fd59044f-f434-4fec-8e12-1d6722b48871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:e3:42:98:10:db:c5:6e:97:88:27:59:1c: 6c:26:a5:f2:18:3e:2f:77:29:c1:b1:3e:df:d7:81: a1:0d:a5:75:ee:f6:55:2c:53:80:7a:65:96:77:09: 39:9a:e2:56:05:53:ea:bf:5f:95:1c:ba:66:7f:f2: 3c:3d:4c:19:6a:3e:dc:11:4b:89:ae:03:00:18:48: f5:89:98:c3:54:c8:4b:c5:80:b2:8b:58:93:66:a9: 74:b8:83:ae:ae:5b:66:a9:33:f9:1f:f7:d6:fc:91: 7f:7f:53:85:27:f8:93:ec:68:e5:4a:4d:a5:32:be: f6:b5:75:34:81:52:bb:ab:0d:d6:f9:f4:94:e3:06: e7:d1:8a:22:91:1a:19:4c:ec:a0:9a:fc:59:98:65: d8:a8:cb:50:8c:3d:cf:57:81:a8:01:43:93:77:6e: 1d:80:ef:28:cd:e3:ee:6c:4b:b5:34:f7:ff:b0:ea: 4c:d4:78:5f:90:b8:e2:52:70:ca:a5:d2:03:6d:7f: fe:fa:60:d8:b9:8c:6f:d7:0b:33:8e:f7:7a:20:0b: 1a:c5:1d:ca:68:89:4f:a7:1b:27:8e:43:3c:48:09: 8b:a9:d1:3b:c5:ec:19:1d:c6:96:12:1d:65:95:8a: e5:3d:c2:1d:1e:1e:a9:0b:79:52:e8:3f:0e:30:91: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:EA:B3:00:3B:34:8D:91:EF:9B:83:68:58:3E:1F:81:80:B4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f6285a8-f723-31f5-9e7b-1bcd7f886db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:84:51:c0:f7:3b:0c:a9:af:0f:31:62:e9:6d:b4:22:ca:03: 67:2b:57:1f:c3:c9:08:2d:69:d7:58:d1:33:6e:b8:0f:d3:e8: 7d:d5:70:45:21:2d:4d:c5:b6:9e:f6:a1:57:5b:8d:e8:02:4c: 0a:ad:95:bd:54:6c:ac:4d:48:6d:0f:0a:df:47:bb:07:d0:ef: 21:c1:74:5a:98:4d:0e:ea:86:ec:a4:67:a4:3d:e3:5b:56:dd: 09:f5:83:c3:62:71:01:52:65:57:a7:f5:2a:dd:1b:29:2d:8c: 99:ec:d6:03:98:55:0c:f1:ed:6f:5a:5e:be:f0:26:9a:d6:7c: 82:77:bc:53:bc:72:6d:0d:33:0b:aa:f5:82:c8:80:f1:3d:53: dc:3b:46:e4:36:58:a0:fe:75:92:0f:14:6f:09:4b:00:8d:98: 55:d4:07:14:1b:24:91:f7:f9:b7:5a:0c:2f:56:ba:ef:ff:2d: 3a:41:5c:91:8d:da:0c:d8:03:fa:44:fb:74:16:8d:6c:ab:5f: f2:6e:54:59:aa:3b:75:bd:4a:4f:d1:d9:c9:3a:1d:14:65:9f: 47:33:f9:3d:28:31:e1:81:eb:ff:11:ce:a3:7c:29:d7:16:5b: 69:9d:68:28:bf:bb:f7:85:48:2e:3f:5b:21:89:d7:6c:0c:e8: 88:0d:d2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVS4zf85FVMKY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZmQ1OTA0NGYtZjQzNC00ZmVjLThlMTItMWQ2NzIyYjQ4ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHzjQpgQ28Vul4gnWRxsJqXyGD4vdynBsT7f 14GhDaV17vZVLFOAemWWdwk5muJWBVPqv1+VHLpmf/I8PUwZaj7cEUuJrgMAGEj1 iZjDVMhLxYCyi1iTZql0uIOurltmqTP5H/fW/JF/f1OFJ/iT7GjlSk2lMr72tXU0 gVK7qw3W+fSU4wbn0YoikRoZTOygmvxZmGXYqMtQjD3PV4GoAUOTd24dgO8ozePu bEu1NPf/sOpM1HhfkLjiUnDKpdIDbX/++mDYuYxv1wszjvd6IAsaxR3KaIlPpxsn jkM8SAmLqdE7xewZHcaWEh1llYrlPcIdHh6pC3lS6D8OMJEuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqo6rMAOzSNke+bg2hYPh+BgLRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWY2Mjg1YTgtZjcyMy0z MWY1LTllN2ItMWJjZDdmODg2ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmEUcD3Owyprw8xYulttCLKA2crVx/DyQgtaddY0TNuuA/T6H3VcEUh LU3Ftp72oVdbjegCTAqtlb1UbKxNSG0PCt9HuwfQ7yHBdFqYTQ7qhuykZ6Q941tW 3Qn1g8NicQFSZVen9SrdGyktjJns1gOYVQzx7W9aXr7wJprWfIJ3vFO8cm0NMwuq 9YLIgPE9U9w7RuQ2WKD+dZIPFG8JSwCNmFXUBxQbJJH3+bdaDC9Wuu//LTpBXJGN 2gzYA/pE+3QWjWyrX/JuVFmqO3W9Sk/R2ck6HRRln0cz+T0oMeGB6/8RzqN8KdcW W2mdaCi/u/eFSC4/WyGJ12wM6IgN0kY= -----END CERTIFICATE-----Generated at Sun Apr 27 07:48:16 2025 by rpki-client