$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa File: e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa (raw, json) Hash identifier: TMlM3pRCJ6MIK85fHA98/hEuVIyMpIR4qKpkzbXkawk= Subject key identifier: 5A:07:05:B5:1D:D0:EC:9F:EB:1B:6F:C4:75:D4:A5:83:1E:A9:EC:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849473401AB5D80685D6E4539D0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:34:01:ab:5d:80:68:5d:6e:45:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=d201bc13-8840-42ef-ac78-85fb610e7dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:da:60:d2:85:65:ba:e4:5b:98:2c:54:ee: 0c:9d:4c:58:8e:bb:ad:e9:c5:53:bc:31:a2:e4:af: bf:e6:ff:f0:32:02:72:1a:aa:2a:c6:d5:d1:09:7f: 89:97:44:6e:f8:d3:34:c9:b3:ce:6c:9e:a4:40:7e: 86:2d:1e:ab:fd:10:a8:18:49:c6:2f:6b:c1:9e:d0: 80:ff:21:a1:ad:ea:e7:f5:96:aa:9b:1d:06:37:57: 51:20:19:10:09:fb:66:c9:b3:3a:46:5a:b7:0e:92: a7:20:f1:c7:16:62:70:1f:75:b8:b5:d1:41:be:7f: 29:ea:0c:53:b3:0b:a0:24:53:53:26:9e:16:4f:be: f4:cc:86:07:f0:d7:53:b8:5f:5b:42:52:61:f2:06: 33:80:11:ef:f3:e5:74:0c:16:62:2d:53:5c:d2:cb: c7:dd:b9:fc:6c:92:bb:a6:31:32:45:01:18:a2:c5: b3:46:7f:19:33:85:77:75:85:7b:dd:97:19:22:60: 7d:41:33:a6:08:a5:b7:f0:f6:5b:55:4f:24:3f:27: 59:a6:de:15:df:7c:51:f4:ed:81:f1:f3:87:0e:ba: 68:31:1f:1d:d5:6a:f3:61:24:a1:8c:47:0a:95:11: d0:f9:af:1a:54:30:e1:3a:61:41:4f:a9:ed:c4:03: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:05:B5:1D:D0:EC:9F:EB:1B:6F:C4:75:D4:A5:83:1E:A9:EC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:be:45:26:2a:82:a8:e3:ac:b8:bd:6b:36:13:f1:dc:8e:70: 6f:94:8d:b1:83:14:04:d9:11:55:70:37:c9:cc:5e:93:3c:df: a7:19:6b:ca:6c:f1:2b:ac:07:f1:39:86:a5:74:7f:2c:c6:31: 03:cb:9b:cf:11:09:f3:8a:35:47:8b:ab:4d:cd:92:15:40:c1: 6f:67:1e:03:0c:d9:ea:5d:d7:13:b8:5b:33:6e:68:f7:a4:d3: 59:b3:9b:02:2f:47:5e:6a:6a:0f:53:f8:7e:b8:3c:19:41:91: 8e:d5:9d:17:2f:f5:79:ca:ca:b6:6c:a9:5d:1b:40:9b:d3:b3: 3f:97:4e:e7:42:53:b0:44:60:bf:aa:82:32:3e:01:bb:01:8c: da:83:68:82:d0:7a:0b:8c:ec:af:7a:11:d6:cb:f2:aa:f7:af: 17:1d:13:bd:39:0d:11:20:59:bf:fa:8e:ea:4b:43:08:5e:fd: ab:6c:1d:05:90:53:db:cc:26:cc:84:53:48:03:27:b4:95:bd: fd:11:3b:13:bd:d9:4e:4c:6a:00:f8:ce:7b:53:2e:97:ef:c7: 6b:82:6b:f3:f8:5c:d7:68:a5:93:32:17:7c:48:33:7a:b4:b5: 20:00:db:e5:22:96:7d:f2:e0:33:a7:fa:62:9b:7a:49:00:8e: 7a:4f:cf:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNAGrXYBoXW5FOdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZDIwMWJjMTMtODg0MC00MmVmLWFjNzgtODVmYjYxMGU3ZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYbaYNKFZbrkW5gsVO4MnUxYjrut6cVTvDGi 5K+/5v/wMgJyGqoqxtXRCX+Jl0Ru+NM0ybPObJ6kQH6GLR6r/RCoGEnGL2vBntCA /yGhrern9Zaqmx0GN1dRIBkQCftmybM6Rlq3DpKnIPHHFmJwH3W4tdFBvn8p6gxT swugJFNTJp4WT770zIYH8NdTuF9bQlJh8gYzgBHv8+V0DBZiLVNc0svH3bn8bJK7 pjEyRQEYosWzRn8ZM4V3dYV73ZcZImB9QTOmCKW38PZbVU8kPydZpt4V33xR9O2B 8fOHDrpoMR8d1WrzYSShjEcKlRHQ+a8aVDDhOmFBT6ntxAMQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoHBbUd0Oyf6xtvxHXUpYMeqeyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTFlM2FkYjctMTBjYS0z OTMxLWFhMDktMjlmOTZlYThkMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2+RSYqgqjjrLi9azYT8dyOcG+UjbGDFATZEVVwN8nMXpM836cZa8ps 8SusB/E5hqV0fyzGMQPLm88RCfOKNUeLq03NkhVAwW9nHgMM2epd1xO4WzNuaPek 01mzmwIvR15qag9T+H64PBlBkY7VnRcv9XnKyrZsqV0bQJvTsz+XTudCU7BEYL+q gjI+AbsBjNqDaILQeguM7K96EdbL8qr3rxcdE705DREgWb/6jupLQwhe/atsHQWQ U9vMJsyEU0gDJ7SVvf0ROxO92U5MagD4zntTLpfvx2uCa/P4XNdopZMyF3xIM3q0 tSAA2+Uiln3y4DOn+mKbekkAjnpPz14= -----END CERTIFICATE-----Generated at Sun Apr 27 05:35:57 2025 by rpki-client