$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa File: e794736c-e567-3e33-9613-3ca6fdffe5e0.roa (raw, json) Hash identifier: ue+EH/0mkZQ1uaaOkTHK2aZL09dPuW2tagT97ILFdII= Subject key identifier: CD:54:7D:DD:FB:DC:23:46:FC:CA:DC:82:59:37:5D:48:C8:16:B8:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF44061F9F2A589599440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f4:40:61:f9:f2:a5:89:59:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=28916b95-1aa9-4350-98da-8a77825ea334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:58:60:2c:8e:39:42:02:6f:c1:20:9c:90: 43:63:19:39:af:24:05:d0:59:97:93:90:c7:48:2a: e5:85:16:01:eb:6c:1c:64:a0:91:cd:cd:c3:46:fc: d7:bc:80:91:2d:6c:1c:18:ca:c5:2e:ce:21:30:3a: 1a:a7:30:0a:0e:bb:e7:56:65:20:cd:85:52:fc:5d: 93:ab:d4:5a:b5:79:22:ea:56:ad:f5:22:21:22:f8: b2:59:df:e4:bf:84:a2:c0:a5:f3:43:aa:e4:36:d7: 66:6b:db:60:18:6a:8d:3c:8f:43:5b:b7:df:ae:18: 95:14:9f:3a:63:90:aa:63:5a:16:c8:a6:f2:36:98: a0:4b:90:19:2a:08:07:07:bc:99:42:11:c3:60:c4: bf:c4:13:82:aa:19:79:a3:70:35:1c:67:ab:a3:81: 83:fb:4c:6b:98:98:1a:02:15:a0:be:76:9b:af:7d: e2:96:2f:72:98:13:32:b6:36:ce:46:ef:58:92:0e: 0a:dc:f6:bd:ee:5d:84:2d:8f:89:cc:7a:6e:5d:81: 9d:d3:ee:af:64:de:51:de:a9:8b:f3:d9:d2:36:8f: b8:ba:25:83:77:e1:47:28:8a:60:da:08:38:bf:1e: 78:c0:92:18:1c:39:c3:89:7c:f6:21:c2:d2:b8:d9: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:7D:DD:FB:DC:23:46:FC:CA:DC:82:59:37:5D:48:C8:16:B8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e9:c2:e7:0a:a7:a1:f7:0d:16:64:07:05:47:a8:81:0e:0d: 4f:b1:aa:3c:44:98:f6:03:dd:aa:01:f4:98:ab:a6:a2:08:f7: d2:83:5c:8e:6c:50:36:3b:e7:a5:d9:4d:d9:3a:23:ef:10:f5: 76:39:35:f5:78:60:61:e1:66:9a:bc:15:3e:01:c5:ff:ec:4c: 9b:b9:23:4b:42:43:43:87:72:88:82:3a:c4:d3:dc:61:ec:e8: 36:39:c1:b5:e3:66:58:64:55:e2:b1:0b:8b:35:0d:e2:4d:29: 20:01:87:fe:b1:ef:26:b2:f9:84:aa:c4:c1:41:c0:7e:2d:82: f5:a2:81:81:61:33:de:8c:87:2f:d7:29:da:25:16:75:a8:ec: 18:55:86:1f:68:e7:07:06:b1:a9:35:ee:96:89:cc:86:d2:4f: eb:a8:25:67:c6:1b:c8:ec:02:1d:58:65:bd:f8:4c:9c:4a:17: 99:11:39:1f:bd:8d:80:43:8f:b2:70:26:2a:e7:9c:ab:51:36: 54:59:d9:7a:e9:e7:a7:ef:3b:c0:98:77:4a:f3:59:d7:01:13: 92:a0:94:54:25:06:2f:12:74:76:ec:56:fb:d7:1e:fb:2f:38: 98:77:47:7e:57:ad:5f:f6:c7:4e:9c:31:a1:04:1f:54:60:57: 08:70:3d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvRAYfnypYlZlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk Mjg5MTZiOTUtMWFhOS00MzUwLTk4ZGEtOGE3NzgyNWVhMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyVYYCyOOUICb8EgnJBDYxk5ryQF0FmXk5DH SCrlhRYB62wcZKCRzc3DRvzXvICRLWwcGMrFLs4hMDoapzAKDrvnVmUgzYVS/F2T q9RatXki6lat9SIhIviyWd/kv4SiwKXzQ6rkNtdma9tgGGqNPI9DW7ffrhiVFJ86 Y5CqY1oWyKbyNpigS5AZKggHB7yZQhHDYMS/xBOCqhl5o3A1HGero4GD+0xrmJga AhWgvnabr33ili9ymBMytjbORu9Ykg4K3Pa97l2ELY+JzHpuXYGd0+6vZN5R3qmL 89nSNo+4uiWDd+FHKIpg2gg4vx54wJIYHDnDiXz2IcLSuNn7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Ufd373CNG/Mrcglk3XUjIFrixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTc5NDczNmMtZTU2Ny0z ZTMzLTk2MTMtM2NhNmZkZmZlNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDpwucKp6H3DRZkBwVHqIEODU+xqjxEmPYD3aoB9JirpqII99KDXI5s UDY756XZTdk6I+8Q9XY5NfV4YGHhZpq8FT4Bxf/sTJu5I0tCQ0OHcoiCOsTT3GHs 6DY5wbXjZlhkVeKxC4s1DeJNKSABh/6x7yay+YSqxMFBwH4tgvWigYFhM96Mhy/X KdolFnWo7BhVhh9o5wcGsak17paJzIbST+uoJWfGG8jsAh1YZb34TJxKF5kROR+9 jYBDj7JwJirnnKtRNlRZ2Xrp56fvO8CYd0rzWdcBE5KglFQlBi8SdHbsVvvXHvsv OJh3R35XrV/2x06cMaEEH1RgVwhwPcs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:12 2025 by rpki-client