$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa File: 0548421c-e41b-3675-9d81-df4e842b0bb4.roa (raw, json) Hash identifier: u+MzjsWbODrTH15zHnhgfAWJhNk62pnFT4aGOzxY47c= Subject key identifier: A1:EF:B1:4F:F2:11:C6:6E:56:A2:41:C8:C3:53:E2:F9:0F:63:53:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C267191117E4E1DA694C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:26:71:91:11:7e:4e:1d:a6:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=bd5d2168-0bf1-4707-9658-08c5c742e59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:e0:0e:25:8c:df:83:14:67:e7:b0:33:39: 1b:ca:63:58:44:f1:e3:eb:89:5d:41:f1:6a:70:11: 36:37:b9:e4:88:96:b6:f8:0e:7a:b3:30:b1:0d:d5: c4:10:29:0e:b9:9e:f3:e1:ad:e0:7d:d3:a5:4b:16: ac:1c:5f:ad:f7:1d:1f:bb:c0:8e:17:5e:2b:87:c9: 4e:85:ca:6b:dd:30:9b:6e:4a:e2:ad:bd:d0:d0:fd: ff:5d:48:6f:e2:9b:0c:16:c4:b2:1f:05:2e:99:37: f9:f3:e9:dd:c4:50:a5:f2:ae:22:14:e1:70:14:7d: 65:09:b7:fe:c7:80:3a:08:76:df:f5:6f:fc:65:ac: be:a8:dc:31:1c:0f:9f:55:d5:88:ba:7b:66:41:dd: c6:8e:a4:7a:22:64:09:cc:2c:3a:fe:05:47:4d:89: 2f:e2:20:90:22:70:5f:84:7a:84:8b:9d:07:c1:78: f7:e3:8f:a2:5f:2a:9e:0b:57:ed:1a:fc:0b:55:65: e5:74:29:c8:8f:1b:86:4a:3d:88:5a:b1:34:d9:b3: f0:ab:69:1c:d5:ec:0c:84:3d:c6:67:25:50:e8:a6: 55:84:91:ce:00:01:df:e4:e9:87:8a:4c:1a:14:35: f8:0b:25:0d:fb:cf:6a:3f:3d:9f:33:5d:6b:2c:58: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EF:B1:4F:F2:11:C6:6E:56:A2:41:C8:C3:53:E2:F9:0F:63:53:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5f:20:ff:a7:a4:bd:41:01:ba:43:68:b2:0e:7b:2e:51:8d: a3:33:24:d7:6c:c8:09:e8:07:61:6b:9c:27:75:40:19:62:ae: f4:ce:13:4e:99:c0:34:cd:46:33:07:c1:5a:7e:b4:4a:53:ba: 00:c1:6b:76:e9:44:a2:85:12:e5:63:2a:f2:7f:b9:c0:96:00: 71:f6:60:a2:34:84:b7:3c:60:a5:5f:2e:5a:f6:94:ea:f9:ff: 51:81:f6:c6:bd:69:e1:04:ab:35:04:e4:06:cc:5a:2b:a3:28: e0:a6:2b:cd:26:14:60:e2:53:f4:67:3c:5e:db:92:61:e8:96: af:dc:c8:35:da:1b:64:31:1d:8e:06:ff:fb:c2:a9:e1:ce:63: 7c:a6:3e:cc:07:30:37:2c:d4:09:f5:1a:a4:69:6a:0f:4f:85: 14:e9:9c:20:e4:90:4e:7f:c3:d5:eb:25:df:f8:be:39:97:25: 98:95:bc:07:ee:e6:32:92:d7:ac:b6:b1:9a:bf:37:92:04:ee: 84:a9:d0:f7:2e:03:68:70:ce:ac:0d:e8:39:f6:50:65:d6:53: 13:c2:e1:50:9c:6d:2a:da:a1:c9:a6:81:2e:e4:0d:2e:fc:15: e4:5d:3f:47:54:20:37:a7:ce:48:b6:ae:ca:06:e3:bd:43:f2: c5:d9:de:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCZxkRF+Th2mlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YmQ1ZDIxNjgtMGJmMS00NzA3LTk2NTgtMDhjNWM3NDJlNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyETgDiWM34MUZ+ewMzkbymNYRPHj64ldQfFq cBE2N7nkiJa2+A56szCxDdXEECkOuZ7z4a3gfdOlSxasHF+t9x0fu8COF14rh8lO hcpr3TCbbkrirb3Q0P3/XUhv4psMFsSyHwUumTf58+ndxFCl8q4iFOFwFH1lCbf+ x4A6CHbf9W/8Zay+qNwxHA+fVdWIuntmQd3GjqR6ImQJzCw6/gVHTYkv4iCQInBf hHqEi50HwXj344+iXyqeC1ftGvwLVWXldCnIjxuGSj2IWrE02bPwq2kc1ewMhD3G ZyVQ6KZVhJHOAAHf5OmHikwaFDX4CyUN+89qPz2fM11rLFjVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHvsU/yEcZuVqJByMNT4vkPY1PpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDU0ODQyMWMtZTQxYi0z Njc1LTlkODEtZGY0ZTg0MmIwYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdfIP+npL1BAbpDaLIOey5RjaMzJNdsyAnoB2FrnCd1QBlirvTOE06Z wDTNRjMHwVp+tEpTugDBa3bpRKKFEuVjKvJ/ucCWAHH2YKI0hLc8YKVfLlr2lOr5 /1GB9sa9aeEEqzUE5AbMWiujKOCmK80mFGDiU/RnPF7bkmHolq/cyDXaG2QxHY4G //vCqeHOY3ymPswHMDcs1An1GqRpag9PhRTpnCDkkE5/w9XrJd/4vjmXJZiVvAfu 5jKS16y2sZq/N5IE7oSp0PcuA2hwzqwN6Dn2UGXWUxPC4VCcbSraocmmgS7kDS78 FeRdP0dUIDenzki2rsoG471D8sXZ3ts= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:19 2025 by rpki-client