$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa File: 1013a95f-fd72-3dce-bfb5-521c56744daa.roa (raw, json) Hash identifier: v3NHLqYk+8IfgDyT29ZD7WHGSj82lQ8yn3SLAvB5zFo= Subject key identifier: CA:B2:8D:9A:91:EF:16:A7:76:E2:50:D4:5D:10:A6:DB:1C:85:41:B6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848A99635AE8925E4BD96378C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:35:ae:89:25:e4:bd:96:37:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3af0a8cd-11b6-4a9c-85b5-fcb8257d8949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:64:56:d1:f7:0e:07:de:89:3c:b2:ce:e4: 0a:91:95:dd:f9:70:8f:5c:36:c1:3e:11:5d:c3:2c: 0b:b6:8e:12:e2:f7:51:ee:d0:24:4f:d4:bc:58:09: a4:2c:8d:11:88:1c:ec:fb:98:85:7c:94:16:cd:bf: f0:b3:1d:be:3e:ba:92:e8:d0:14:d2:92:61:a7:f1: 2b:66:bd:37:68:0e:32:d4:b3:26:f1:59:2b:1b:94: cd:46:b9:a8:0a:af:9e:ed:72:0b:84:4c:fe:6c:8e: 06:f2:8c:3c:91:3e:05:f8:cd:32:e8:0f:f5:b7:a0: 90:08:10:95:20:60:e9:18:d5:ec:fe:5a:b6:aa:3e: 2a:b9:2c:f3:bf:dc:56:43:ce:2d:79:73:cd:5c:a1: 62:06:8d:20:ca:35:cc:47:f0:8c:0a:98:18:31:6a: 39:f3:5c:b8:22:c1:14:16:83:67:2c:d0:f6:f5:dd: d2:89:f4:38:8d:72:1c:28:a4:78:67:09:7c:14:3d: b3:38:44:33:03:11:6b:a7:31:d7:88:0f:a8:b2:c4: 5b:1a:cb:d4:90:eb:fb:15:bb:cf:ad:40:0a:8a:f2: 5a:2c:ab:60:be:14:cc:97:ae:c9:1d:29:66:16:17: fb:6d:6d:b8:10:c3:37:17:6d:ac:42:6a:6a:30:51: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:8D:9A:91:EF:16:A7:76:E2:50:D4:5D:10:A6:DB:1C:85:41:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:38:4f:e7:94:55:6a:af:ce:82:48:b2:71:cd:c4:cc:58:34: 6f:77:40:27:51:ca:43:b0:9a:ef:d6:d9:55:c9:dc:2a:11:33: 0d:0e:cf:92:08:a5:94:00:4e:1a:14:1c:1a:f3:b0:3d:e5:de: 15:4a:ea:aa:dd:e7:fe:de:23:ef:b6:08:c2:e2:80:69:59:ad: a5:bd:06:6b:26:7d:1f:34:63:33:50:17:f3:2d:b2:f1:b9:1d: 8e:3b:a1:06:42:ce:08:a9:e1:ae:82:6f:87:1a:af:6e:db:a1: 21:ae:bc:99:f2:2d:6b:60:26:96:49:f0:94:d6:b2:5e:f3:d1: 48:9b:be:1a:2c:82:26:00:f0:c8:b0:7d:c9:50:3d:f1:fa:6a: 1e:c1:65:64:dd:b9:58:05:4f:ea:4e:cd:02:c3:3f:5e:cc:d0: 87:a1:d2:45:20:91:fd:e0:4e:8a:e6:18:1f:1a:c2:68:4b:53: 03:e8:13:7c:3c:50:93:d6:41:08:0d:4b:29:40:8e:be:6a:b2: 1d:d3:13:3e:01:82:78:7d:46:61:7b:25:82:43:56:3f:f5:e4: aa:68:86:6a:e9:f8:57:98:e3:71:2c:5b:a5:da:58:75:b5:21: a3:40:5b:b1:ec:dd:5d:ce:61:0f:bc:f1:8c:e0:6c:c7:84:ce: 7d:ab:fc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljWuiSXkvZY3jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FmMGE4Y2QtMTFiNi00YTljLTg1YjUtZmNiODI1N2Q4OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmNkVtH3DgfeiTyyzuQKkZXd+XCPXDbBPhFd wywLto4S4vdR7tAkT9S8WAmkLI0RiBzs+5iFfJQWzb/wsx2+PrqS6NAU0pJhp/Er Zr03aA4y1LMm8VkrG5TNRrmoCq+e7XILhEz+bI4G8ow8kT4F+M0y6A/1t6CQCBCV IGDpGNXs/lq2qj4quSzzv9xWQ84teXPNXKFiBo0gyjXMR/CMCpgYMWo581y4IsEU FoNnLND29d3SifQ4jXIcKKR4Zwl8FD2zOEQzAxFrpzHXiA+ossRbGsvUkOv7FbvP rUAKivJaLKtgvhTMl67JHSlmFhf7bW24EMM3F22sQmpqMFEQgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqyjZqR7xanduJQ1F0QptschUG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTAxM2E5NWYtZmQ3Mi0z ZGNlLWJmYjUtNTIxYzU2NzQ0ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc4T+eUVWqvzoJIsnHNxMxYNG93QCdRykOwmu/W2VXJ3CoRMw0Oz5II pZQAThoUHBrzsD3l3hVK6qrd5/7eI++2CMLigGlZraW9BmsmfR80YzNQF/MtsvG5 HY47oQZCzgip4a6Cb4car27boSGuvJnyLWtgJpZJ8JTWsl7z0UibvhosgiYA8Miw fclQPfH6ah7BZWTduVgFT+pOzQLDP17M0Ieh0kUgkf3gTormGB8awmhLUwPoE3w8 UJPWQQgNSylAjr5qsh3TEz4Bgnh9RmF7JYJDVj/15Kpohmrp+FeY43EsW6XaWHW1 IaNAW7Hs3V3OYQ+88YzgbMeEzn2r/CI= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:13 2025 by rpki-client