$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa File: 13685917-b747-38e7-b217-bfb35c42a823.roa (raw, json) Hash identifier: zdjnAiWLSAUoJvIVPCFoCcQSwC1GJDaW4ZjBu3pTEEs= Subject key identifier: 24:E4:97:D7:54:E2:CD:15:6D:F9:34:06:62:33:5A:31:43:23:A5:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584900216B09A9EF3313E5CA87A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6b:09:a9:ef:33:13:e5:ca:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=bfac94fe-5c2a-4246-a661-76724018a32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:9c:13:b8:7c:ee:c2:8b:75:5d:d8:e3:50: 61:29:b0:34:d0:3d:fb:0b:75:92:89:20:23:03:78: 89:76:b7:c1:f1:b1:4b:f0:63:4a:78:a3:4d:0e:cb: 75:43:8b:83:56:8a:a4:3d:09:e2:76:d1:2b:97:06: 7a:ad:b8:97:49:d6:8e:bb:92:3a:7b:ba:73:af:fa: 92:01:a7:cd:3a:eb:da:0b:8f:a4:29:a2:6a:f9:14: 6d:47:e1:c7:a5:e5:ee:a2:79:f1:47:a6:69:25:f6: 08:0c:c7:6f:e2:1d:ee:b3:c8:f7:db:34:fc:bc:b2: 92:a0:d6:d6:8b:96:dc:ab:b8:06:37:8c:2b:1e:5b: dc:43:58:d6:55:ba:74:a0:9b:49:ea:28:35:aa:a9: d8:f2:99:01:d2:d4:7b:ee:81:db:f3:0b:9b:4a:74: d0:76:da:0f:ca:c9:a4:c0:5e:5e:7e:c7:9b:7a:b3: 3c:e8:55:15:bf:10:70:b2:72:b3:11:01:d7:44:ed: fe:0f:7d:13:e2:77:00:23:d7:df:09:13:c2:66:e2: a5:64:65:1e:32:4e:42:e2:ef:8e:5c:a5:9c:53:c6: 08:62:3e:04:66:7e:36:3e:14:6e:ff:0d:cb:fc:c5: 67:17:81:b5:d4:49:26:64:9f:45:9c:99:0f:03:43: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E4:97:D7:54:E2:CD:15:6D:F9:34:06:62:33:5A:31:43:23:A5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:69:bb:b2:a0:a3:91:b6:87:ba:a6:bc:b0:10:ce:7c:eb:e5: fa:97:c7:20:01:fa:88:fa:20:1d:e4:e3:33:62:f0:28:9c:59: ca:6f:8f:b9:0b:5e:08:01:a8:80:d2:92:0a:e9:58:30:65:f2: 88:1b:87:e8:41:4d:14:99:f0:b9:05:46:31:82:d8:b3:3f:fa: 41:15:b2:b6:94:38:d4:65:0a:36:bf:dc:64:ce:ea:cb:8f:a0: 0e:07:40:f5:04:f6:d4:07:a1:33:99:cb:f0:32:16:83:ce:2a: 4d:03:3e:b5:06:57:f0:ff:7e:b5:75:cd:22:9b:be:86:71:62: 76:4c:8b:5a:7c:52:44:65:8d:b6:53:d2:32:b8:a1:ae:3d:eb: e5:ad:50:1b:ff:66:46:36:5d:05:b3:80:36:ae:01:39:34:9d: 50:36:13:54:92:08:ae:f9:da:0a:34:9e:6b:54:6b:3e:a9:05: 99:6d:e1:e1:a6:66:61:62:b1:f8:2a:30:78:e6:23:08:44:25: ea:77:a6:55:ad:4f:01:0a:db:ad:8d:37:62:75:9c:64:82:ed: ff:12:f0:7d:71:10:6a:25:0e:30:a5:f8:54:24:de:d1:6a:92: 17:d7:10:ff:d9:9b:96:47:8f:b5:b2:8e:66:99:2a:99:d4:ff: cf:ca:21:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWsJqe8zE+XKh6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YmZhYzk0ZmUtNWMyYS00MjQ2LWE2NjEtNzY3MjQwMThhMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVScE7h87sKLdV3Y41BhKbA00D37C3WSiSAj A3iJdrfB8bFL8GNKeKNNDst1Q4uDVoqkPQnidtErlwZ6rbiXSdaOu5I6e7pzr/qS AafNOuvaC4+kKaJq+RRtR+HHpeXuonnxR6ZpJfYIDMdv4h3us8j32zT8vLKSoNbW i5bcq7gGN4wrHlvcQ1jWVbp0oJtJ6ig1qqnY8pkB0tR77oHb8wubSnTQdtoPysmk wF5efseberM86FUVvxBwsnKzEQHXRO3+D30T4ncAI9ffCRPCZuKlZGUeMk5C4u+O XKWcU8YIYj4EZn42PhRu/w3L/MVnF4G11EkmZJ9FnJkPA0MvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTkl9dU4s0Vbfk0BmIzWjFDI6XPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM2ODU5MTctYjc0Ny0z OGU3LWIyMTctYmZiMzVjNDJhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItpu7Kgo5G2h7qmvLAQznzr5fqXxyAB+oj6IB3k4zNi8CicWcpvj7kL XggBqIDSkgrpWDBl8ogbh+hBTRSZ8LkFRjGC2LM/+kEVsraUONRlCja/3GTO6suP oA4HQPUE9tQHoTOZy/AyFoPOKk0DPrUGV/D/frV1zSKbvoZxYnZMi1p8UkRljbZT 0jK4oa496+WtUBv/ZkY2XQWzgDauATk0nVA2E1SSCK752go0nmtUaz6pBZlt4eGm ZmFisfgqMHjmIwhEJep3plWtTwEK262NN2J1nGSC7f8S8H1xEGolDjCl+FQk3tFq khfXEP/Zm5ZHj7WyjmaZKpnU/8/KIbA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:17 2025 by rpki-client