$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa File: 139a9492-65e1-3f75-ab00-d84e01d973d7.roa (raw, json) Hash identifier: INBSVp5srq5CF5vMVfRvYq8/Jv7XRNxK1vS7eQO85Zk= Subject key identifier: C1:F3:4C:EA:4D:0B:7B:0D:85:6A:82:06:A1:DA:D1:BE:FB:83:2F:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD3757F0C24E66947FD40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:75:7f:0c:24:e6:69:47:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=cb80ee1d-043f-44ef-a17c-a419ae4ba638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:70:a7:91:b6:8a:a6:e4:cc:27:bc:60:55: 70:29:ab:a5:34:19:dc:72:5f:27:d7:d6:c9:95:ce: a9:6a:33:a2:fb:5f:12:04:26:81:09:aa:4a:d7:68: 0e:eb:42:44:23:0b:17:f8:8b:b4:7b:c7:75:85:d3: 24:fb:a7:a7:fb:79:89:43:b8:95:61:2a:57:55:fa: 7f:a1:8c:27:58:17:1c:58:8e:b4:f6:1f:a3:93:76: 57:6d:30:7a:3e:31:f6:6c:f0:73:70:36:7c:af:80: 33:94:54:3b:c6:97:96:e0:f7:98:02:53:37:58:85: 13:29:33:84:34:05:d3:b8:22:cb:31:9a:fb:92:3b: f0:a8:ee:2f:7e:4a:9f:fe:be:e2:fb:81:70:27:de: 6d:ac:33:ee:45:93:ae:11:97:b3:1a:f1:8a:07:b9: 8a:e7:c3:74:79:20:6f:a4:39:99:d0:c8:9b:71:91: a6:bc:b9:74:a8:15:aa:0c:a0:87:81:31:e7:76:76: 89:e0:b4:c4:b6:03:ba:75:12:94:4b:57:5c:6f:dd: 86:8d:d6:55:41:1e:34:d4:2b:b1:5c:d2:ce:02:55: 21:5f:19:db:12:54:d4:76:07:ea:c3:02:27:f1:32: d3:97:b3:95:39:fd:83:8a:e5:db:d5:be:1a:ea:78: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F3:4C:EA:4D:0B:7B:0D:85:6A:82:06:A1:DA:D1:BE:FB:83:2F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0e:bd:bb:e8:af:0b:2b:b4:11:5b:be:8e:c8:91:46:2e:b7: 15:b1:80:c5:1a:b8:46:f8:27:93:69:e7:c8:a2:cf:8a:10:78: 56:c1:26:1a:94:a7:8d:6a:54:76:de:35:e8:a8:09:e1:3f:0e: e1:c9:44:cb:ac:f4:4b:47:7b:ae:1b:31:8a:96:02:0a:29:65: 99:be:5c:05:5b:79:be:08:8a:4a:de:5d:a0:8d:02:4d:43:33: e9:43:c8:23:96:3d:7e:31:58:16:c0:d4:40:26:4f:6c:22:b5: f7:64:45:81:29:47:46:f6:cc:68:d2:a5:e6:e6:1f:bf:05:0d: 26:f3:82:fa:b4:25:52:0b:a8:3b:58:5c:90:d6:76:2f:e7:3a: c8:ac:5b:f7:99:09:bf:6a:47:e5:e5:ad:d1:50:ca:b2:de:4b: 03:6a:69:ad:9a:5f:bc:a1:6a:a0:f4:df:81:1e:88:8a:a2:53: ac:18:b8:dd:9a:3a:1c:8b:7c:a5:bb:7d:10:79:59:80:f6:23: d7:eb:43:8a:b2:2a:df:2e:94:9a:ac:0c:c1:2c:a9:cd:cf:28: bc:9f:1d:5f:c0:d4:c6:d7:54:94:0b:05:84:81:d2:21:9d:0f: 49:0c:96:23:17:97:4d:12:27:b1:fa:21:86:16:95:a5:3e:7c: 0e:63:e8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9N1fwwk5mlH/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Y2I4MGVlMWQtMDQzZi00NGVmLWExN2MtYTQxOWFlNGJhNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAdwp5G2iqbkzCe8YFVwKaulNBnccl8n19bJ lc6pajOi+18SBCaBCapK12gO60JEIwsX+Iu0e8d1hdMk+6en+3mJQ7iVYSpXVfp/ oYwnWBccWI609h+jk3ZXbTB6PjH2bPBzcDZ8r4AzlFQ7xpeW4PeYAlM3WIUTKTOE NAXTuCLLMZr7kjvwqO4vfkqf/r7i+4FwJ95trDPuRZOuEZezGvGKB7mK58N0eSBv pDmZ0MibcZGmvLl0qBWqDKCHgTHndnaJ4LTEtgO6dRKUS1dcb92GjdZVQR401Cux XNLOAlUhXxnbElTUdgfqwwIn8TLTl7OVOf2DiuXb1b4a6nhLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHzTOpNC3sNhWqCBqHa0b77gy/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM5YTk0OTItNjVlMS0z Zjc1LWFiMDAtZDg0ZTAxZDk3M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgOvbvorwsrtBFbvo7IkUYutxWxgMUauEb4J5Np58iiz4oQeFbBJhqU p41qVHbeNeioCeE/DuHJRMus9EtHe64bMYqWAgopZZm+XAVbeb4IikreXaCNAk1D M+lDyCOWPX4xWBbA1EAmT2witfdkRYEpR0b2zGjSpebmH78FDSbzgvq0JVILqDtY XJDWdi/nOsisW/eZCb9qR+XlrdFQyrLeSwNqaa2aX7yhaqD034EeiIqiU6wYuN2a OhyLfKW7fRB5WYD2I9frQ4qyKt8ulJqsDMEsqc3PKLyfHV/A1MbXVJQLBYSB0iGd D0kMliMXl00SJ7H6IYYWlaU+fA5j6MY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:03 2025 by rpki-client