$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa File: 14a380d8-92fd-3622-b799-436fce5ea07c.roa (raw, json) Hash identifier: QBF+OdPvDVW/zJJz5haOlaJk1eltE/pM0fTnoRPvGkE= Subject key identifier: 57:A6:15:F1:C2:D0:C2:B9:D6:D0:54:A0:B9:EA:39:EB:CF:E8:D3:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694E01137DD10CBC2B5B90 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:01:13:7d:d1:0c:bc:2b:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=261269d8-ebb3-48e6-9ca8-82e667ad6eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:69:1b:28:d0:e3:02:bf:bc:fb:0c:05:10: 11:7e:77:9a:fe:4d:10:e3:1f:d4:c5:f6:7e:a7:ce: f2:c1:12:a1:5f:5f:66:4e:ee:b6:be:bf:f1:cc:01: ad:55:a8:25:6d:2a:d8:a8:c5:93:35:67:9f:9d:87: 0b:a5:4d:50:30:c9:44:fc:39:15:0c:5f:f1:17:ec: 9e:f4:0f:5d:1b:4f:ec:a8:ca:c4:d5:5d:4d:5c:00: 64:ae:94:8f:d4:25:d0:32:8e:85:fa:9b:c1:24:d6: 2b:6b:bf:62:d1:da:cf:24:2e:16:25:dc:3a:38:c6: c1:64:9d:d0:6c:06:4a:a6:26:c5:40:24:09:d7:5f: a6:ef:74:da:fe:6d:b9:d2:e2:e0:11:22:69:dc:42: e1:f2:b1:7b:aa:13:0f:89:3d:de:eb:09:59:c0:11: fd:12:98:3f:8f:33:5c:34:31:67:b2:57:c0:2c:c7: ef:c5:13:75:a9:52:39:b9:d5:c8:cf:0c:3e:2c:fb: 83:a0:f7:31:7e:35:01:55:f0:68:92:46:2d:da:6a: 2d:16:10:ff:52:8e:49:92:28:00:0c:2c:1b:a4:48: d7:a7:b2:fe:ab:9c:9d:1c:a4:c5:c1:c1:39:ef:ac: 53:5c:bd:4b:1b:5a:7a:e6:4c:ca:e9:9e:5c:fc:20: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:15:F1:C2:D0:C2:B9:D6:D0:54:A0:B9:EA:39:EB:CF:E8:D3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:51:89:45:3e:f0:89:ec:f6:03:ae:d0:7e:cf:9c:e2:0b:f1: 6d:fe:44:3a:6e:e3:ec:01:45:75:37:58:dc:41:0f:c1:c2:96: 6c:72:30:09:30:d0:c9:1a:ce:47:91:9f:c5:80:d3:e8:44:20: 7f:02:62:c6:24:50:99:17:e5:93:b0:1d:d5:6c:05:b3:34:6a: 0c:7d:76:b8:3d:d0:f9:3b:c4:0d:d1:44:78:e8:2e:68:88:e5: 34:31:23:ff:20:a9:c9:58:c0:bd:f2:1a:fb:d3:b4:18:1a:c2: fb:23:96:62:9a:66:28:4e:6d:ec:c4:8e:0e:80:3f:25:e5:0b: e3:fb:cc:e4:c1:74:2a:8c:6c:cf:e6:24:94:a4:a2:06:b2:66: 99:f6:08:92:d9:5f:41:91:a7:5c:f0:22:13:b0:24:0a:3b:5b: f4:9e:44:27:07:a5:bf:fe:3a:06:ad:02:0f:06:a7:d3:55:00: 97:9d:ea:9b:4a:ba:b0:86:69:90:b1:fd:2b:23:a7:15:8f:b8: 7f:e8:f2:51:a3:b5:72:c6:e1:d5:91:7b:f3:bd:de:16:6f:00: b6:25:81:b6:4c:b0:98:cf:3f:a0:10:9c:9f:23:a0:e0:10:28: af:26:50:b2:3c:87:9d:af:07:18:1b:44:34:bb:52:b0:dc:58: 27:a5:fe:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU4BE33RDLwrW5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjYxMjY5ZDgtZWJiMy00OGU2LTljYTgtODJlNjY3YWQ2ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mlpGyjQ4wK/vPsMBRARfnea/k0Q4x/UxfZ+ p87ywRKhX19mTu62vr/xzAGtVaglbSrYqMWTNWefnYcLpU1QMMlE/DkVDF/xF+ye 9A9dG0/sqMrE1V1NXABkrpSP1CXQMo6F+pvBJNYra79i0drPJC4WJdw6OMbBZJ3Q bAZKpibFQCQJ11+m73Ta/m250uLgESJp3ELh8rF7qhMPiT3e6wlZwBH9Epg/jzNc NDFnslfALMfvxRN1qVI5udXIzww+LPuDoPcxfjUBVfBokkYt2motFhD/Uo5JkigA DCwbpEjXp7L+q5ydHKTFwcE576xTXL1LG1p65kzK6Z5c/CDGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFemFfHC0MK51tBUoLnqOevP6NP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRhMzgwZDgtOTJmZC0z NjIyLWI3OTktNDM2ZmNlNWVhMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1RiUU+8Ins9gOu0H7PnOIL8W3+RDpu4+wBRXU3WNxBD8HClmxyMAkw 0MkazkeRn8WA0+hEIH8CYsYkUJkX5ZOwHdVsBbM0agx9drg90Pk7xA3RRHjoLmiI 5TQxI/8gqclYwL3yGvvTtBgawvsjlmKaZihObezEjg6APyXlC+P7zOTBdCqMbM/m JJSkogayZpn2CJLZX0GRp1zwIhOwJAo7W/SeRCcHpb/+OgatAg8Gp9NVAJed6ptK urCGaZCx/SsjpxWPuH/o8lGjtXLG4dWRe/O93hZvALYlgbZMsJjPP6AQnJ8joOAQ KK8mULI8h52vBxgbRDS7UrDcWCel/jw= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:07 2025 by rpki-client