$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa File: 2752a970-d5ff-337c-a051-6b254bb9c802.roa (raw, json) Hash identifier: JsbqcSFqlYF82wSgHxeYrf7BK4k4nBAU9oo4uVuLxIg= Subject key identifier: 9F:ED:B7:4F:C3:FA:2E:6E:99:AF:92:AF:9A:DD:53:B6:57:8E:2F:96 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C264CB6215618C058DB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:26:4c:b6:21:56:18:c0:58:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=4d537cb5-a721-41e7-a46d-4ea2c9b6b022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:00:d5:36:82:9f:52:ee:3d:c0:f2:58:de: f9:6f:94:06:07:44:e1:93:cf:df:56:f5:78:31:57: ef:b3:a4:a6:80:e6:3c:c3:00:23:db:0a:ab:5f:04: af:5d:bc:50:fe:4c:b8:1a:e9:7a:cd:c4:be:79:8a: 71:9f:fd:24:5a:02:c9:48:84:b3:8a:65:c2:19:2e: 50:04:90:ea:a9:da:7a:81:52:07:5b:f1:3c:78:c3: c3:67:5e:a4:fb:bb:2d:92:57:18:8a:e7:18:14:56: 82:4e:29:c2:1e:a6:38:c7:e5:89:91:47:a6:65:bd: 69:7c:86:2d:04:51:9b:50:d2:9b:70:23:2f:a7:ac: cf:ae:29:44:7c:aa:da:4e:0e:d7:73:1f:49:73:c6: 18:83:b2:b9:1e:36:99:0d:13:1b:a0:f3:e9:17:0f: 72:1a:fc:73:52:03:c3:63:b0:24:a2:fc:f8:fe:6d: 5a:ae:95:04:30:b3:bd:e1:fa:ae:09:e6:05:a5:14: 38:5e:99:91:9f:9d:96:22:21:8e:6d:20:2d:ab:b7: 19:34:36:b6:26:b0:aa:b8:15:ee:ac:27:ad:f5:02: d4:e9:2c:f7:c6:ff:05:8a:97:9b:c6:4e:67:9b:0f: 14:ea:f8:5e:c0:55:0d:28:e7:35:46:55:56:48:c6: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:B7:4F:C3:FA:2E:6E:99:AF:92:AF:9A:DD:53:B6:57:8E:2F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1a:d5:68:ff:ed:16:c7:71:68:3b:95:eb:dc:ab:2e:55:f3: 32:2a:c9:28:95:39:9f:3c:c7:a4:8b:79:e4:e0:80:f4:b8:96: 83:5d:3c:72:bb:7c:94:00:5e:c4:f3:0b:e5:23:e8:e9:1d:72: 0c:28:75:7d:88:40:9e:f3:ce:50:80:f7:ec:84:ca:99:17:ee: a9:3d:b2:62:4c:79:e9:16:3b:ce:90:5a:01:c8:47:24:af:c8: 2d:06:a0:3d:1b:be:87:7d:70:4f:ce:8b:52:d9:c0:9f:e3:10: 9f:cb:66:03:4c:aa:b5:c5:a3:67:1b:4a:41:81:25:c1:9a:a4: 4e:85:ed:3f:13:38:b6:2f:c1:d1:41:64:64:90:c2:d9:a1:91: e9:b1:ee:e9:83:88:c1:06:5c:93:70:50:0d:b9:e8:5c:90:d9: a5:67:87:20:c7:b9:b3:95:44:f2:9f:60:1d:00:3c:83:40:08: 9f:e3:da:78:1c:f0:26:fb:6f:52:c1:b6:97:e7:a8:d8:73:93: 28:4d:bb:78:40:62:37:cb:a5:bd:d3:d3:49:e5:11:71:3d:dd: c4:90:9b:99:4b:cc:01:54:e6:c4:53:6e:a3:d7:6c:1b:8e:b9: 85:ab:b0:0d:08:ac:12:bc:cb:ec:b1:48:64:80:cb:92:b2:ce: 2f:0b:c0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCZMtiFWGMBY24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ1MzdjYjUtYTcyMS00MWU3LWE0NmQtNGVhMmM5YjZiMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9UA1TaCn1LuPcDyWN75b5QGB0Thk8/fVvV4 MVfvs6SmgOY8wwAj2wqrXwSvXbxQ/ky4Gul6zcS+eYpxn/0kWgLJSISzimXCGS5Q BJDqqdp6gVIHW/E8eMPDZ16k+7stklcYiucYFFaCTinCHqY4x+WJkUemZb1pfIYt BFGbUNKbcCMvp6zPrilEfKraTg7Xcx9Jc8YYg7K5HjaZDRMboPPpFw9yGvxzUgPD Y7Akovz4/m1arpUEMLO94fquCeYFpRQ4XpmRn52WIiGObSAtq7cZNDa2JrCquBXu rCet9QLU6Sz3xv8Fipebxk5nmw8U6vhewFUNKOc1RlVWSMZI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/tt0/D+i5uma+Sr5rdU7ZXji+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc1MmE5NzAtZDVmZi0z MzdjLWEwNTEtNmIyNTRiYjljODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUa1Wj/7RbHcWg7levcqy5V8zIqySiVOZ88x6SLeeTggPS4loNdPHK7 fJQAXsTzC+Uj6OkdcgwodX2IQJ7zzlCA9+yEypkX7qk9smJMeekWO86QWgHIRySv yC0GoD0bvod9cE/Oi1LZwJ/jEJ/LZgNMqrXFo2cbSkGBJcGapE6F7T8TOLYvwdFB ZGSQwtmhkemx7umDiMEGXJNwUA256FyQ2aVnhyDHubOVRPKfYB0APINACJ/j2ngc 8Cb7b1LBtpfnqNhzkyhNu3hAYjfLpb3T00nlEXE93cSQm5lLzAFU5sRTbqPXbBuO uYWrsA0IrBK8y+yxSGSAy5Kyzi8LwO8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:43 2025 by rpki-client