$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa File: 38a16a71-c9e4-362c-96c8-1339370d9d6e.roa (raw, json) Hash identifier: jkk0eiHPhuRTi3JA39OTo/kWLGSZigUdC17dImccryo= Subject key identifier: 16:3A:C7:7E:5D:92:DD:FD:66:A8:CF:B4:70:9C:23:ED:5F:71:20:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858487CEB3DCE75A6377576944E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:3d:ce:75:a6:37:75:76:94:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=846dc7b0-d8cf-4695-b07a-a21f8b63fcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:fb:e9:76:3b:17:7a:16:fa:1b:46:de:51: 6d:35:44:a9:dd:e4:5b:38:21:17:b6:2e:0d:90:6c: f2:1c:04:e5:01:f6:45:a5:58:bc:4a:2b:b6:d7:d1: 2e:1e:f9:8e:81:17:24:b8:1e:e9:1c:2b:7a:ba:14: 7d:df:b8:d7:b6:9e:f4:7f:af:e5:e5:d8:c3:7a:f0: 9a:a6:03:06:fa:e4:d7:81:bb:7b:b7:c1:da:15:39: 0d:91:e3:20:d0:56:96:c5:71:96:e3:7f:e4:0a:ce: 43:ce:ba:a2:ee:33:f0:d8:54:f1:c9:e0:8a:2b:5b: 76:b1:30:67:15:35:dc:d6:0b:ec:35:2e:5a:eb:d1: 2b:d1:e1:ce:c3:71:22:45:b0:7d:30:fc:22:06:22: 4f:26:bf:4f:8a:5d:4e:d0:12:77:6b:45:2b:28:ef: 61:c0:18:3f:88:b3:81:c8:62:97:90:5e:4c:9c:71: be:ec:c4:6c:1d:a4:8f:65:aa:9d:20:cd:57:5a:b9: 85:b9:0c:d3:ca:85:5a:cb:cd:bc:10:6f:5b:95:62: b7:e5:ec:c7:91:1e:4c:35:f1:e3:c9:d9:80:73:3d: 2a:c3:68:1a:b3:1c:b8:d5:20:5c:78:ec:56:0d:70: c3:59:bc:12:75:07:4f:9d:bc:49:ee:2c:a7:d6:e1: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3A:C7:7E:5D:92:DD:FD:66:A8:CF:B4:70:9C:23:ED:5F:71:20:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:1b:1c:99:39:1a:05:33:75:e7:7a:97:16:dd:de:a5:f6: 91:88:f0:12:08:e4:c4:b1:24:8b:ab:cf:07:28:cc:8e:1a:d7: f7:41:92:b2:32:72:67:45:6b:90:c3:c0:17:93:67:ec:14:c9: 4d:d4:1e:54:c0:27:da:94:20:9b:ab:c9:a3:51:68:be:28:8b: 05:e0:36:18:97:8c:5a:81:5a:db:f5:ae:e7:03:02:e4:49:56: 25:03:58:92:0b:67:d4:cf:c9:67:a0:7c:62:34:96:9b:f6:ee: d6:85:98:3d:91:4b:c9:88:c9:9c:8f:c5:41:a3:d0:ea:9d:e1: a3:51:79:cc:ea:80:3b:42:ad:b0:fb:cd:e1:22:99:e3:ad:84: 7b:3c:a9:96:9b:78:9c:53:b5:88:b4:72:ac:c4:fd:d9:bb:3a: b8:05:24:9a:20:bd:5f:59:73:99:52:3e:71:93:2f:cd:8f:31: ad:b4:a9:5a:70:f0:ff:bd:10:44:03:e3:2e:d8:33:06:6e:d2: bc:15:25:87:e7:66:9e:dc:29:df:73:f5:52:f6:eb:61:d4:1e: ff:b4:b0:3b:07:1f:a2:dd:33:bc:b8:36:33:60:88:e5:38:e7: 6d:83:b1:95:bd:8f:5a:47:83:31:e6:fe:7b:b5:bb:8f:55:72: de:bb:19:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86z3OdaY3dXaUTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk ODQ2ZGM3YjAtZDhjZi00Njk1LWIwN2EtYTIxZjhiNjNmY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMT76XY7F3oW+htG3lFtNUSp3eRbOCEXti4N kGzyHATlAfZFpVi8Siu219EuHvmOgRckuB7pHCt6uhR937jXtp70f6/l5djDevCa pgMG+uTXgbt7t8HaFTkNkeMg0FaWxXGW43/kCs5Dzrqi7jPw2FTxyeCKK1t2sTBn FTXc1gvsNS5a69Er0eHOw3EiRbB9MPwiBiJPJr9Pil1O0BJ3a0UrKO9hwBg/iLOB yGKXkF5MnHG+7MRsHaSPZaqdIM1XWrmFuQzTyoVay828EG9blWK35ezHkR5MNfHj ydmAcz0qw2gasxy41SBceOxWDXDDWbwSdQdPnbxJ7iyn1uG2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY6x35dkt39ZqjPtHCcI+1fcSBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzhhMTZhNzEtYzllNC0z NjJjLTk2YzgtMTMzOTM3MGQ5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvTGxyZORoFM3XnepcW3d6l9pGI8BII5MSxJIurzwcozI4a1/dBkrIy cmdFa5DDwBeTZ+wUyU3UHlTAJ9qUIJuryaNRaL4oiwXgNhiXjFqBWtv1rucDAuRJ ViUDWJILZ9TPyWegfGI0lpv27taFmD2RS8mIyZyPxUGj0Oqd4aNReczqgDtCrbD7 zeEimeOthHs8qZabeJxTtYi0cqzE/dm7OrgFJJogvV9Zc5lSPnGTL82PMa20qVpw 8P+9EEQD4y7YMwZu0rwVJYfnZp7cKd9z9VL262HUHv+0sDsHH6LdM7y4NjNgiOU4 522DsZW9j1pHgzHm/nu1u49Vct67GZQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:39 2025 by rpki-client