$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa File: 4394c957-d6d6-3969-9f1f-2829f0301cc7.roa (raw, json) Hash identifier: Q5e1azZ4lnx91sYMGKZs/JFg7x4zpvWGcIKJ9QiT1Hw= Subject key identifier: E9:9E:51:74:30:EE:56:02:28:A9:34:6A:27:D2:CA:05:C5:8D:74:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848DA71007C9FE3E28CEFDADCD6 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:00:7c:9f:e3:e2:8c:ef:da:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=f54e110a-b2f2-481f-a986-5fbcceba7efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9d:71:c8:c4:a2:0b:81:18:30:c6:c4:8d:e7: cf:4b:65:2a:0f:92:7a:65:a9:af:3b:60:47:65:79: e8:3e:e3:9d:ef:cd:11:cc:b0:12:7b:84:7b:81:99: f9:32:3c:40:ed:5a:37:a6:9c:71:db:88:df:41:9c: 56:40:0d:23:32:d7:71:23:52:ee:8c:2c:20:0b:24: 10:e5:c7:5f:5f:25:67:6f:2c:cb:cc:0e:9f:ba:ce: ff:3c:8b:98:54:5a:00:ae:68:cd:19:b3:95:47:ae: c1:0e:0f:51:b1:71:da:3b:75:0c:31:4d:3a:a5:07: 9a:97:5f:b6:e1:80:87:11:10:75:24:91:81:dc:49: f3:80:23:70:09:fe:de:d7:a0:0c:d7:61:3f:bc:49: 23:3a:0d:1f:86:ee:c7:1b:6c:8e:b6:6c:16:63:12: fa:c4:22:b6:e7:be:97:92:f9:b1:d9:d1:86:71:1c: 63:24:ed:a1:37:27:7a:6d:84:fd:01:98:41:48:b8: b4:be:f6:0f:ef:eb:db:bb:6b:9a:cc:f4:ee:20:1f: 1b:52:b6:24:d6:31:d4:86:8e:a2:84:fe:fd:1a:48: f6:93:d3:36:ed:b7:84:1b:bd:33:7f:c6:0e:82:67: 92:7e:0d:fe:fc:16:fa:9c:c0:48:67:26:64:64:4d: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:51:74:30:EE:56:02:28:A9:34:6A:27:D2:CA:05:C5:8D:74:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:20:23:63:19:24:05:d5:96:af:6b:a7:18:c2:3f:85:ab:45: 74:b6:e0:37:ae:cd:cd:4c:7d:6a:e4:dd:c2:f9:d7:77:ba:17: e6:61:c2:ac:44:af:c7:f7:0d:19:00:df:6e:b2:1a:64:33:f7: 12:d5:43:47:cc:4f:2d:f6:1f:82:d5:10:7c:e8:c8:a5:c3:88: 8e:c7:d1:f5:d0:00:da:1e:d1:24:f5:67:e0:13:67:28:e0:3e: 58:61:c3:f4:72:5b:5a:87:ab:54:0b:77:16:53:d6:b1:22:aa: d8:cb:76:97:0d:e0:6d:89:a5:e5:b7:d8:63:1e:20:d4:6e:fd: 3a:b3:bb:bb:c7:69:c7:bb:76:77:bb:88:3d:cb:b5:12:4d:9b: 91:6d:c2:7a:97:f2:96:7c:51:d2:bb:8a:95:a8:9d:2d:20:ff: 5e:c5:a4:a2:14:79:29:d8:69:89:ec:f0:7a:55:ed:98:32:1f: 96:d2:37:db:53:29:62:82:8a:a4:0d:cb:f3:a7:0e:63:0b:10: f1:1b:9c:f0:23:90:e2:4a:65:37:84:41:59:7e:b5:dc:58:7a: 1f:1d:d4:7b:c3:3a:aa:5a:f1:75:5f:a7:a8:04:c4:a0:4e:09: 80:34:bf:e3:45:9b:78:21:b9:a3:89:4b:f5:5b:e3:58:e8:7a: 6e:4d:b3:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQB8n+PijO/a3NYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjU0ZTExMGEtYjJmMi00ODFmLWE5ODYtNWZiY2NlYmE3ZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ1xyMSiC4EYMMbEjefPS2UqD5J6ZamvO2BH ZXnoPuOd780RzLASe4R7gZn5MjxA7Vo3ppxx24jfQZxWQA0jMtdxI1LujCwgCyQQ 5cdfXyVnbyzLzA6fus7/PIuYVFoArmjNGbOVR67BDg9RsXHaO3UMMU06pQeal1+2 4YCHERB1JJGB3EnzgCNwCf7e16AM12E/vEkjOg0fhu7HG2yOtmwWYxL6xCK2576X kvmx2dGGcRxjJO2hNyd6bYT9AZhBSLi0vvYP7+vbu2uazPTuIB8bUrYk1jHUho6i hP79Gkj2k9M27beEG70zf8YOgmeSfg3+/Bb6nMBIZyZkZE0z+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmeUXQw7lYCKKk0aifSygXFjXQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM5NGM5NTctZDZkNi0z OTY5LTlmMWYtMjgyOWYwMzAxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcgI2MZJAXVlq9rpxjCP4WrRXS24Deuzc1MfWrk3cL513e6F+ZhwqxE r8f3DRkA326yGmQz9xLVQ0fMTy32H4LVEHzoyKXDiI7H0fXQANoe0ST1Z+ATZyjg Plhhw/RyW1qHq1QLdxZT1rEiqtjLdpcN4G2JpeW32GMeINRu/Tqzu7vHace7dne7 iD3LtRJNm5FtwnqX8pZ8UdK7ipWonS0g/17FpKIUeSnYaYns8HpV7ZgyH5bSN9tT KWKCiqQNy/OnDmMLEPEbnPAjkOJKZTeEQVl+tdxYeh8d1HvDOqpa8XVfp6gExKBO CYA0v+NFm3ghuaOJS/Vb41joem5NswI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:34 2025 by rpki-client