$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa File: 455ce729-9314-3871-9126-fed08a134b24.roa (raw, json) Hash identifier: 7jQz1AjFde3T71yA7W5UacGAi4TihN1aMhP5DCXJ1h0= Subject key identifier: A2:C4:F3:2A:EC:F1:F9:5B:14:F7:54:3D:BF:4D:DE:61:88:76:AF:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848A99635BD33DFFC8CCA9ADB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:35:bd:33:df:fc:8c:ca:9a:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=80b83255-329b-48aa-ac3e-61eb264a3b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:10:f0:b9:a8:e8:62:f0:a3:1f:9a:dd:cc: 4e:7b:47:b0:e3:0c:98:80:5d:9d:a6:37:8c:f3:c8: d7:a1:9a:5d:c5:f6:46:a7:81:04:8c:cb:40:1c:63: 1b:51:19:8e:a4:7d:4a:04:f0:eb:bc:a1:7f:15:45: 6a:5c:ca:06:da:fa:ea:f7:2e:d5:3f:0f:a5:d4:d9: 9a:52:1d:1c:6a:bd:0c:04:6c:31:f4:2b:c5:64:51: 71:1e:70:56:64:6c:8e:74:c9:b1:7f:96:88:14:66: f4:24:8f:92:b4:97:82:4b:12:d2:d7:08:b1:a5:2a: 5a:89:06:e6:62:aa:bc:84:ee:e5:25:74:2e:b7:a6: f9:fe:d4:b0:d4:4c:32:02:53:ee:74:86:85:fa:59: 31:9a:d3:ca:1c:3d:db:11:5f:e3:7b:11:34:30:1f: c0:da:a8:1e:5a:b3:4d:7f:aa:33:7d:60:ee:4a:e7: ea:fb:8b:a3:16:fd:86:eb:5c:af:7c:ec:c1:40:e8: 1d:a9:cf:8e:e9:70:d9:e1:ef:12:d5:8c:48:7d:f7: cf:4c:37:c1:db:46:58:fa:83:44:33:f6:f7:35:50: 4c:84:52:a9:cd:ef:8e:ff:7c:55:12:d9:3f:84:95: 68:b6:d4:44:6e:ec:63:d4:77:88:2b:42:68:fd:79: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:F3:2A:EC:F1:F9:5B:14:F7:54:3D:BF:4D:DE:61:88:76:AF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:44:22:99:21:f1:7e:92:9c:8b:82:ed:5f:05:d6:bb:22:f0: 37:d9:35:10:d7:cc:88:b6:6f:7e:13:17:e1:ee:40:d9:ff:9b: 6e:ff:27:7a:f7:8d:36:48:b0:e5:1d:6b:c1:d9:1e:2b:88:b1: f4:ee:00:42:a7:97:09:9d:cb:a0:0e:8b:34:65:d2:38:8d:51: 50:5e:90:11:18:00:55:3a:03:75:c1:f0:9d:a7:cf:1d:ab:bc: 94:f4:3c:b4:3a:1f:35:6f:fc:60:11:57:a8:3e:3e:f1:4c:3a: 8b:bc:ed:c9:15:26:7b:b3:7b:3a:9e:22:b0:e6:f8:b2:2d:f7: 0b:99:53:3d:45:b3:d5:7e:d3:a1:23:1f:f5:e2:d1:cf:18:c5: b5:9d:b6:c0:17:ec:ce:55:ee:67:35:9d:05:96:8b:8a:a0:82: c3:a5:44:f6:ad:58:69:e7:9d:6d:90:2f:32:29:73:69:3c:f1: 6b:88:3f:03:3f:94:23:15:1a:6d:cd:28:82:36:ec:1d:1b:51: e4:02:5f:7e:99:42:05:db:d1:4e:04:d8:83:93:60:59:33:ce: b9:c1:25:26:9b:6f:c9:38:75:4d:98:3a:b1:4b:cb:11:9f:eb: f3:0a:f2:ee:46:27:ed:67:93:d7:1d:31:c6:5f:20:49:5c:b8: 1d:3a:37:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljW9M9/8jMqa24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODBiODMyNTUtMzI5Yi00OGFhLWFjM2UtNjFlYjI2NGEzYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3gQ8Lmo6GLwox+a3cxOe0ew4wyYgF2dpjeM 88jXoZpdxfZGp4EEjMtAHGMbURmOpH1KBPDrvKF/FUVqXMoG2vrq9y7VPw+l1Nma Uh0car0MBGwx9CvFZFFxHnBWZGyOdMmxf5aIFGb0JI+StJeCSxLS1wixpSpaiQbm Yqq8hO7lJXQut6b5/tSw1EwyAlPudIaF+lkxmtPKHD3bEV/jexE0MB/A2qgeWrNN f6ozfWDuSufq+4ujFv2G61yvfOzBQOgdqc+O6XDZ4e8S1YxIfffPTDfB20ZY+oNE M/b3NVBMhFKpze+O/3xVEtk/hJVottREbuxj1HeIK0Jo/XkxPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLE8yrs8flbFPdUPb9N3mGIdq+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDU1Y2U3MjktOTMxNC0z ODcxLTkxMjYtZmVkMDhhMTM0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINEIpkh8X6SnIuC7V8F1rsi8DfZNRDXzIi2b34TF+HuQNn/m27/J3r3 jTZIsOUda8HZHiuIsfTuAEKnlwmdy6AOizRl0jiNUVBekBEYAFU6A3XB8J2nzx2r vJT0PLQ6HzVv/GARV6g+PvFMOou87ckVJnuzezqeIrDm+LIt9wuZUz1Fs9V+06Ej H/Xi0c8YxbWdtsAX7M5V7mc1nQWWi4qggsOlRPatWGnnnW2QLzIpc2k88WuIPwM/ lCMVGm3NKII27B0bUeQCX36ZQgXb0U4E2IOTYFkzzrnBJSabb8k4dU2YOrFLyxGf 6/MK8u5GJ+1nk9cdMcZfIElcuB06Nzk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:35 2025 by rpki-client