$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa File: 47d92f21-0ef1-382a-9fcb-b959cc71d765.roa (raw, json) Hash identifier: Lwc8Yb9zhJmzAIjBlNAhAHkVdw96Lgt+cwi/VC36bMQ= Subject key identifier: E2:D3:A9:6E:49:A1:DF:CC:AD:BE:22:00:A4:91:4F:32:B0:8D:DC:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495C244827115E84B59491B980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 8069 IP address blocks: 20.33.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:48:27:11:5e:84:b5:94:91:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=4c92fd5d-029f-4224-a69b-24d1680bc12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:d4:04:70:ae:d7:03:8c:5f:3c:15:da:91: 19:47:38:44:8d:52:7b:7f:e3:9c:17:be:26:4f:09: f8:f1:c4:12:c2:8e:d2:7f:ca:55:8b:9f:43:90:cd: 6d:e6:46:82:34:5e:b6:48:96:19:6e:f7:bf:f1:8b: ac:4f:33:25:3d:fe:ee:3a:0f:9f:d5:9c:66:bc:d7: 83:2c:e2:71:2f:9c:a2:4f:5e:e9:0c:87:bd:32:47: ec:b5:bc:2f:01:8c:1b:5d:3f:ff:3c:bd:26:e5:97: d8:ed:ec:0c:99:4c:84:d5:77:07:09:6b:63:f4:6e: db:e9:0b:83:30:a7:16:84:b7:2a:86:9c:c6:08:7b: 50:95:84:cd:31:fd:fb:db:5c:23:28:e6:c3:53:07: ed:b5:80:95:5f:aa:48:75:a6:80:e6:39:02:c3:59: 76:12:35:a1:02:32:11:c1:4d:eb:03:2d:0e:5d:c7: 91:87:d1:37:ca:b8:06:f6:22:dc:4a:c6:04:9e:78: 7c:c5:1e:ea:19:56:ec:8c:ae:ed:f9:d7:c5:57:84: c9:63:5e:b8:81:a2:d2:30:8d:3e:fc:06:dd:de:f9: c4:82:81:90:07:f5:97:cc:6e:d7:5f:0a:e9:6f:1a: 3b:72:2d:83:cc:a2:59:fe:32:11:24:29:9c:c1:fa: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:A9:6E:49:A1:DF:CC:AD:BE:22:00:A4:91:4F:32:B0:8D:DC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9c:2b:79:01:eb:df:f6:b7:d8:7e:55:cb:f6:bf:bd:e9:8f: 11:85:37:13:35:6b:4a:22:8a:f3:89:bd:53:ed:94:cf:3f:61: 5f:db:f6:29:f8:c2:86:cd:61:77:5f:76:48:ee:ee:b1:a1:21: f3:69:0d:e7:fb:24:74:4f:94:85:93:ae:d0:f4:db:de:2c:88: 0b:5f:fe:7f:99:6b:d5:2c:c9:f7:66:3a:cc:3c:95:cf:77:99: dc:bc:2b:55:f6:4a:3c:ec:52:74:64:15:09:36:27:db:2c:4f: f0:69:de:1b:27:ec:ea:d0:28:56:cc:a0:4d:2a:0b:7a:23:03: f7:a9:31:64:e6:05:49:90:f6:e4:6e:e6:ed:24:8f:b2:6b:dd: 8d:19:fe:ad:16:65:4a:15:2a:90:75:8d:2f:47:f8:3c:37:b5: d0:45:fb:22:02:17:69:30:10:bf:f3:1b:f7:d6:2c:5d:74:5b: cc:fb:04:ae:65:d7:e4:78:b6:90:28:e4:e0:9c:5e:d5:68:41: c5:56:20:a3:f3:5f:6e:81:74:d2:ba:e5:7b:a3:5b:70:1f:72: 53:0c:58:75:e5:fe:44:ae:55:a2:10:a0:a3:63:14:86:6e:87: 19:dd:50:86:db:cc:44:c0:a6:55:eb:08:34:c3:7b:c2:8a:d9: 15:fb:dd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEgnEV6EtZSRuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NGM5MmZkNWQtMDI5Zi00MjI0LWE2OWItMjRkMTY4MGJjMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bUBHCu1wOMXzwV2pEZRzhEjVJ7f+OcF74m Twn48cQSwo7Sf8pVi59DkM1t5kaCNF62SJYZbve/8YusTzMlPf7uOg+f1ZxmvNeD LOJxL5yiT17pDIe9MkfstbwvAYwbXT//PL0m5ZfY7ewMmUyE1XcHCWtj9G7b6QuD MKcWhLcqhpzGCHtQlYTNMf3721wjKObDUwfttYCVX6pIdaaA5jkCw1l2EjWhAjIR wU3rAy0OXceRh9E3yrgG9iLcSsYEnnh8xR7qGVbsjK7t+dfFV4TJY164gaLSMI0+ /Abd3vnEgoGQB/WXzG7XXwrpbxo7ci2DzKJZ/jIRJCmcwfoSpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLTqW5Jod/Mrb4iAKSRTzKwjdzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDdkOTJmMjEtMGVmMS0z ODJhLTlmY2ItYjk1OWNjNzFkNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIycK3kB69/2t9h+Vcv2v73pjxGFNxM1a0oiivOJvVPtlM8/YV/b9in4 wobNYXdfdkju7rGhIfNpDef7JHRPlIWTrtD0294siAtf/n+Za9UsyfdmOsw8lc93 mdy8K1X2SjzsUnRkFQk2J9ssT/Bp3hsn7OrQKFbMoE0qC3ojA/epMWTmBUmQ9uRu 5u0kj7Jr3Y0Z/q0WZUoVKpB1jS9H+Dw3tdBF+yICF2kwEL/zG/fWLF10W8z7BK5l 1+R4tpAo5OCcXtVoQcVWIKPzX26BdNK65XujW3AfclMMWHXl/kSuVaIQoKNjFIZu hxndUIbbzETAplXrCDTDe8KK2RX73TQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:04 2025 by rpki-client