$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa File: 48e9b15d-62d9-3157-aad7-4d279019b511.roa (raw, json) Hash identifier: YyYshPg4qoxP0lkPHgBt3FS/3lIkIOMC830QUZYdJMM= Subject key identifier: B1:FE:04:12:79:70:21:B9:6C:A2:9F:E1:AF:77:6D:E1:9D:0D:CD:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495C2447E7A17CA70E83003B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 8069 IP address blocks: 20.33.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:47:e7:a1:7c:a7:0e:83:00:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=2114925f-de98-44a6-9c8a-73feb55afcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:c3:df:da:a5:ea:b0:e1:dd:36:e6:a1:64: 84:26:93:bd:e2:dd:dc:f0:58:cb:62:02:3c:62:37: 12:d9:fd:30:ae:ed:69:05:f4:fb:ce:42:25:7f:e4: 05:28:a2:3c:59:31:a4:2f:cc:7e:17:2d:c9:5a:14: 9a:47:f0:e7:0a:87:56:a6:d3:6f:83:36:31:d4:31: 96:d5:69:ad:72:7d:ca:65:5b:13:ad:d3:e8:d0:f3: 2d:c4:14:ed:66:de:ec:77:91:2d:4e:d1:7e:00:16: a9:01:e5:e5:fe:21:c1:fd:b3:a5:b8:18:4c:ba:cd: a8:68:d0:61:97:cc:b4:eb:95:15:f9:42:1a:53:0e: 8b:05:be:b8:f7:fe:cd:9c:2f:5d:76:66:e5:1e:bc: 0b:1f:7c:74:8f:74:26:47:4f:72:93:31:d1:c2:51: 98:13:02:86:4c:fd:a9:70:ab:39:3c:a7:55:60:66: ee:5a:73:45:b0:9f:b1:2d:6e:49:08:43:bc:2a:8a: 3a:17:e8:e7:ff:f2:d4:c9:f3:c2:40:0a:0f:5c:50: ce:e7:68:f0:db:15:64:6d:28:a1:95:8c:12:c3:88: d6:7a:1a:d3:67:bd:27:b9:18:3f:8d:05:19:85:4d: 8f:0f:a0:cd:8d:9f:28:11:ed:66:a4:3e:ec:c9:08: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:04:12:79:70:21:B9:6C:A2:9F:E1:AF:77:6D:E1:9D:0D:CD:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2d:d4:98:af:d4:eb:0a:5e:0a:ef:bd:4c:62:66:6c:86:fc: 7e:dd:94:e4:31:17:66:29:ca:3f:0a:1f:13:a8:57:e6:ee:aa: 52:81:39:2e:29:df:b4:70:48:25:a3:7a:cc:7d:5f:06:19:fc: b6:e2:e5:be:e3:bb:43:c7:72:29:e5:43:9b:bd:5a:95:17:44: 8f:16:bf:6b:b0:d4:3f:87:99:20:68:e6:dd:7a:53:70:12:e0: 19:85:87:af:3e:07:ca:04:4b:01:80:da:c8:4a:f5:5d:50:ee: a3:2f:ba:3e:2c:80:c6:e5:1e:ab:77:0b:7d:e3:a2:d5:d4:1e: 3e:ea:be:b8:d3:6f:62:f1:6e:6f:fe:85:f6:8b:6a:4b:d4:fb: cb:63:c4:f4:5f:0d:09:19:39:8f:51:fd:91:4c:d4:95:56:36: b0:e6:61:cc:b2:61:aa:52:94:06:b0:76:a8:bb:00:38:81:4d: af:be:ee:d7:ba:8c:46:1f:a4:32:dd:74:6e:a1:8b:f4:0f:e1: 7a:fe:a7:6f:27:81:1f:38:6c:1e:e0:48:97:00:30:bb:51:91: db:8e:8b:27:2b:4f:84:0d:c0:5f:de:25:5d:22:cb:02:b6:d3: 85:37:a4:67:de:8c:38:cd:3b:a5:99:80:c8:31:0e:d1:af:1b: ab:ff:32:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEfnoXynDoMAOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MjExNDkyNWYtZGU5OC00NGE2LTljOGEtNzNmZWI1NWFmY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWzD39ql6rDh3TbmoWSEJpO94t3c8FjLYgI8 YjcS2f0wru1pBfT7zkIlf+QFKKI8WTGkL8x+Fy3JWhSaR/DnCodWptNvgzYx1DGW 1Wmtcn3KZVsTrdPo0PMtxBTtZt7sd5EtTtF+ABapAeXl/iHB/bOluBhMus2oaNBh l8y065UV+UIaUw6LBb649/7NnC9ddmblHrwLH3x0j3QmR09ykzHRwlGYEwKGTP2p cKs5PKdVYGbuWnNFsJ+xLW5JCEO8Koo6F+jn//LUyfPCQAoPXFDO52jw2xVkbSih lYwSw4jWehrTZ70nuRg/jQUZhU2PD6DNjZ8oEe1mpD7syQh13QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH+BBJ5cCG5bKKf4a93beGdDc2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDhlOWIxNWQtNjJkOS0z MTU3LWFhZDctNGQyNzkwMTliNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8t1Jiv1OsKXgrvvUxiZmyG/H7dlOQxF2Ypyj8KHxOoV+buqlKBOS4p 37RwSCWjesx9XwYZ/Lbi5b7ju0PHcinlQ5u9WpUXRI8Wv2uw1D+HmSBo5t16U3AS 4BmFh68+B8oESwGA2shK9V1Q7qMvuj4sgMblHqt3C33jotXUHj7qvrjTb2Lxbm/+ hfaLakvU+8tjxPRfDQkZOY9R/ZFM1JVWNrDmYcyyYapSlAawdqi7ADiBTa++7te6 jEYfpDLddG6hi/QP4Xr+p28ngR84bB7gSJcAMLtRkduOiycrT4QNwF/eJV0iywK2 04U3pGfejDjNO6WZgMgxDtGvG6v/Mlc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:17 2025 by rpki-client