$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa File: 5611583f-0381-377c-8dab-8bb3ddb62332.roa (raw, json) Hash identifier: 8eNuK8mdf0Ln9a1V61IM6NQPZknycvWBiWOoUkz/s/w= Subject key identifier: 90:EA:0C:BD:27:06:3E:56:E9:87:A4:9A:8F:9D:56:B2:B1:36:98:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB22234386514330C3A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:22:34:38:65:14:33:0c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=85a171c9-6190-4074-817e-fc26d3f43946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:3a:5e:b8:b4:54:8d:ec:4f:a4:c4:3d:49: 40:5f:e3:ee:34:8c:1d:78:d2:aa:09:db:29:98:74: 12:67:39:21:1b:0f:06:5e:2b:ba:7c:67:7e:0c:98: 27:3a:67:68:be:1a:c4:6d:f8:e6:16:cc:bf:6a:69: 09:23:76:3b:4d:25:17:64:6f:58:4f:68:b5:c2:42: a8:2e:95:23:0c:88:ca:c6:99:a3:c0:09:5e:5a:c9: d7:c7:92:bf:e9:66:75:94:b7:52:27:b7:56:90:c0: fb:3b:00:fb:1b:30:36:1a:eb:d1:08:43:75:9f:ff: 60:c0:fb:9f:d6:a7:c3:0d:de:ab:0a:c2:d5:63:5a: 32:36:ce:cf:85:99:1b:5b:62:56:a0:bf:02:ac:aa: 54:8a:53:28:75:7e:fe:fa:95:3b:9b:f9:cb:aa:98: fc:dd:1f:65:d5:9a:5e:9f:f8:d7:12:6b:cf:94:fa: 62:2f:ae:21:83:77:3e:49:30:42:e4:e4:c5:0e:95: 3b:b0:d9:57:1e:0d:cf:dd:2b:f4:ee:b3:8c:20:55: b3:68:67:18:36:64:49:38:15:93:dc:f9:0d:3e:1a: b1:f6:b7:6c:e2:ed:e7:03:a8:79:21:88:57:2d:28: 2c:03:12:f3:34:66:ef:78:e9:06:c8:d3:34:57:23: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:0C:BD:27:06:3E:56:E9:87:A4:9A:8F:9D:56:B2:B1:36:98:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:30:3a:83:67:0e:d1:1a:e3:67:00:f7:90:f2:bc:03:87:b5: 48:bf:72:52:9c:c0:38:54:8f:17:1d:79:ac:15:31:e6:36:9c: 17:47:e3:2d:da:c1:74:7c:08:09:48:3e:fe:10:cd:86:47:53: eb:29:5c:fc:4b:85:9a:5d:84:9e:68:25:98:9d:b1:78:4d:a9: 95:f2:87:17:8f:87:18:f9:2b:28:39:50:75:a4:4a:79:33:56: 18:4c:61:19:a2:85:7d:cd:79:60:ac:e4:cc:41:f7:33:67:f0: 21:11:f9:e5:bd:ee:79:3a:2e:77:3b:28:49:0e:83:c2:a9:18: 8f:8f:96:9c:2f:3f:92:5f:ce:06:fe:17:a5:20:13:42:d6:21: 56:de:6a:de:da:6e:22:1c:dc:fe:1d:5d:4c:78:79:e4:6d:74: f9:96:a7:78:1c:b7:c4:a6:96:7a:38:89:93:01:30:c3:62:2b: b5:32:71:8b:13:ac:c5:b1:b1:3c:02:29:5b:75:90:1b:83:8e: dc:34:48:c4:e3:e8:73:4c:65:14:64:65:35:a4:9c:48:de:99: 35:a9:2b:2b:02:f0:6b:0b:d7:37:15:da:80:cc:ce:96:fb:98: 49:96:b1:1f:0c:5b:a5:09:55:4e:7f:3d:f1:22:1a:02:95:2a: bb:0c:d0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrIiNDhlFDMMOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ODVhMTcxYzktNjE5MC00MDc0LTgxN2UtZmMyNmQzZjQzOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhQ6Xri0VI3sT6TEPUlAX+PuNIwdeNKqCdsp mHQSZzkhGw8GXiu6fGd+DJgnOmdovhrEbfjmFsy/amkJI3Y7TSUXZG9YT2i1wkKo LpUjDIjKxpmjwAleWsnXx5K/6WZ1lLdSJ7dWkMD7OwD7GzA2GuvRCEN1n/9gwPuf 1qfDDd6rCsLVY1oyNs7PhZkbW2JWoL8CrKpUilModX7++pU7m/nLqpj83R9l1Zpe n/jXEmvPlPpiL64hg3c+STBC5OTFDpU7sNlXHg3P3Sv07rOMIFWzaGcYNmRJOBWT 3PkNPhqx9rds4u3nA6h5IYhXLSgsAxLzNGbveOkGyNM0VyNGxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDqDL0nBj5W6Yekmo+dVrKxNpieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTYxMTU4M2YtMDM4MS0z NzdjLThkYWItOGJiM2RkYjYyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMwOoNnDtEa42cA95DyvAOHtUi/clKcwDhUjxcdeawVMeY2nBdH4y3a wXR8CAlIPv4QzYZHU+spXPxLhZpdhJ5oJZidsXhNqZXyhxePhxj5Kyg5UHWkSnkz VhhMYRmihX3NeWCs5MxB9zNn8CER+eW97nk6Lnc7KEkOg8KpGI+PlpwvP5Jfzgb+ F6UgE0LWIVbeat7abiIc3P4dXUx4eeRtdPmWp3gct8Smlno4iZMBMMNiK7UycYsT rMWxsTwCKVt1kBuDjtw0SMTj6HNMZRRkZTWknEjemTWpKysC8GsL1zcV2oDMzpb7 mEmWsR8MW6UJVU5/PfEiGgKVKrsM0Jo= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:32 2025 by rpki-client