$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa File: 5937f320-e64d-3772-84e9-bde88f69a677.roa (raw, json) Hash identifier: oVrKue6tetDiz9XO+z/7V1wMKIvI831fOJdvtLbho44= Subject key identifier: 10:AE:78:AC:58:B6:9F:AA:18:9C:6A:25:37:37:50:F7:9C:F4:3F:D2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D905F68504D76158ED06ED8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:5f:68:50:4d:76:15:8e:d0:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=b89c4f63-74d2-4db2-a307-e1ed44d2ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:86:04:c5:2c:13:85:ff:9e:1a:b3:68:71: cc:7a:42:d2:99:fb:ad:c8:af:6d:3d:e0:35:dd:12: 8f:b2:76:ad:f6:36:60:93:66:22:ab:33:55:8a:94: 66:da:6c:b6:27:83:9a:9f:1e:bd:63:07:ac:e2:e4: f5:98:c4:48:8f:e9:e5:55:31:65:5e:27:ae:86:a2: 1b:55:90:af:53:da:59:3d:9e:d3:36:f2:5b:97:ce: cf:1b:b0:b0:c1:b8:d8:d1:4c:46:d6:58:92:c6:bd: 00:0e:69:b4:f8:8c:f4:51:f6:0d:53:45:8c:a8:22: ea:52:dd:38:d9:4c:3b:da:98:07:72:55:6a:68:ae: 3a:6a:ff:af:1e:78:2f:5a:06:5e:71:c9:4d:4b:ab: 14:57:c5:85:62:25:5e:c0:8b:cd:26:64:d4:00:10: 00:28:f6:e7:6f:95:f3:01:f8:38:0e:d8:f7:3f:30: 58:5f:86:00:9f:69:01:e2:22:91:65:95:f7:6f:1c: 15:64:7f:4c:1e:48:05:df:90:9b:f9:10:97:f7:ba: 9d:b3:b0:11:2a:d8:a1:e6:bd:8a:0c:d7:1f:42:2e: b0:d5:c8:c0:43:fe:97:bb:21:57:5a:86:41:03:05: f6:39:72:ff:b1:33:cc:7a:b3:14:bc:70:9c:bf:bd: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AE:78:AC:58:B6:9F:AA:18:9C:6A:25:37:37:50:F7:9C:F4:3F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:14:67:5f:ef:ba:fc:b1:e0:aa:4d:53:cc:bb:d5:28:4b:f0: 53:7b:aa:33:4b:65:04:35:5e:86:1d:8d:72:d1:bf:53:75:06: 35:df:7f:df:bf:db:eb:35:13:04:db:57:69:29:d4:ff:ac:e9: cd:55:8a:80:51:1c:e9:42:19:3e:46:aa:55:f9:3b:45:05:71: 65:aa:67:67:56:ab:91:12:8a:30:28:5e:fb:0f:ba:51:85:fb: 3a:e6:37:1e:c3:ca:ec:23:ab:09:97:26:ce:44:94:ae:7e:e6: 34:c5:21:75:ce:48:87:51:21:4d:ef:9f:bf:68:b4:16:52:46: 15:5e:b0:fb:6c:68:ed:a0:ed:46:28:82:7c:2a:73:9e:40:6b: 49:dc:8f:ac:ff:d0:01:28:20:0f:fa:26:4c:a7:b0:b1:8d:8e: c3:2f:1f:ca:0a:b4:1b:1e:2c:17:4d:6f:a7:5f:c9:35:bb:e7: b4:50:da:f4:37:00:17:d2:8a:a5:75:89:5e:06:a1:1e:5e:37: 9e:6b:64:06:8a:a2:29:43:0b:dd:b7:56:92:d4:3b:7e:5d:af: 8c:38:32:c3:1a:97:44:16:47:84:94:2d:59:2a:2e:81:f5:1e: 83:f4:b9:b7:fa:53:4d:bb:ca:30:63:a5:7a:eb:90:a2:95:50: 1d:3e:ca:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkF9oUE12FY7QbtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk Yjg5YzRmNjMtNzRkMi00ZGIyLWEzMDctZTFlZDQ0ZDJlZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngWGBMUsE4X/nhqzaHHMekLSmfutyK9tPeA1 3RKPsnat9jZgk2YiqzNVipRm2my2J4Oanx69Ywes4uT1mMRIj+nlVTFlXieuhqIb VZCvU9pZPZ7TNvJbl87PG7CwwbjY0UxG1liSxr0ADmm0+Iz0UfYNU0WMqCLqUt04 2Uw72pgHclVqaK46av+vHngvWgZecclNS6sUV8WFYiVewIvNJmTUABAAKPbnb5Xz Afg4Dtj3PzBYX4YAn2kB4iKRZZX3bxwVZH9MHkgF35Cb+RCX97qds7ARKtih5r2K DNcfQi6w1cjAQ/6XuyFXWoZBAwX2OXL/sTPMerMUvHCcv73dlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCueKxYtp+qGJxqJTc3UPec9D/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTkzN2YzMjAtZTY0ZC0z NzcyLTg0ZTktYmRlODhmNjlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUUZ1/vuvyx4KpNU8y71ShL8FN7qjNLZQQ1XoYdjXLRv1N1BjXff9+/ 2+s1EwTbV2kp1P+s6c1VioBRHOlCGT5GqlX5O0UFcWWqZ2dWq5ESijAoXvsPulGF +zrmNx7DyuwjqwmXJs5ElK5+5jTFIXXOSIdRIU3vn79otBZSRhVesPtsaO2g7UYo gnwqc55Aa0ncj6z/0AEoIA/6JkynsLGNjsMvH8oKtBseLBdNb6dfyTW757RQ2vQ3 ABfSiqV1iV4GoR5eN55rZAaKoilDC923VpLUO35dr4w4MsMal0QWR4SULVkqLoH1 HoP0ubf6U027yjBjpXrrkKKVUB0+ytI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:09 2025 by rpki-client