$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json) Hash identifier: UYIE51S3ODRwlnSdCWHCTpdTX+fU+96Kow9cDTzUtOQ= Subject key identifier: 9D:C9:D7:30:5D:AA:63:43:BA:DA:70:42:E4:B6:74:B4:F3:31:88:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BAAB7FD7072DF1588520 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:ba:ab:7f:d7:07:2d:f1:58:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=bc2adde8-867e-4e4d-8ea6-fe8c6ca170ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:f1:15:e0:d9:01:18:4d:53:cb:58:36:ca: ed:40:51:00:dc:64:df:7a:e7:cc:48:e4:b1:8a:ea: 1b:54:6e:9d:10:f1:6e:39:08:2a:29:20:12:6b:ac: 22:8f:7c:26:42:0f:9c:0f:b9:a3:56:ed:1b:54:c9: 5a:03:71:dd:17:d3:9f:30:af:ca:7a:29:ff:ee:3c: 59:5a:2a:bb:4b:3c:c2:47:ea:eb:7c:5d:80:b9:43: d5:74:67:a0:a0:24:81:64:59:a1:95:94:d1:58:4b: 92:81:84:c8:14:d2:7f:5e:d6:d5:7a:44:d8:24:81: ba:6c:b6:30:1f:d6:b0:f5:e8:47:b3:1c:bc:24:06: ef:34:a4:9e:cc:7d:db:f5:81:91:7c:98:df:cd:70: bb:cb:fd:83:03:e4:5d:b1:7b:2b:a7:d3:91:0a:01: e9:c2:b7:8d:2c:6a:3f:a4:7c:2b:eb:de:57:56:31: db:2b:1f:11:21:0b:19:cf:f0:cd:92:7c:87:18:50: b9:3c:6a:2c:cb:a2:61:46:42:7a:eb:47:d4:7c:06: 4a:ce:96:50:b7:87:7e:df:4a:97:89:bf:16:2b:26: ac:73:ae:62:92:2e:65:70:60:76:30:c7:fd:ef:a9: 3e:3a:b7:df:ac:b9:f8:1d:65:a2:d3:0d:e5:17:75: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:D7:30:5D:AA:63:43:BA:DA:70:42:E4:B6:74:B4:F3:31:88:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fc:44:33:64:11:9f:a1:0d:9c:0e:ce:dd:2b:9c:38:ab:b0: 29:31:80:19:a0:b2:4e:89:be:22:03:15:28:60:cb:51:33:1a: af:a4:f3:b4:e1:31:99:83:59:69:51:b1:c6:ee:df:55:d6:5f: 6c:a2:38:84:1b:80:d2:f4:0a:20:27:cf:ff:a5:6c:3a:37:d0: 43:8e:3f:bd:b2:ad:fa:3f:f8:c4:3c:57:fb:d6:01:28:a9:ab: ac:ba:32:36:5a:a4:98:c0:03:c9:5e:cb:8f:b2:be:4e:ca:6d: f2:a3:ab:25:48:85:bb:4c:5f:0b:1a:f8:e5:1f:3f:7a:52:65: c2:4e:49:dd:12:51:00:d0:23:52:d2:92:9b:a6:98:91:01:6a: 59:a8:01:c9:c1:51:85:d3:68:81:3c:05:9c:67:bb:41:8d:a5: f2:ff:57:ef:7a:e6:ba:47:bb:70:f5:10:15:77:d8:a4:c2:7a: be:0d:dc:cb:b0:55:36:92:14:b5:d3:e4:b7:ae:e0:32:9f:6d: 1c:82:53:f0:ab:b1:64:3f:3f:cc:1b:cd:16:1e:a4:f5:45:82: 80:34:e5:56:ba:dc:5a:04:3b:aa:a6:a5:06:8c:57:79:8a:e8: d4:58:de:9d:c1:a8:3a:9a:70:d5:ec:f9:f1:13:28:30:ab:e6: 98:6d:24:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7qrf9cHLfFYhSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk YmMyYWRkZTgtODY3ZS00ZTRkLThlYTYtZmU4YzZjYTE3MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmzxFeDZARhNU8tYNsrtQFEA3GTfeufMSOSx iuobVG6dEPFuOQgqKSASa6wij3wmQg+cD7mjVu0bVMlaA3HdF9OfMK/Kein/7jxZ Wiq7SzzCR+rrfF2AuUPVdGegoCSBZFmhlZTRWEuSgYTIFNJ/XtbVekTYJIG6bLYw H9aw9ehHsxy8JAbvNKSezH3b9YGRfJjfzXC7y/2DA+RdsXsrp9ORCgHpwreNLGo/ pHwr695XVjHbKx8RIQsZz/DNknyHGFC5PGosy6JhRkJ660fUfAZKzpZQt4d+30qX ib8WKyasc65iki5lcGB2MMf976k+OrffrLn4HWWi0w3lF3UkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3J1zBdqmNDutpwQuS2dLTzMYiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjczNjNiYzUtYWZjMi0z ZWJkLTk5YzQtOGZlODBiMWFhZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL8RDNkEZ+hDZwOzt0rnDirsCkxgBmgsk6JviIDFShgy1EzGq+k87Th MZmDWWlRscbu31XWX2yiOIQbgNL0CiAnz/+lbDo30EOOP72yrfo/+MQ8V/vWASip q6y6MjZapJjAA8ley4+yvk7KbfKjqyVIhbtMXwsa+OUfP3pSZcJOSd0SUQDQI1LS kpummJEBalmoAcnBUYXTaIE8BZxnu0GNpfL/V+965rpHu3D1EBV32KTCer4N3Muw VTaSFLXT5Leu4DKfbRyCU/CrsWQ/P8wbzRYepPVFgoA05Va63FoEO6qmpQaMV3mK 6NRY3p3BqDqacNXs+fETKDCr5phtJLs= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:10 2025 by rpki-client