$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: dLaEnzWcvmyUoIE28LLPBi5Q9Q78dcDrZnmzZ0xWwqY= Subject key identifier: EE:43:78:77:B0:CE:D4:6A:9F:DF:32:F7:2C:77:D1:AA:56:C9:12:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486530447338FA787E12D0B7B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:44:73:38:fa:78:7e:12:d0:b7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=a18122e0-4816-442d-adb9-402c272e44ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b5:8c:46:87:49:3b:23:9c:d8:1c:d6:62:c8: 83:3c:db:48:65:52:19:8d:b7:08:73:40:73:ce:43: d6:c4:6c:17:15:90:25:dc:7d:62:aa:62:0e:69:30: bf:88:c9:3b:0c:69:44:dc:4d:00:11:33:3a:0a:d3: ed:64:e5:cf:9a:81:26:37:eb:8e:72:f6:10:5d:3d: df:10:d4:5e:8e:a9:f5:17:df:06:71:70:ee:32:c6: 10:98:8e:61:07:67:95:ce:67:97:bc:a3:69:2f:8a: bb:79:40:ef:d8:35:1c:30:38:b1:72:a8:5e:d6:de: 9f:9d:cf:a1:4b:29:a6:97:ce:60:67:c8:5f:86:ef: cc:c0:50:9c:d6:2a:a9:d2:b7:cf:b1:95:22:b1:72: ee:28:01:7f:5c:e0:fe:da:e8:ab:26:98:57:52:b7: 25:a8:a4:6c:5e:72:12:c8:83:7d:21:51:af:ec:4e: 82:fe:7b:ae:41:b5:67:e9:ac:84:4c:af:7e:7d:29: 80:e4:60:52:0e:71:64:eb:de:8d:a1:46:3e:e1:20: bb:04:67:fb:c4:01:19:78:1a:32:15:27:00:e1:77: 7d:e2:30:72:38:a2:ab:82:3d:7d:7e:fd:4f:42:15: 38:06:42:a9:37:ce:00:ed:63:fa:b8:54:23:d7:1d: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:43:78:77:B0:CE:D4:6A:9F:DF:32:F7:2C:77:D1:AA:56:C9:12:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:41:d2:a1:dc:61:b6:35:b0:30:2c:35:d6:64:d6:af:b1:c9: 7f:7e:bb:17:a3:6c:fc:12:53:23:15:0a:47:83:cb:2d:a5:dc: ac:cf:9d:f0:26:a8:05:7c:78:f3:51:06:cc:e2:80:54:ac:8f: 28:65:97:34:15:e5:57:dc:37:8d:11:9b:d0:2d:e5:d6:42:60: dd:56:81:c6:a9:a6:fb:04:ae:50:28:24:ec:c3:f7:b8:1a:43: 90:cf:0d:bc:bb:e8:03:98:0f:17:20:55:7d:e5:73:17:49:50: c4:8f:f0:e0:c2:6c:b1:ab:1c:9c:22:96:f8:ab:00:f2:f8:19: be:57:cb:15:02:dc:cd:3d:66:1e:46:40:6f:76:76:2e:8d:9c: 8b:4a:9c:b7:0a:1e:53:cc:82:6d:d3:08:e8:14:0b:aa:7e:5d: 7e:d0:3c:7e:f1:55:df:af:9e:f4:b0:10:8f:53:eb:6b:7e:ea: 36:8f:11:2c:dd:c9:fa:b3:b4:cb:62:f4:07:bc:1a:87:60:10: 0d:5a:dd:d3:69:fc:1b:3b:e2:89:ec:cf:49:a2:59:70:49:ab: a8:e2:ee:45:09:d0:df:dc:fb:97:6d:8c:16:d6:b4:22:33:24: 0a:c5:8d:ca:ee:d3:67:81:6c:6e:85:63:d3:62:1a:53:b0:22: 85:7a:21:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMERzOPp4fhLQt7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk YTE4MTIyZTAtNDgxNi00NDJkLWFkYjktNDAyYzI3MmU0NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bWMRodJOyOc2BzWYsiDPNtIZVIZjbcIc0Bz zkPWxGwXFZAl3H1iqmIOaTC/iMk7DGlE3E0AETM6CtPtZOXPmoEmN+uOcvYQXT3f ENRejqn1F98GcXDuMsYQmI5hB2eVzmeXvKNpL4q7eUDv2DUcMDixcqhe1t6fnc+h Symml85gZ8hfhu/MwFCc1iqp0rfPsZUisXLuKAF/XOD+2uirJphXUrclqKRsXnIS yIN9IVGv7E6C/nuuQbVn6ayETK9+fSmA5GBSDnFk696NoUY+4SC7BGf7xAEZeBoy FScA4Xd94jByOKKrgj19fv1PQhU4BkKpN84A7WP6uFQj1x0JpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5DeHewztRqn98y9yx30apWyRK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRB0qHcYbY1sDAsNdZk1q+xyX9+uxejbPwSUyMVCkeDyy2l3KzPnfAm qAV8ePNRBszigFSsjyhllzQV5VfcN40Rm9At5dZCYN1WgcappvsErlAoJOzD97ga Q5DPDby76AOYDxcgVX3lcxdJUMSP8ODCbLGrHJwilvirAPL4Gb5XyxUC3M09Zh5G QG92di6NnItKnLcKHlPMgm3TCOgUC6p+XX7QPH7xVd+vnvSwEI9T62t+6jaPESzd yfqztMti9Ae8GodgEA1a3dNp/Bs74onsz0miWXBJq6ji7kUJ0N/c+5dtjBbWtCIz JArFjcru02eBbG6FY9NiGlOwIoV6Ic0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:28 2025 by rpki-client