$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa File: 7156ddac-0037-381d-b03c-e9232ac59dea.roa (raw, json) Hash identifier: AbDwqfvfjAD42TUdem/TKQvRgIcnuaVt7CcqzP+vtQo= Subject key identifier: 7C:77:2B:72:22:F8:74:CB:2C:B2:41:76:B2:9C:7A:8F:66:49:C9:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848B35B7082657EE777221A3980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:82:65:7e:e7:77:22:1a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=dee138ba-ec7c-48ca-a32d-57680ece4d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:b3:5a:d5:54:e4:ae:2e:60:ba:ab:47:53: d4:4f:14:34:44:e8:f0:1f:34:40:3c:69:80:5c:e0: 2e:25:73:90:0e:2a:e6:f1:e6:df:06:d2:be:e3:b2: 12:24:58:10:5c:53:d9:23:e1:20:d9:8d:6a:64:77: 76:a9:34:5d:54:c0:18:26:13:ee:2a:fd:bc:b4:05: 1f:5a:0d:b3:cb:aa:8e:03:e7:e0:86:56:b3:b5:60: 68:4a:7f:91:a5:e6:98:16:b6:9b:2a:29:36:38:d7: 35:5f:8d:c3:29:4c:55:9f:10:3c:ef:2b:be:81:ca: ef:36:18:6f:d3:ba:20:a5:42:14:7a:0d:4a:8e:15: 76:1e:75:8e:f4:7c:34:71:22:4b:06:48:c9:e3:3e: 8f:9d:f3:3f:3c:13:57:68:ff:dd:6d:ba:64:79:23: 45:a5:59:f8:45:69:db:8b:6c:d1:ba:c2:60:5f:67: 1f:4e:01:68:88:2b:28:ba:a5:80:83:f3:dd:cc:72: 9f:8b:fb:12:d8:70:1b:1a:7e:67:0d:31:6a:30:84: 22:36:32:b8:1b:86:69:a5:81:71:db:91:15:12:20: e9:06:20:b7:a7:ef:a3:a3:0d:4a:4c:68:64:98:64: f2:bf:37:0a:a8:8c:41:4c:21:ab:95:9b:99:cc:81: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:2B:72:22:F8:74:CB:2C:B2:41:76:B2:9C:7A:8F:66:49:C9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9d:ab:c4:ed:7a:32:85:d4:28:6a:b3:33:e7:5b:09:9e:96: ea:d4:5f:bf:0b:77:f6:80:ab:b3:31:c9:88:22:97:6f:cc:c2: 3a:99:75:24:7a:dd:d9:01:d4:11:2b:5d:48:32:28:39:77:02: 3e:3a:78:9c:db:99:65:3b:3a:21:6b:52:4e:31:66:f2:d7:5e: 87:88:8a:ab:11:cc:af:01:44:1e:6c:ec:5a:92:b2:30:ea:4d: e4:99:86:2e:5c:2f:ca:e4:52:12:fc:bc:27:bd:1b:bd:da:7b: 65:93:96:b0:e6:d8:81:10:69:8c:30:0d:b7:42:8a:3c:72:8f: 78:9d:3f:f8:28:29:04:8e:eb:59:24:c6:58:32:45:0b:53:36: 9e:b0:ff:63:c4:d1:69:28:59:e9:b1:0e:1a:3e:c9:24:fc:eb: 1c:00:75:84:eb:37:d8:02:f3:89:19:51:f5:aa:37:03:87:6b: 0b:92:2c:2b:0e:5b:ce:ea:5b:6e:45:d8:67:fb:4c:e7:b9:9f: 0d:36:e9:75:41:75:64:93:37:13:ae:84:28:f6:00:13:d6:7e: 86:c8:11:25:c9:2b:07:64:eb:17:ef:d8:00:5c:8f:70:b2:c2: 6d:09:4e:a7:23:95:3c:48:e7:92:10:aa:c5:90:c6:28:a6:52: e8:c9:08:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3CCZX7ndyIaOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZGVlMTM4YmEtZWM3Yy00OGNhLWEzMmQtNTc2ODBlY2U0ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjROzWtVU5K4uYLqrR1PUTxQ0ROjwHzRAPGmA XOAuJXOQDirm8ebfBtK+47ISJFgQXFPZI+Eg2Y1qZHd2qTRdVMAYJhPuKv28tAUf Wg2zy6qOA+fghlaztWBoSn+RpeaYFrabKik2ONc1X43DKUxVnxA87yu+gcrvNhhv 07ogpUIUeg1KjhV2HnWO9Hw0cSJLBkjJ4z6PnfM/PBNXaP/dbbpkeSNFpVn4RWnb i2zRusJgX2cfTgFoiCsouqWAg/PdzHKfi/sS2HAbGn5nDTFqMIQiNjK4G4ZppYFx 25EVEiDpBiC3p++jow1KTGhkmGTyvzcKqIxBTCGrlZuZzIGjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx3K3Ii+HTLLLJBdrKceo9mScnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzE1NmRkYWMtMDAzNy0z ODFkLWIwM2MtZTkyMzJhYzU5ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKdq8TtejKF1ChqszPnWwmelurUX78Ld/aAq7MxyYgil2/MwjqZdSR6 3dkB1BErXUgyKDl3Aj46eJzbmWU7OiFrUk4xZvLXXoeIiqsRzK8BRB5s7FqSsjDq TeSZhi5cL8rkUhL8vCe9G73ae2WTlrDm2IEQaYwwDbdCijxyj3idP/goKQSO61kk xlgyRQtTNp6w/2PE0WkoWemxDho+yST86xwAdYTrN9gC84kZUfWqNwOHawuSLCsO W87qW25F2Gf7TOe5nw026XVBdWSTNxOuhCj2ABPWfobIESXJKwdk6xfv2ABcj3Cy wm0JTqcjlTxI55IQqsWQxiimUujJCNc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:08 2025 by rpki-client