$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa File: 735f96b3-047e-360f-bb8a-41e8e0af2ace.roa (raw, json) Hash identifier: mi/bubkJKdHptqKhhNB76rmucWYCYNg7w1xT74X6Wt4= Subject key identifier: 28:40:86:D0:AF:7D:6F:FD:57:81:1B:1F:49:15:75:E9:01:EB:AF:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF476081D246F3C4028B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f4:76:08:1d:24:6f:3c:40:28:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=7878844d-fe11-4f17-9719-ff1b65c4a7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:b5:ba:c0:21:af:f3:39:40:fa:c3:83:8c: a3:07:cc:bd:be:49:a6:52:e6:7e:c8:51:13:7b:6c: d6:f4:7f:be:14:11:ae:09:a6:5f:ae:12:35:94:a9: 46:0b:15:04:00:b7:db:84:c4:45:de:ae:9e:55:f1: c5:10:9a:26:59:2d:f7:6b:b9:13:85:bf:84:21:83: 65:82:f8:47:4b:cf:6c:32:4c:b2:4f:84:f1:5e:82: 55:dc:ed:65:8a:64:b0:63:57:8f:4e:24:71:ed:72: e7:a7:c2:47:b8:be:85:89:51:d4:09:f8:fd:f0:98: 7e:68:e2:de:27:b5:5d:e9:b5:ee:be:05:6f:63:74: e5:b0:69:84:a0:35:61:e8:06:e9:b2:c6:92:3f:21: 9f:23:e9:25:3f:cd:ab:09:16:49:f8:1a:8e:45:29: c3:1f:fd:c6:90:ea:b0:b0:ae:d2:0e:33:f8:a5:02: f1:1f:f0:a7:bf:09:1f:e3:f6:c8:bf:f8:63:51:5b: eb:09:87:19:58:0e:69:4b:5b:6a:0e:31:81:70:82: 3a:50:85:b7:0c:3a:82:c9:03:55:9e:1c:91:86:e1: 00:4b:6d:74:5d:c7:aa:43:1e:6a:b8:8f:76:53:6c: 41:8d:5e:2a:1a:dc:cd:c3:96:5f:b7:d0:72:11:1f: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:40:86:D0:AF:7D:6F:FD:57:81:1B:1F:49:15:75:E9:01:EB:AF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3d:7e:f1:3f:ce:b8:75:22:48:a8:58:82:1a:74:9b:a4:60: 29:97:b3:f7:86:d1:f7:77:42:80:87:12:82:47:32:0b:5f:07: 50:7b:25:33:7c:f4:8d:b3:c0:69:4e:08:85:0b:9a:21:b8:51: 53:dd:41:4b:30:3f:2f:bf:09:d0:53:69:d6:e1:0e:ad:d3:fa: 07:3b:f0:9f:d6:06:f5:5b:f6:db:a4:c6:ae:a5:70:e1:b8:89: 42:61:94:58:5c:5d:84:a2:a9:ec:fe:04:c8:90:f8:5e:b3:e8: 2a:dc:4c:c2:f6:db:f6:a5:40:5c:b8:e6:75:7b:01:35:35:c2: 5c:e2:26:66:98:e4:2b:0f:12:49:d1:62:f9:0a:20:50:b1:4a: 23:51:10:7b:be:48:ff:07:cb:12:2a:89:0e:ee:22:73:ce:f9: a5:5c:ed:65:a9:c6:da:57:e7:55:e8:38:c7:bf:9a:3a:13:19: 93:38:b0:19:2d:97:e5:2f:09:50:c7:eb:3e:30:a3:fd:05:26: ea:48:07:bd:64:88:85:52:d6:39:ba:68:2b:83:6f:b1:08:70: 88:5b:3b:34:49:71:44:28:63:36:ae:ce:83:96:75:51:72:c6: d5:3e:9a:97:06:8d:0c:51:d6:b0:9a:8f:67:29:77:ca:b2:04: b4:54:3f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvR2CB0kbzxAKLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk Nzg3ODg0NGQtZmUxMS00ZjE3LTk3MTktZmYxYjY1YzRhN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaa1usAhr/M5QPrDg4yjB8y9vkmmUuZ+yFET e2zW9H++FBGuCaZfrhI1lKlGCxUEALfbhMRF3q6eVfHFEJomWS33a7kThb+EIYNl gvhHS89sMkyyT4TxXoJV3O1limSwY1ePTiRx7XLnp8JHuL6FiVHUCfj98Jh+aOLe J7Vd6bXuvgVvY3TlsGmEoDVh6AbpssaSPyGfI+klP82rCRZJ+BqORSnDH/3GkOqw sK7SDjP4pQLxH/Cnvwkf4/bIv/hjUVvrCYcZWA5pS1tqDjGBcII6UIW3DDqCyQNV nhyRhuEAS210XceqQx5quI92U2xBjV4qGtzNw5Zft9ByER8tbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChAhtCvfW/9V4EbH0kVdekB66/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzM1Zjk2YjMtMDQ3ZS0z NjBmLWJiOGEtNDFlOGUwYWYyYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY9fvE/zrh1IkioWIIadJukYCmXs/eG0fd3QoCHEoJHMgtfB1B7JTN8 9I2zwGlOCIULmiG4UVPdQUswPy+/CdBTadbhDq3T+gc78J/WBvVb9tukxq6lcOG4 iUJhlFhcXYSiqez+BMiQ+F6z6CrcTML22/alQFy45nV7ATU1wlziJmaY5CsPEknR YvkKIFCxSiNREHu+SP8HyxIqiQ7uInPO+aVc7WWpxtpX51XoOMe/mjoTGZM4sBkt l+UvCVDH6z4wo/0FJupIB71kiIVS1jm6aCuDb7EIcIhbOzRJcUQoYzauzoOWdVFy xtU+mpcGjQxR1rCaj2cpd8qyBLRUPy8= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:15 2025 by rpki-client