$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa File: 785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa (raw, json) Hash identifier: wURXeym0Vg4YNLF/p0vPDoZDwxrmilr010HewndKxFI= Subject key identifier: 87:2E:57:EE:53:C7:37:E0:0C:98:7F:7B:6C:85:ED:B7:48:D1:A8:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493AA3E6445AE0255E63F46020 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 8069 IP address blocks: 20.33.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e6:44:5a:e0:25:5e:63:f4:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=24c2dddf-ad7a-4621-ad81-4bf7b3950bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ae:9c:53:d1:fb:82:4d:83:2d:89:42:c0:32: 35:25:bd:49:ba:56:c4:6c:07:94:5e:9f:93:3a:29: 86:71:b5:85:67:09:47:cb:c2:0e:47:66:80:67:0a: 6a:95:7d:68:0a:42:7c:06:cf:46:84:43:b9:f6:97: 26:88:eb:fd:6b:75:19:e9:65:f3:30:bd:73:c9:97: bb:c3:e6:b2:a0:61:9d:3f:c0:90:24:b3:b4:a7:ee: 8e:df:4c:90:c1:2a:70:9c:49:f8:1c:92:84:f2:ea: 29:fd:26:f9:4c:39:a2:9d:26:d6:4a:6d:ab:f2:a5: 1a:ae:f5:10:90:7e:9c:6f:ac:0a:16:00:77:84:94: 1b:a0:c4:2e:47:ab:07:1f:25:e8:09:c3:d0:b0:f4: e0:c7:15:2c:d3:cd:a0:ce:4b:86:2d:e5:98:0e:97: be:25:d8:2a:4e:4e:d2:00:dd:00:f8:ba:de:21:00: b2:5d:e0:c5:86:b0:32:d1:3c:10:89:04:3d:30:40: 60:42:27:cd:11:93:1c:3b:16:15:5b:0d:c2:24:dd: d5:7f:1c:be:7d:79:db:df:26:65:32:24:9b:a5:40: fe:3b:16:ac:06:bf:5a:43:74:04:b0:a6:22:2a:6a: 19:51:e1:05:b3:8d:0f:db:67:38:30:9d:6b:b6:2a: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:57:EE:53:C7:37:E0:0C:98:7F:7B:6C:85:ED:B7:48:D1:A8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c4:8c:88:5e:57:ce:3c:99:4e:30:0f:a6:ea:41:44:84:99: 61:eb:89:5d:97:ab:e3:25:a7:e7:41:68:a6:c0:b2:dd:73:29: 9e:a1:cf:d5:4d:37:7b:67:bc:a3:2a:a2:fd:18:8a:07:44:c0: f0:b4:1f:f2:98:d9:97:c0:e0:59:26:8c:a9:10:4d:51:54:e8: d8:40:98:1e:4d:f2:6c:6c:18:9d:04:3c:5c:29:49:37:54:c2: 1f:a4:e9:66:23:a8:4d:69:46:8f:e7:73:e1:2b:34:1e:2f:3f: aa:eb:de:6c:ad:32:ef:0e:cf:f7:a3:19:77:91:a5:04:d5:a3: ab:11:71:1e:8b:62:8b:ce:97:07:0f:02:13:57:4f:dd:a6:38: d0:c6:35:07:60:47:39:c7:98:23:bf:a8:59:cf:5d:31:b7:50: fe:8f:6d:6b:ab:a0:78:06:2a:b0:47:3b:68:dd:bd:56:60:98: fb:52:f1:b7:19:5e:19:70:5a:62:c6:f7:82:1f:50:79:0f:f1: ff:9e:14:3b:3b:35:9e:fb:d3:e5:5d:c9:f5:a7:47:55:29:5e: 00:aa:90:a4:35:19:0e:d4:1f:b4:4a:39:d1:16:e9:73:b6:6c: 1f:7f:d4:f4:f3:0f:fc:9d:cb:25:c9:1b:b1:8f:00:71:ff:87: 05:26:46:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+ZEWuAlXmP0YCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk MjRjMmRkZGYtYWQ3YS00NjIxLWFkODEtNGJmN2IzOTUwYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA666cU9H7gk2DLYlCwDI1Jb1JulbEbAeUXp+T OimGcbWFZwlHy8IOR2aAZwpqlX1oCkJ8Bs9GhEO59pcmiOv9a3UZ6WXzML1zyZe7 w+ayoGGdP8CQJLO0p+6O30yQwSpwnEn4HJKE8uop/Sb5TDminSbWSm2r8qUarvUQ kH6cb6wKFgB3hJQboMQuR6sHHyXoCcPQsPTgxxUs082gzkuGLeWYDpe+JdgqTk7S AN0A+LreIQCyXeDFhrAy0TwQiQQ9MEBgQifNEZMcOxYVWw3CJN3Vfxy+fXnb3yZl MiSbpUD+OxasBr9aQ3QEsKYiKmoZUeEFs40P22c4MJ1rtioETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcuV+5TxzfgDJh/e2yF7bdI0aiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg1ZWY2YzEtMGYyOS0z MzcyLWE4MGYtY2UyNjllNzZiNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXEjIheV848mU4wD6bqQUSEmWHriV2Xq+Mlp+dBaKbAst1zKZ6hz9VN N3tnvKMqov0YigdEwPC0H/KY2ZfA4FkmjKkQTVFU6NhAmB5N8mxsGJ0EPFwpSTdU wh+k6WYjqE1pRo/nc+ErNB4vP6rr3mytMu8Oz/ejGXeRpQTVo6sRcR6LYovOlwcP AhNXT92mONDGNQdgRznHmCO/qFnPXTG3UP6PbWuroHgGKrBHO2jdvVZgmPtS8bcZ XhlwWmLG94IfUHkP8f+eFDs7NZ770+VdyfWnR1UpXgCqkKQ1GQ7UH7RKOdEW6XO2 bB9/1PTzD/ydyyXJG7GPAHH/hwUmRtQ= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:56 2025 by rpki-client