$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa File: 7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa (raw, json) Hash identifier: kzyG73SFbdq1c9L8UhtdUXXpgGq0PyDUhcSzRsEobRE= Subject key identifier: ED:93:AE:19:36:D3:72:F0:97:CF:B5:27:F4:2F:4B:94:12:B1:CA:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584867FAEBB106525BFE159DEC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:eb:b1:06:52:5b:fe:15:9d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=f05efad2-be33-4e2f-99be-18445bc45447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:3b:26:b6:14:55:0c:ee:01:bb:b0:39:c0: 84:6b:b0:c4:d8:dc:85:31:90:2e:19:ec:1a:f9:7a: a4:09:10:a6:02:e3:15:76:f4:bd:3f:71:f5:75:1a: 28:4f:71:df:2c:08:98:c8:9c:da:5c:c8:88:0f:5d: bd:6c:9e:80:8d:fb:bc:49:92:9a:32:b5:f8:65:29: 16:8c:8c:48:92:de:41:6a:39:bd:eb:95:da:32:fd: 14:2f:1a:81:e2:0c:eb:83:73:df:6b:e6:2d:40:44: 43:2f:96:21:f7:56:7a:a9:5a:23:a6:9a:78:c6:99: e0:0c:51:d2:3b:74:b7:f5:7f:d6:6d:7b:b9:72:c2: 8c:05:1f:93:db:03:a0:aa:b7:7c:59:53:58:3f:92: e0:98:d5:77:22:88:44:71:0a:75:a3:8e:4a:c6:a1: fa:b9:02:03:ab:3f:8a:21:7d:13:de:31:c5:27:f5: 95:76:5b:fb:66:77:bb:41:a4:8a:45:41:77:7d:39: 79:9c:bd:69:73:55:84:80:42:c1:af:c8:41:6e:34: a6:0a:1f:97:80:eb:a1:53:d8:11:d3:ae:14:d8:53: 3b:1a:b6:e9:ba:a9:1d:9f:32:08:5a:55:22:c9:96: f8:15:10:bd:dc:37:f2:14:6f:69:dd:89:d9:61:a6: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:93:AE:19:36:D3:72:F0:97:CF:B5:27:F4:2F:4B:94:12:B1:CA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4e:9e:32:68:f4:55:a2:e2:73:ad:86:93:a4:08:ab:48:8e: e8:12:3b:22:4a:87:e7:f9:9a:75:4c:46:5f:f2:23:b2:aa:a7: e9:f9:e0:9f:2f:5a:f4:3d:d6:9a:43:38:cc:0c:23:26:f0:38: 55:60:f5:d0:c1:00:53:bb:7a:23:e5:f5:0c:40:3e:e8:7b:f9: 94:4a:ef:28:b0:6d:60:35:ed:7f:16:8a:a0:af:06:fb:53:31: ca:fd:47:b3:50:a4:5b:90:bc:ad:e1:4c:b7:e4:cd:66:1d:c4: 66:c0:a7:31:4a:bb:6e:b5:9a:02:f1:01:08:e1:af:5c:0c:ca: b0:d5:18:db:1b:4b:09:a2:0a:37:a5:69:8b:ed:26:45:aa:60: 1f:7b:ef:fb:88:a0:37:a3:04:05:c0:79:0b:1c:74:a8:b6:27: 12:b6:e9:3c:fc:d9:d2:0f:62:84:8e:77:ce:88:6a:eb:67:c8: 78:9f:ac:38:2e:28:c5:13:03:f8:52:a8:54:68:bc:61:61:85: 04:67:29:4c:96:34:a7:80:75:98:d5:c6:c2:26:0c:77:7a:7b: 39:4d:7a:d1:4f:0f:ae:f7:77:3d:6b:8d:22:79:1c:ee:85:ba: 72:a8:2c:fa:ca:d5:ad:01:2b:c8:f4:bd:eb:8b:98:05:0d:d7: 18:49:09:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uuxBlJb/hWd7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjA1ZWZhZDItYmUzMy00ZTJmLTk5YmUtMTg0NDViYzQ1NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Y7JrYUVQzuAbuwOcCEa7DE2NyFMZAuGewa +XqkCRCmAuMVdvS9P3H1dRooT3HfLAiYyJzaXMiID129bJ6Ajfu8SZKaMrX4ZSkW jIxIkt5Bajm965XaMv0ULxqB4gzrg3Pfa+YtQERDL5Yh91Z6qVojppp4xpngDFHS O3S39X/WbXu5csKMBR+T2wOgqrd8WVNYP5LgmNV3IohEcQp1o45KxqH6uQIDqz+K IX0T3jHFJ/WVdlv7Zne7QaSKRUF3fTl5nL1pc1WEgELBr8hBbjSmCh+XgOuhU9gR 064U2FM7GrbpuqkdnzIIWlUiyZb4FRC93DfyFG9p3YnZYabciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2Trhk203Lwl8+1J/QvS5QSscpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2I1YWM0MWQtODRmOS0z YzY1LWJlZDMtYzM4ODcwMWRiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlOnjJo9FWi4nOthpOkCKtIjugSOyJKh+f5mnVMRl/yI7Kqp+n54J8v WvQ91ppDOMwMIybwOFVg9dDBAFO7eiPl9QxAPuh7+ZRK7yiwbWA17X8WiqCvBvtT Mcr9R7NQpFuQvK3hTLfkzWYdxGbApzFKu261mgLxAQjhr1wMyrDVGNsbSwmiCjel aYvtJkWqYB977/uIoDejBAXAeQscdKi2JxK26Tz82dIPYoSOd86IautnyHifrDgu KMUTA/hSqFRovGFhhQRnKUyWNKeAdZjVxsImDHd6ezlNetFPD673dz1rjSJ5HO6F unKoLPrK1a0BK8j0veuLmAUN1xhJCeI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:37 2025 by rpki-client