$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa File: 7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa (raw, json) Hash identifier: i8QI8hQRo94k/ozku1tMl/SmlyN2W806JvrRDV1qdBo= Subject key identifier: 4C:FE:97:7A:42:B5:32:2B:AC:EC:02:2E:F9:D6:EA:CB:E1:AD:E6:31 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848A9963561039AB8FEE42D8B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:35:61:03:9a:b8:fe:e4:2d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=a1e91592-ae14-41ac-b08d-5dc6993c98de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:a1:cb:7b:01:5d:6c:9e:07:12:df:5b:7e: 84:6c:d9:b7:bc:df:47:9f:bc:22:be:91:f8:91:ad: 1c:87:30:f0:46:13:32:0f:0d:a1:76:86:a1:c3:69: 1b:50:e3:40:37:57:ef:41:99:4e:01:1e:4b:b7:ac: 1f:03:1b:43:ff:3d:13:4e:38:97:a7:4c:98:3d:aa: 03:36:04:40:2c:63:7d:ec:ad:76:16:94:36:e6:8a: 5f:1e:5c:99:6b:6d:9d:47:71:76:49:40:f5:c5:a0: 1d:c5:6d:e1:8b:da:73:6d:51:f2:f7:20:d1:48:01: 0a:b8:e5:19:e3:ef:34:04:45:22:4a:00:57:9c:e8: 23:90:32:3c:99:66:3f:61:f7:83:e0:c4:05:34:ac: e8:11:41:a9:25:20:16:48:db:ce:ea:52:d6:de:f3: ed:eb:35:c4:a3:b8:d4:c5:94:84:61:4d:a0:93:b4: 20:5e:84:b2:20:cd:d8:df:bd:d4:33:f2:38:a7:e8: 9c:c9:e8:c4:26:77:f6:96:fd:7f:9e:43:de:8a:20: b1:e5:49:5f:29:fa:56:a5:ed:cd:7f:6e:5a:e6:5d: e5:92:b2:ca:14:69:bc:2c:fb:f0:e7:48:75:14:38: ea:1f:42:6c:0d:f4:f5:e7:31:61:1d:40:04:fc:79: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FE:97:7A:42:B5:32:2B:AC:EC:02:2E:F9:D6:EA:CB:E1:AD:E6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:43:5d:56:c2:93:a9:43:65:62:97:58:e9:8f:55:47:0c:2b: fd:39:dd:73:71:39:32:1c:e0:04:81:9a:46:a3:58:85:88:7d: 13:14:c8:e1:8c:72:fb:c1:a5:b5:3c:71:8e:b1:de:3e:18:3a: f9:92:a0:8b:60:a8:8d:55:dd:36:a4:62:c6:53:df:ea:0b:28: c6:fc:85:2e:51:7a:3d:26:91:c3:d9:1d:6b:ac:87:5b:fa:e1: ff:02:2c:9a:50:fe:63:af:d1:a7:c8:25:66:6e:1a:cf:16:00: 01:65:2a:69:5e:eb:0e:f5:3b:96:9b:1c:53:41:08:a6:3c:95: 44:af:c0:96:2a:3f:3b:1e:29:d6:17:14:43:3d:91:35:bc:5a: 8b:d2:ba:f3:b1:34:48:8d:d5:e1:e4:0d:5f:48:73:a2:fe:5a: 2a:dd:f4:55:79:dc:0c:c4:26:52:0f:44:7a:a3:d1:2f:3c:de: 29:22:6e:14:03:75:f5:50:cf:8f:a5:07:f0:4b:2d:7c:02:d5: d1:41:9c:e9:03:a3:8a:7c:77:13:6e:37:9a:a4:68:c3:d5:00: bd:db:e3:b0:84:ce:36:a8:2a:c3:0f:fc:a7:6c:3b:7e:58:41: 2a:eb:f0:34:be:4e:bb:58:b7:1c:1b:07:82:f6:04:d3:4d:9a: 7e:b9:fd:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljVhA5q4/uQti4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTFlOTE1OTItYWUxNC00MWFjLWIwOGQtNWRjNjk5M2M5OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMShy3sBXWyeBxLfW36EbNm3vN9Hn7wivpH4 ka0chzDwRhMyDw2hdoahw2kbUONAN1fvQZlOAR5Lt6wfAxtD/z0TTjiXp0yYPaoD NgRALGN97K12FpQ25opfHlyZa22dR3F2SUD1xaAdxW3hi9pzbVHy9yDRSAEKuOUZ 4+80BEUiSgBXnOgjkDI8mWY/YfeD4MQFNKzoEUGpJSAWSNvO6lLW3vPt6zXEo7jU xZSEYU2gk7QgXoSyIM3Y373UM/I4p+icyejEJnf2lv1/nkPeiiCx5UlfKfpWpe3N f25a5l3lkrLKFGm8LPvw50h1FDjqH0JsDfT15zFhHUAE/HkDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz+l3pCtTIrrOwCLvnW6svhreYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0ZTRjNzEtNTNjZS0z Y2RkLWJjODAtN2E0YmJmZDlhNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlDXVbCk6lDZWKXWOmPVUcMK/053XNxOTIc4ASBmkajWIWIfRMUyOGM cvvBpbU8cY6x3j4YOvmSoItgqI1V3TakYsZT3+oLKMb8hS5Rej0mkcPZHWush1v6 4f8CLJpQ/mOv0afIJWZuGs8WAAFlKmle6w71O5abHFNBCKY8lUSvwJYqPzseKdYX FEM9kTW8WovSuvOxNEiN1eHkDV9Ic6L+Wird9FV53AzEJlIPRHqj0S883ikibhQD dfVQz4+lB/BLLXwC1dFBnOkDo4p8dxNuN5qkaMPVAL3b47CEzjaoKsMP/KdsO35Y QSrr8DS+TrtYtxwbB4L2BNNNmn65/Tc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:07 2025 by rpki-client