$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa File: 7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa (raw, json) Hash identifier: yXLbjwVFiJu0a4vnLiEKWgnwhK6YYBwP/3D6pWp+G38= Subject key identifier: E7:17:2E:1A:23:6C:CE:33:49:18:72:BB:52:5B:BC:3D:C6:A1:8A:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848B35B70D2A41B2B485F9E4C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:d2:a4:1b:2b:48:5f:9e:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=95f002f7-7be2-4896-b056-b795de90443b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:76:70:ac:8e:d9:0d:99:57:84:c2:28:f3: de:fc:87:a9:ff:cf:a3:21:49:9c:3d:97:37:5c:51: 16:e3:96:44:71:46:35:06:3d:a8:6e:b4:ce:b2:26: 36:cf:a7:95:0c:f7:c4:24:e5:96:51:28:8b:1e:62: d2:31:e8:ae:b4:5b:a1:75:e2:63:c1:c4:be:db:cd: c0:e5:d5:dc:fd:c9:fe:bd:54:b9:4e:f9:9d:d2:f6: 29:6e:60:f1:23:17:c4:44:3f:93:92:68:e2:f5:9d: c3:f3:e9:6e:43:5e:4f:c3:90:a7:a3:81:9a:63:6f: 4b:66:b5:18:65:3d:14:92:50:09:89:61:2d:55:1a: 37:d6:df:74:fc:bf:e4:20:0c:37:cd:6d:c8:16:82: 32:ec:e5:9e:cb:28:ca:43:af:ba:9c:e5:7f:29:ff: 26:03:bf:78:a9:75:9d:73:71:74:c3:c3:ec:e5:ea: 68:51:80:91:be:cd:c9:94:60:a2:99:e0:ce:29:5b: 13:06:7c:a3:58:70:69:56:e5:73:6f:12:07:e7:e9: 93:ed:5e:0c:0f:b2:b1:2f:fc:72:dc:8e:6b:95:4d: 02:a8:16:1d:2f:a0:7b:eb:db:9e:c4:ca:3a:4a:70: 8c:28:5a:63:8d:e9:c5:bf:a8:61:3d:83:88:45:29: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:17:2E:1A:23:6C:CE:33:49:18:72:BB:52:5B:BC:3D:C6:A1:8A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:26:a4:a8:98:0f:81:a3:67:57:ea:7c:2e:92:e8:5e:b7:b0: 6b:44:f2:ce:12:a5:05:6e:b6:83:05:5e:ab:2e:b6:2b:6d:0f: 9c:6e:d8:bf:12:e2:59:5c:70:e3:a3:a8:f7:1f:40:b0:36:0b: e5:c4:a1:43:58:02:64:fa:98:3d:b2:19:1e:2e:76:e3:4c:7a: d5:cb:41:a7:68:4c:7c:3b:76:0b:e5:9f:65:70:ca:a9:6e:77: 79:17:36:07:b2:f1:a4:7b:63:78:e5:07:11:ab:41:9d:d7:0f: e9:5d:e7:ba:11:04:8a:d5:8c:e0:3f:8d:4b:4b:d0:dc:b5:55: 02:14:aa:ac:72:3d:a7:58:52:ee:af:29:52:32:c3:ee:e4:27: a4:7b:0a:20:fb:11:ff:18:51:8e:f5:41:ff:85:69:7f:16:06: 5a:cc:b4:48:a0:04:45:b4:8a:3b:9a:ca:28:05:48:71:4f:6a: 53:21:47:60:f8:4f:25:ea:65:d5:bd:75:7b:9c:6b:0b:57:38: cb:56:fb:74:af:b3:86:93:d6:03:04:b1:9d:91:ab:50:2a:67: 92:a0:b0:60:c0:8d:eb:02:0e:94:54:8e:a3:9e:fc:eb:18:37: cd:5a:68:13:0a:80:7f:5b:f2:08:e5:9b:b5:24:2e:ea:cb:a9: d5:51:09:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3DSpBsrSF+eTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OTVmMDAyZjctN2JlMi00ODk2LWIwNTYtYjc5NWRlOTA0NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiId2cKyO2Q2ZV4TCKPPe/Iep/8+jIUmcPZc3 XFEW45ZEcUY1Bj2obrTOsiY2z6eVDPfEJOWWUSiLHmLSMeiutFuhdeJjwcS+283A 5dXc/cn+vVS5Tvmd0vYpbmDxIxfERD+Tkmji9Z3D8+luQ15Pw5Cno4GaY29LZrUY ZT0UklAJiWEtVRo31t90/L/kIAw3zW3IFoIy7OWeyyjKQ6+6nOV/Kf8mA794qXWd c3F0w8Ps5epoUYCRvs3JlGCimeDOKVsTBnyjWHBpVuVzbxIH5+mT7V4MD7KxL/xy 3I5rlU0CqBYdL6B769uexMo6SnCMKFpjjenFv6hhPYOIRSki+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcXLhojbM4zSRhyu1JbvD3GoYrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2VmMjY0M2YtMmVmMC0z MjQyLTkzMjAtMGFjMjJhZTc4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEmpKiYD4GjZ1fqfC6S6F63sGtE8s4SpQVutoMFXqsutittD5xu2L8S 4llccOOjqPcfQLA2C+XEoUNYAmT6mD2yGR4uduNMetXLQadoTHw7dgvln2Vwyqlu d3kXNgey8aR7Y3jlBxGrQZ3XD+ld57oRBIrVjOA/jUtL0Ny1VQIUqqxyPadYUu6v KVIyw+7kJ6R7CiD7Ef8YUY71Qf+FaX8WBlrMtEigBEW0ijuayigFSHFPalMhR2D4 TyXqZdW9dXucawtXOMtW+3Svs4aT1gMEsZ2Rq1AqZ5KgsGDAjesCDpRUjqOe/OsY N81aaBMKgH9b8gjlm7UkLurLqdVRCfA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:44 2025 by rpki-client