$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: 4So2ljKVS+nGksXQ8UHck7YAdHWLbC3RCDFjwdwJA9k= Subject key identifier: 32:F0:11:F4:F2:A9:45:A4:01:E2:92:23:30:05:39:1E:6E:7F:85:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD36910033A34EF75F000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:69:10:03:3a:34:ef:75:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=f6aa7aee-adb6-4bb1-a2d4-9395ced6fdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:23:71:8c:79:82:55:1a:7f:02:5f:0d:49: 72:04:fb:73:3a:46:9e:86:ec:33:d3:02:2a:97:dc: aa:e1:01:88:3c:53:c7:fa:30:fa:77:e4:96:6f:fe: 51:45:16:44:31:97:88:db:83:71:2f:e0:90:b4:ca: af:ba:2b:9a:79:23:65:2f:29:7d:20:2e:b5:69:32: 9a:c3:08:2c:88:83:54:a0:c3:60:47:67:ee:ec:14: 91:d3:4c:9f:71:6f:2e:52:97:a7:c1:c7:39:8e:38: 2c:c8:db:aa:67:df:2b:7d:f2:e1:92:46:22:06:47: f0:c8:00:10:5f:f9:66:e5:08:16:4d:24:a8:fc:6f: 14:1b:3d:3d:17:27:67:91:24:da:ea:d9:26:aa:ed: 13:a5:a4:46:81:f8:2e:71:f9:57:1e:3c:7c:39:4b: 54:a4:27:17:63:51:b6:6b:da:4e:52:4c:92:64:14: d5:64:49:9d:34:02:ac:a7:f9:13:3f:10:76:b1:7f: 8c:a8:c9:3c:d5:2b:6c:9b:c4:56:d0:57:9d:66:f4: a7:ed:9e:40:f7:9d:5a:0d:77:3c:fa:29:99:27:48: 00:7d:45:cc:2e:85:14:df:e4:15:79:8c:3f:d8:8d: e5:15:7d:38:25:6a:81:69:fa:7f:f0:46:98:b4:cf: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:11:F4:F2:A9:45:A4:01:E2:92:23:30:05:39:1E:6E:7F:85:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1b:19:b8:cb:55:3a:2b:91:0b:12:ce:3c:3d:3b:2f:d2:a3: 19:bd:0d:87:b3:ac:19:37:31:d9:52:ab:d7:36:c7:f3:42:e0: 4c:f5:aa:e6:a2:57:a0:0c:ca:04:ed:30:53:f5:2b:a3:aa:4d: 08:e4:8a:6b:ac:0c:70:cb:ad:f1:5d:e5:8b:d1:e1:2b:25:dc: a1:f7:61:1c:f0:b5:76:4e:c4:2c:a8:b9:9e:b4:d0:58:d0:37: 99:fb:12:bd:d0:9b:4e:14:51:69:f7:f9:e6:4c:2b:bb:b8:4b: 6b:5c:fa:13:5e:bd:f2:6f:ca:5a:70:b1:68:f5:73:78:f0:fb: 1b:72:b4:c9:5c:99:2a:73:cd:e3:e8:a3:83:37:62:30:d9:58: 8c:e3:b8:02:88:a2:75:bf:d0:dd:b9:0b:87:9e:5d:07:79:ec: c0:19:37:cb:97:67:48:37:91:5c:c8:2e:35:bc:67:11:11:ed: df:d5:cd:1c:d6:93:dc:44:24:15:64:90:a5:67:98:26:e9:38: e3:18:0d:ed:13:f2:d9:c3:50:d4:02:f9:3d:f6:bc:32:de:a0: f2:8d:90:10:70:05:25:42:82:ef:4b:be:86:39:26:cf:fd:ce: e4:5c:f0:b6:26:d0:b2:b2:aa:47:9c:31:06:ad:70:64:45:28: e4:2f:94:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9NpEAM6NO918AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZjZhYTdhZWUtYWRiNi00YmIxLWEyZDQtOTM5NWNlZDZmZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQjcYx5glUafwJfDUlyBPtzOkaehuwz0wIq l9yq4QGIPFPH+jD6d+SWb/5RRRZEMZeI24NxL+CQtMqvuiuaeSNlLyl9IC61aTKa wwgsiINUoMNgR2fu7BSR00yfcW8uUpenwcc5jjgsyNuqZ98rffLhkkYiBkfwyAAQ X/lm5QgWTSSo/G8UGz09FydnkSTa6tkmqu0TpaRGgfgucflXHjx8OUtUpCcXY1G2 a9pOUkySZBTVZEmdNAKsp/kTPxB2sX+MqMk81Stsm8RW0FedZvSn7Z5A951aDXc8 +imZJ0gAfUXMLoUU3+QVeYw/2I3lFX04JWqBafp/8EaYtM9/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLwEfTyqUWkAeKSIzAFOR5uf4W0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYbGbjLVTorkQsSzjw9Oy/Soxm9DYezrBk3MdlSq9c2x/NC4Ez1quai V6AMygTtMFP1K6OqTQjkimusDHDLrfFd5YvR4Ssl3KH3YRzwtXZOxCyouZ600FjQ N5n7Er3Qm04UUWn3+eZMK7u4S2tc+hNevfJvylpwsWj1c3jw+xtytMlcmSpzzePo o4M3YjDZWIzjuAKIonW/0N25C4eeXQd57MAZN8uXZ0g3kVzILjW8ZxER7d/VzRzW k9xEJBVkkKVnmCbpOOMYDe0T8tnDUNQC+T32vDLeoPKNkBBwBSVCgu9LvoY5Js/9 zuRc8LYm0LKyqkecMQatcGRFKOQvlEk= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:12 2025 by rpki-client