$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa File: 85a501f7-6576-30eb-bae9-089a76033a22.roa (raw, json) Hash identifier: b8EVw0ViCDrpwh8kMEG7RwdUrVbrMGiFjalnd9AjnjY= Subject key identifier: 1F:EC:B3:B2:53:15:FF:5F:11:76:71:7F:71:EC:84:41:FC:1E:47:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BCDFD8B75B7EE1F87CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.33.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bc:df:d8:b7:5b:7e:e1:f8:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=d6fd0d00-906c-4b3e-ab3b-3f21b52161d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:c2:b3:80:01:58:35:67:e0:64:b0:a3:9a: b8:4a:68:7a:bd:36:26:e4:23:9a:57:11:6a:6c:2b: 43:5b:fb:57:fd:c6:4a:72:d8:4d:2a:d3:42:aa:0a: 9e:c1:a8:df:03:e5:9b:e4:34:38:13:43:c1:21:cf: 1c:19:0f:e6:d8:1c:c0:dd:1b:6f:32:4f:19:b7:b0: c2:b7:23:87:d9:39:1b:89:90:b5:e5:ff:40:86:ea: fb:3c:33:70:b7:21:c5:4f:58:d6:2a:de:b5:0c:7d: d1:71:2b:12:da:93:30:9a:4c:c9:63:fe:3a:79:67: c1:10:52:56:a4:7d:e3:d4:88:44:eb:34:6a:17:26: 04:be:d6:73:db:ed:b5:71:8f:3a:43:4a:b1:26:8d: 72:7b:52:5a:c4:1f:89:28:7d:94:49:f7:77:40:0a: ce:73:8e:9f:26:3b:86:a6:bc:55:73:74:9b:fd:f1: 81:d8:2e:99:45:d5:b5:d5:ff:38:d9:b2:fe:96:0f: 2d:55:02:98:3d:c7:b4:d5:16:e8:30:d7:3e:b5:39: 57:8b:93:f4:50:b8:45:93:bc:83:8e:b2:6b:0d:68: 4d:eb:c0:dc:06:26:64:98:d6:58:9f:c2:53:3f:f0: 24:d3:be:15:e8:71:62:9f:f0:2e:94:e9:28:f5:51: 04:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:B3:B2:53:15:FF:5F:11:76:71:7F:71:EC:84:41:FC:1E:47:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:57:94:a8:fb:51:11:3b:2e:20:c5:98:df:2a:07:8d:63:78: 75:1f:24:a2:89:f9:b0:a8:66:85:71:bf:82:f7:67:ec:c5:08: 3e:ee:5a:df:c6:af:af:ec:51:7a:dd:49:99:82:b8:22:1c:d9: 12:1e:a9:f0:c2:90:99:dd:d0:eb:5c:53:95:00:42:14:43:83: c6:5e:6a:1a:7b:d1:86:d0:96:01:34:64:be:f7:99:60:cd:58: 7c:21:98:00:31:49:a0:eb:1b:48:d1:75:17:9b:02:b5:c6:2c: 67:a4:18:0a:c0:93:75:e4:ce:80:58:36:76:96:a0:9f:d1:82: a2:f5:7a:62:16:6f:48:f5:f2:bc:c6:04:8f:e9:a4:47:96:ba: 20:3c:f4:f3:40:84:2f:33:c4:87:c2:0f:0d:c1:6e:a7:77:c3: 3e:4b:a3:2d:14:d0:06:41:c0:f5:1b:92:03:08:bb:e3:3c:2a: 4a:7f:be:9e:ab:3b:24:d1:04:00:c3:6d:2b:88:40:b7:9d:ee: 0d:9d:14:7b:f6:76:7d:60:06:75:03:4f:f5:d5:3f:11:56:1a: 44:b3:5b:76:63:33:c0:ef:2d:89:0c:71:ad:c8:d7:5e:20:2d: 4b:c8:40:59:90:55:55:17:48:e3:d1:08:2a:14:df:84:d6:f7: 6d:d4:87:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7zf2LdbfuH4fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk ZDZmZDBkMDAtOTA2Yy00YjNlLWFiM2ItM2YyMWI1MjE2MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ7Cs4ABWDVn4GSwo5q4Smh6vTYm5COaVxFq bCtDW/tX/cZKcthNKtNCqgqewajfA+Wb5DQ4E0PBIc8cGQ/m2BzA3RtvMk8Zt7DC tyOH2TkbiZC15f9Ahur7PDNwtyHFT1jWKt61DH3RcSsS2pMwmkzJY/46eWfBEFJW pH3j1IhE6zRqFyYEvtZz2+21cY86Q0qxJo1ye1JaxB+JKH2USfd3QArOc46fJjuG prxVc3Sb/fGB2C6ZRdW11f842bL+lg8tVQKYPce01RboMNc+tTlXi5P0ULhFk7yD jrJrDWhN68DcBiZkmNZYn8JTP/Ak074V6HFin/AulOko9VEEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/ss7JTFf9fEXZxf3HshEH8HkfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODVhNTAxZjctNjU3Ni0z MGViLWJhZTktMDg5YTc2MDMzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFXlKj7URE7LiDFmN8qB41jeHUfJKKJ+bCoZoVxv4L3Z+zFCD7uWt/G r6/sUXrdSZmCuCIc2RIeqfDCkJnd0OtcU5UAQhRDg8Zeahp70YbQlgE0ZL73mWDN WHwhmAAxSaDrG0jRdRebArXGLGekGArAk3XkzoBYNnaWoJ/RgqL1emIWb0j18rzG BI/ppEeWuiA89PNAhC8zxIfCDw3Bbqd3wz5Loy0U0AZBwPUbkgMIu+M8Kkp/vp6r OyTRBADDbSuIQLed7g2dFHv2dn1gBnUDT/XVPxFWGkSzW3ZjM8DvLYkMca3I114g LUvIQFmQVVUXSOPRCCoU34TW923Uhw8= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:37 2025 by rpki-client