$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa File: 8ebe7e82-df85-3231-a9f4-547d1fd54426.roa (raw, json) Hash identifier: Rm2L+pR5cwil0bODDyiz1HWRsBaLWvX9mo3Ed0n/BLA= Subject key identifier: D5:D8:25:23:EF:D3:4B:E6:A3:53:21:46:BA:05:10:35:4C:1D:49:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858481F6539FDC70DABE0A663F880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 8069 IP address blocks: 20.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:39:fd:c7:0d:ab:e0:a6:63:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=910fd32e-78db-44d7-ad40-35983bb62038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:44:3e:fe:bf:40:70:4a:95:e3:cf:9e:e5: c9:5e:90:cc:e6:0d:7c:09:e3:d7:7b:65:5c:00:ac: db:15:b3:4c:be:bb:8d:4f:dd:86:d5:61:c2:3e:e2: 61:74:f3:9c:5b:f8:35:b5:9f:d7:cc:08:e9:12:f1: 4e:13:74:f0:be:50:b4:84:93:1c:43:47:0b:54:aa: c2:f8:ee:b7:d9:da:78:04:d1:69:3e:d6:82:84:f4: 21:96:c1:d5:0a:12:4f:d9:81:6f:5e:07:d6:ba:2a: 4d:3b:c8:dd:34:14:af:23:ad:cf:2a:80:b7:69:2a: 1a:1c:fa:44:54:30:96:ae:27:9e:db:ed:a7:5e:b2: 91:ed:3e:ef:39:b2:5d:f1:c2:d3:57:9f:f4:ff:24: b5:11:f3:85:5d:98:ea:1d:1b:0c:56:9f:c7:2b:9c: 18:5e:8d:c5:15:26:6b:21:ef:57:af:e5:c1:07:e1: e0:fa:1d:fc:e2:66:68:12:42:3e:66:f7:62:0a:61: f2:bb:18:d4:5b:a7:3e:99:1b:08:5c:af:14:ed:6f: f4:27:0d:ea:d8:60:2d:a5:e6:39:ae:b3:c1:a2:60: 14:f0:0f:e7:1c:82:33:74:73:e0:88:5a:b8:23:a0: 4c:3f:9d:63:3f:1d:de:ec:cd:d7:f4:af:f6:ad:48: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:25:23:EF:D3:4B:E6:A3:53:21:46:BA:05:10:35:4C:1D:49:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e6:36:84:16:b6:63:38:59:14:d4:cd:29:94:b9:64:3b:18: 17:b5:ca:c6:9f:0d:cb:03:4f:9e:19:5a:34:8b:16:f7:90:5a: 29:86:89:22:b5:b4:6f:57:93:b3:e2:b7:3e:2f:cb:48:4b:4a: d9:e2:d2:17:48:d5:d2:ab:b6:66:b5:e3:3f:63:86:a4:7c:6a: 95:1c:78:0d:ee:ef:d6:5d:d1:e1:4a:f6:35:8c:5b:83:27:5f: d3:f2:f3:93:2e:76:80:01:db:85:09:5b:15:39:df:e9:f9:7f: c7:15:ad:6a:e0:0c:e4:14:61:a2:38:31:94:23:ba:61:30:72: 1e:b1:d4:fe:44:c2:9e:1e:14:66:9f:25:cc:e4:f4:e5:c5:55: 02:59:98:ad:97:06:02:d9:ab:a8:27:e1:0b:6a:5c:6e:31:10: 0e:c4:39:b3:63:2f:69:44:57:0a:83:b6:de:18:73:ce:b0:9b: 12:c3:d9:bc:e7:18:23:bf:05:98:d9:61:fa:0e:08:53:de:23: 5c:27:e2:55:e4:e0:8f:b4:27:29:9d:dc:f0:c5:88:79:63:c7: 9c:43:10:7e:a0:db:72:21:f9:b5:93:56:2e:25:00:17:a9:3b: 9f:12:89:4a:10:de:34:4d:64:61:db:8c:18:8f:96:48:4e:54: 4c:7b:a6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTn9xw2r4KZj+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk OTEwZmQzMmUtNzhkYi00NGQ3LWFkNDAtMzU5ODNiYjYyMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IxEPv6/QHBKlePPnuXJXpDM5g18CePXe2Vc AKzbFbNMvruNT92G1WHCPuJhdPOcW/g1tZ/XzAjpEvFOE3TwvlC0hJMcQ0cLVKrC +O632dp4BNFpPtaChPQhlsHVChJP2YFvXgfWuipNO8jdNBSvI63PKoC3aSoaHPpE VDCWriee2+2nXrKR7T7vObJd8cLTV5/0/yS1EfOFXZjqHRsMVp/HK5wYXo3FFSZr Ie9Xr+XBB+Hg+h384mZoEkI+ZvdiCmHyuxjUW6c+mRsIXK8U7W/0Jw3q2GAtpeY5 rrPBomAU8A/nHIIzdHPgiFq4I6BMP51jPx3e7M3X9K/2rUjZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXYJSPv00vmo1MhRroFEDVMHUkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGViZTdlODItZGY4NS0z MjMxLWE5ZjQtNTQ3ZDFmZDU0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLmNoQWtmM4WRTUzSmUuWQ7GBe1ysafDcsDT54ZWjSLFveQWimGiSK1 tG9Xk7Pitz4vy0hLStni0hdI1dKrtma14z9jhqR8apUceA3u79Zd0eFK9jWMW4Mn X9Py85MudoAB24UJWxU53+n5f8cVrWrgDOQUYaI4MZQjumEwch6x1P5Ewp4eFGaf Jczk9OXFVQJZmK2XBgLZq6gn4QtqXG4xEA7EObNjL2lEVwqDtt4Yc86wmxLD2bzn GCO/BZjZYfoOCFPeI1wn4lXk4I+0Jymd3PDFiHljx5xDEH6g23Ih+bWTVi4lABep O58SiUoQ3jRNZGHbjBiPlkhOVEx7pkk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:33 2025 by rpki-client