$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93c5b0ee-67dc-38c6-989b-37c89fc28881.roa File: 93c5b0ee-67dc-38c6-989b-37c89fc28881.roa (raw, json) Hash identifier: tnW/qElAIs8A0xtaNboYx/FexN+YKr+QLMa8R3y0EF0= Subject key identifier: A4:3B:9A:57:B7:E3:33:54:F2:3F:44:54:21:E8:A1:AD:0B:F4:0E:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493AA3E610523C4612D7625580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93c5b0ee-67dc-38c6-989b-37c89fc28881.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 8069 IP address blocks: 20.33.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e6:10:52:3c:46:12:d7:62:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=54a24f2a-bf74-485f-95b7-4eb2d517b5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:26:cb:ad:b6:bd:3b:db:30:17:de:b2:41:23: 41:d8:b7:f9:d9:91:bf:2e:8d:fb:1b:4f:b7:71:2b: 82:e9:cc:55:42:8e:b2:81:bb:3d:27:86:47:e4:2f: 44:cf:54:b9:f5:46:2f:d4:8e:8f:a3:4b:9a:01:3c: ef:18:7f:26:67:86:42:ae:3a:80:4b:8f:70:aa:32: 2a:b8:e7:a8:d3:bd:9d:7d:d3:3b:56:36:2a:83:0e: 10:13:1a:58:c1:77:71:c9:09:77:ff:22:83:3c:30: c2:91:79:5e:3e:a6:68:6b:18:07:62:67:3f:e2:80: 12:43:98:50:27:8d:1f:66:cc:8a:74:85:a4:ac:fb: 7a:e9:59:a5:43:74:2e:05:c8:e9:44:07:09:18:5e: 30:3b:3e:d8:b8:0c:2d:c2:fa:e7:fc:ac:63:31:7b: 3d:65:c5:7c:d1:85:b0:91:69:b8:be:81:41:ba:0e: 5a:65:79:5e:7d:31:12:5a:e6:fa:fe:2e:4e:e6:13: d4:ed:6b:03:3b:5b:8c:f0:c7:fa:1a:50:eb:1d:8b: 9b:cb:44:1d:93:b1:dc:24:c1:6b:6f:a6:45:c8:fc: dd:7b:ba:f9:6f:74:6e:35:e2:d8:30:e4:69:d6:ff: c1:20:b9:9a:4d:d9:7e:83:bb:e3:6c:de:f3:5e:c5: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:9A:57:B7:E3:33:54:F2:3F:44:54:21:E8:A1:AD:0B:F4:0E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93c5b0ee-67dc-38c6-989b-37c89fc28881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:05:52:04:61:27:4b:11:ca:13:3f:12:03:05:58:c5:ab:6c: 02:da:d0:70:06:be:82:d6:59:e4:9d:9d:37:07:bc:da:fa:b8: ab:65:47:a6:01:a8:65:d7:34:c7:c1:c2:25:94:3e:86:23:7f: 2e:23:44:78:d0:8f:88:65:24:24:eb:da:ec:f3:1f:87:db:14: ef:bb:d8:9a:58:87:5c:e4:53:d2:04:94:04:2a:f2:38:0b:b7: 42:da:df:31:c4:1f:ff:01:3a:af:eb:09:8c:d1:e1:9d:e7:70: ab:ca:9c:fe:d0:44:d8:2e:6b:e2:c1:6c:52:70:be:86:79:39: c1:67:43:35:35:ff:a9:96:44:e5:c6:23:c5:30:03:9f:c7:a8: aa:00:57:bc:1f:90:f2:81:87:d9:ab:be:60:1e:2a:19:33:4c: d7:54:7a:ea:00:97:fc:0c:3e:03:33:f8:ff:06:03:29:59:be: b5:d8:b4:87:fd:bd:47:4a:cf:6d:04:56:d9:9b:b0:ce:3a:b7: a2:a3:34:22:a2:62:32:c9:36:6e:37:a9:14:f5:bf:df:ff:5b: a2:68:83:99:3a:52:7b:94:fa:04:d2:cc:11:02:60:ce:fe:5f: b8:9a:01:ac:6a:68:da:21:af:9a:51:ff:fd:f1:9b:64:66:54: c4:63:67:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+YQUjxGEtdiVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk NTRhMjRmMmEtYmY3NC00ODVmLTk1YjctNGViMmQ1MTdiNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CbLrba9O9swF96yQSNB2Lf52ZG/Lo37G0+3 cSuC6cxVQo6ygbs9J4ZH5C9Ez1S59UYv1I6Po0uaATzvGH8mZ4ZCrjqAS49wqjIq uOeo072dfdM7VjYqgw4QExpYwXdxyQl3/yKDPDDCkXlePqZoaxgHYmc/4oASQ5hQ J40fZsyKdIWkrPt66VmlQ3QuBcjpRAcJGF4wOz7YuAwtwvrn/KxjMXs9ZcV80YWw kWm4voFBug5aZXlefTESWub6/i5O5hPU7WsDO1uM8Mf6GlDrHYuby0Qdk7HcJMFr b6ZFyPzde7r5b3RuNeLYMORp1v/BILmaTdl+g7vjbN7zXsWNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ7mle34zNU8j9EVCHooa0L9A5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTNjNWIwZWUtNjdkYy0z OGM2LTk4OWItMzdjODlmYzI4ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsFUgRhJ0sRyhM/EgMFWMWrbALa0HAGvoLWWeSdnTcHvNr6uKtlR6YB qGXXNMfBwiWUPoYjfy4jRHjQj4hlJCTr2uzzH4fbFO+72JpYh1zkU9IElAQq8jgL t0La3zHEH/8BOq/rCYzR4Z3ncKvKnP7QRNgua+LBbFJwvoZ5OcFnQzU1/6mWROXG I8UwA5/HqKoAV7wfkPKBh9mrvmAeKhkzTNdUeuoAl/wMPgMz+P8GAylZvrXYtIf9 vUdKz20EVtmbsM46t6KjNCKiYjLJNm43qRT1v9//W6Jog5k6UnuU+gTSzBECYM7+ X7iaAaxqaNohr5pR//3xm2RmVMRjZ88= -----END CERTIFICATE-----Generated at Sat Apr 5 09:44:57 2025 by rpki-client