$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa File: 969933aa-bc02-357d-875f-85af16f668ef.roa (raw, json) Hash identifier: uhW1I/FdlxhVRX6L8Y/ZxDI9NQZ/zXWf76q/WN6RMo8= Subject key identifier: B7:D3:B8:B2:BC:B2:4D:9E:B5:2B:38:DC:09:04:C3:F4:12:1D:87:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05ED838181BEBC33BC6960 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ed:83:81:81:be:bc:33:bc:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=ee6705dc-c725-4154-8d05-9640a7e41d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:73:de:86:c4:38:cc:f8:09:2b:e6:36:29: 7d:50:a6:b4:fc:9c:f2:dd:fa:8c:89:a3:7c:89:4f: c7:3c:15:27:09:24:9b:d8:f6:09:ea:c6:48:55:6a: 46:78:2e:ab:e3:97:51:72:83:f4:9c:8f:9d:c6:fd: 82:3a:65:32:81:5e:ff:36:76:f2:22:10:01:bf:8f: 50:aa:73:f6:eb:24:87:93:12:46:0a:b2:c5:07:44: 97:55:e1:a6:2f:29:cb:a3:54:3c:ca:d6:aa:c4:c6: 1b:a8:4c:70:61:09:5a:5a:0f:19:de:e9:3c:d2:70: 96:94:4e:7d:4e:23:a5:48:09:b5:34:8d:8b:4e:6a: f8:df:48:6a:c2:00:96:f7:9b:fa:28:aa:c6:92:a0: 1b:1e:a2:a5:a8:78:30:53:0c:56:9d:fd:db:de:64: c8:aa:1c:f5:1a:3e:bc:6e:10:9c:dd:5b:80:59:93: 0f:91:c2:4f:9d:f2:4c:69:5b:dc:f7:34:60:9f:9f: d7:bf:d9:b3:7a:8f:a8:6c:3a:d0:9b:55:a8:4d:d3: b1:d5:8c:56:df:c1:88:c1:9b:ef:72:44:4e:4f:e1: 9e:4a:6b:3d:1a:8d:c6:3b:20:2b:61:29:6f:50:09: a2:ed:5d:5e:ac:8a:7c:dd:5c:81:92:3c:08:db:7b: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D3:B8:B2:BC:B2:4D:9E:B5:2B:38:DC:09:04:C3:F4:12:1D:87:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ed:fe:8c:8c:06:44:6b:6f:ac:9a:2c:ed:0c:57:dc:b7:45: 53:bf:7b:e4:38:68:84:ba:f2:4b:be:e3:06:7e:9e:5e:c1:ee: fc:93:ee:c7:d0:90:f6:fd:4b:6a:4d:e1:45:e0:4f:2a:73:3c: ff:cb:0e:33:cd:ac:72:31:a6:09:bc:ba:11:be:b9:61:ca:3d: 7c:95:be:79:30:6c:43:db:d6:f3:90:8b:c3:10:27:50:c6:e1: 79:cf:ff:39:e5:47:d5:6a:9c:25:ac:79:5a:a7:72:6d:a1:14: 4e:bf:48:b6:8c:ee:3c:d7:6b:e9:8f:a5:e6:94:fb:db:6e:a5: 94:5c:f6:ca:cf:50:2a:71:89:d4:19:79:46:0b:57:0a:29:00: e7:ae:b6:7f:25:c9:75:8b:79:4a:bf:0e:8e:32:64:c8:f8:04: fa:52:fd:57:af:8c:4d:c6:4d:81:5c:2f:f3:f7:c0:d6:87:7f: be:8b:65:44:de:c8:70:0c:b5:78:28:39:f7:4f:71:e7:ad:45: d8:fb:2f:c8:a2:8b:91:80:bf:9c:47:b8:a1:0c:9c:2f:c2:12: d4:a4:1f:d5:24:e0:1d:77:b3:7d:f5:e2:4a:7e:81:6c:9e:c5: e0:bb:ae:35:b9:8e:79:ed:62:0f:59:2e:21:5a:64:5d:74:c5: 55:55:97:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBe2DgYG+vDO8aWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZWU2NzA1ZGMtYzcyNS00MTU0LThkMDUtOTY0MGE3ZTQxZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKtz3obEOMz4CSvmNil9UKa0/Jzy3fqMiaN8 iU/HPBUnCSSb2PYJ6sZIVWpGeC6r45dRcoP0nI+dxv2COmUygV7/NnbyIhABv49Q qnP26ySHkxJGCrLFB0SXVeGmLynLo1Q8ytaqxMYbqExwYQlaWg8Z3uk80nCWlE59 TiOlSAm1NI2LTmr430hqwgCW95v6KKrGkqAbHqKlqHgwUwxWnf3b3mTIqhz1Gj68 bhCc3VuAWZMPkcJPnfJMaVvc9zRgn5/Xv9mzeo+obDrQm1WoTdOx1YxW38GIwZvv ckROT+GeSms9Go3GOyArYSlvUAmi7V1erIp83VyBkjwI23uPEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfTuLK8sk2etSs43AkEw/QSHYfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY5OTMzYWEtYmMwMi0z NTdkLTg3NWYtODVhZjE2ZjY2OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnt/oyMBkRrb6yaLO0MV9y3RVO/e+Q4aIS68ku+4wZ+nl7B7vyT7sfQ kPb9S2pN4UXgTypzPP/LDjPNrHIxpgm8uhG+uWHKPXyVvnkwbEPb1vOQi8MQJ1DG 4XnP/znlR9VqnCWseVqncm2hFE6/SLaM7jzXa+mPpeaU+9tupZRc9srPUCpxidQZ eUYLVwopAOeutn8lyXWLeUq/Do4yZMj4BPpS/VevjE3GTYFcL/P3wNaHf76LZUTe yHAMtXgoOfdPceetRdj7L8iii5GAv5xHuKEMnC/CEtSkH9Uk4B13s3314kp+gWye xeC7rjW5jnntYg9ZLiFaZF10xVVVl60= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:46 2025 by rpki-client