$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa File: adce9981-1640-3807-863a-5100ced68525.roa (raw, json) Hash identifier: kMNyI6jXdk+oxOZ3WjelKPvVdZGwh1NBmawus1m248o= Subject key identifier: 60:AA:47:6E:67:AD:1F:0D:DF:F5:EE:84:93:85:B5:D0:A9:49:D9:70 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF3DB0170856CA4C6C800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f3:db:01:70:85:6c:a4:c6:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=bd6be1b4-2a6e-42d8-99af-cd626102348d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:b9:f1:c2:11:4f:06:32:a6:8b:2c:bb:a1: 43:1b:e9:26:aa:c8:58:52:45:5e:c2:a8:5e:5a:c7: 23:f3:73:6f:28:3c:98:ad:06:71:2a:5d:d2:0d:41: 10:d2:1c:44:c7:72:5f:ec:3f:fc:fc:72:05:ed:d2: 89:70:d8:39:6a:3a:c3:5f:12:79:55:02:d9:b8:38: ae:a1:fa:22:55:64:b0:83:16:b8:59:d4:0e:4f:a3: 2f:7d:3b:a6:6a:d9:9c:65:b0:60:59:ca:70:a6:c6: 6e:a3:17:2a:a5:a0:da:80:b9:8a:65:24:ae:ca:b3: 91:08:3f:b5:9e:14:a6:da:bc:fa:d8:30:ec:75:63: 90:2f:80:a1:8f:03:26:63:f2:2f:31:0c:6b:06:1e: 50:23:f4:fa:f5:fa:31:21:60:cc:3d:34:94:78:d3: 0c:2c:55:e6:de:62:3c:59:1f:0a:d7:b0:d8:cb:37: 18:55:31:1d:71:e2:c8:ac:70:e4:86:53:44:29:86: 28:f2:73:30:6b:96:ed:65:13:fb:c6:2f:f9:1b:48: 52:46:aa:79:33:9f:1c:c0:09:d3:05:04:c0:cb:33: 6a:85:f5:e2:13:d9:1d:51:22:54:b6:2a:44:11:7f: ed:6c:09:c0:41:d1:f3:a6:a5:58:21:80:ee:24:24: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AA:47:6E:67:AD:1F:0D:DF:F5:EE:84:93:85:B5:D0:A9:49:D9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3c:1c:6b:b8:46:11:d9:34:1d:87:70:88:c9:5a:61:f0:6c: ee:9b:21:bf:fd:64:9c:c1:0f:ae:3f:b0:76:f8:38:02:b0:d1: fc:60:e4:65:18:2e:57:c0:65:02:1a:b0:77:bb:93:a6:d1:f4: af:ae:40:9a:ef:b3:ac:41:d3:ec:50:45:a2:4f:07:ed:3f:ae: d8:16:d5:84:a4:c4:57:f7:70:09:e0:fa:b0:f5:b8:86:58:93: 6d:2c:ad:36:a6:0d:15:5c:49:7b:cc:59:7e:f9:ae:f2:33:4d: ea:d3:0e:7a:76:8f:47:59:dc:3a:15:b9:25:cd:4b:91:55:16: fb:7d:7a:c0:1e:2a:c1:84:2a:69:1a:de:46:e2:79:54:97:e9: ae:16:15:5d:73:7d:56:0e:19:57:6f:3f:40:d4:b9:fb:6e:e6: 09:82:6a:8c:d0:a7:c2:8a:b1:4d:b6:e3:8c:28:7c:62:9c:e9: 0b:aa:45:45:fb:ca:7d:5f:b2:54:cc:b4:d5:29:a2:9b:eb:34: 07:65:b8:0d:59:17:22:9f:e8:28:5f:a3:ef:d8:fb:e5:02:1b: c6:3d:33:94:4d:2c:34:bf:58:cc:57:dc:68:82:8b:d0:ad:92: 28:40:a8:7f:a7:d2:7e:de:56:fa:96:38:2d:a2:28:02:72:75: af:8b:01:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvPbAXCFbKTGyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk YmQ2YmUxYjQtMmE2ZS00MmQ4LTk5YWYtY2Q2MjYxMDIzNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb658cIRTwYypossu6FDG+kmqshYUkVewqhe Wscj83NvKDyYrQZxKl3SDUEQ0hxEx3Jf7D/8/HIF7dKJcNg5ajrDXxJ5VQLZuDiu ofoiVWSwgxa4WdQOT6MvfTumatmcZbBgWcpwpsZuoxcqpaDagLmKZSSuyrORCD+1 nhSm2rz62DDsdWOQL4ChjwMmY/IvMQxrBh5QI/T69foxIWDMPTSUeNMMLFXm3mI8 WR8K17DYyzcYVTEdceLIrHDkhlNEKYYo8nMwa5btZRP7xi/5G0hSRqp5M58cwAnT BQTAyzNqhfXiE9kdUSJUtipEEX/tbAnAQdHzpqVYIYDuJCRmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCqR25nrR8N3/XuhJOFtdCpSdlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWRjZTk5ODEtMTY0MC0z ODA3LTg2M2EtNTEwMGNlZDY4NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE08HGu4RhHZNB2HcIjJWmHwbO6bIb/9ZJzBD64/sHb4OAKw0fxg5GUY LlfAZQIasHe7k6bR9K+uQJrvs6xB0+xQRaJPB+0/rtgW1YSkxFf3cAng+rD1uIZY k20srTamDRVcSXvMWX75rvIzTerTDnp2j0dZ3DoVuSXNS5FVFvt9esAeKsGEKmka 3kbieVSX6a4WFV1zfVYOGVdvP0DUuftu5gmCaozQp8KKsU2244wofGKc6QuqRUX7 yn1fslTMtNUpopvrNAdluA1ZFyKf6Chfo+/Y++UCG8Y9M5RNLDS/WMxX3GiCi9Ct kihAqH+n0n7eVvqWOC2iKAJyda+LATE= -----END CERTIFICATE-----Generated at Thu Apr 17 09:04:10 2025 by rpki-client