$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa File: bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa (raw, json) Hash identifier: 99cgb/wLYc6vQu6ojpKMhJVkUrHLqdmMZqzh68HPi3w= Subject key identifier: EF:34:5E:59:70:20:03:70:93:26:79:43:8F:5C:CD:D0:F5:70:30:1A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694E6932E1BD807D796580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:69:32:e1:bd:80:7d:79:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=1f79ae15-e5c4-43cf-8c12-42798acb5186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:b3:78:30:7d:7c:cf:29:4d:2c:fe:2c:56: 83:de:e6:2b:ff:11:84:06:69:60:61:48:8d:43:ab: ef:ee:39:2d:2e:de:e7:64:0c:ee:3d:fb:29:c1:de: 2a:b7:d0:28:e0:7b:7f:c1:df:f6:fb:b9:bd:5a:7d: 5e:74:30:67:d9:76:8e:d1:37:fa:a0:d2:ef:a0:c4: 8f:1c:c9:68:7e:88:42:e7:c7:5b:f6:30:00:54:cb: 02:98:d6:4e:59:8e:19:70:ed:3b:6d:4a:73:03:d7: ef:59:62:97:75:c9:b9:b5:2e:90:4c:8f:b1:89:32: 73:04:16:72:41:c0:d8:ec:62:0d:1c:47:42:55:79: 45:7f:8d:e4:f8:60:51:92:d4:52:89:d4:3e:1f:c7: 9e:5b:61:49:3a:22:a5:9d:2b:f8:78:f6:95:d5:1e: 2f:fd:53:7a:57:7c:19:b6:d1:d8:89:dc:59:14:b4: 5f:99:7a:d1:c7:4c:ff:ea:73:70:8d:60:15:e2:11: ab:89:f5:b6:08:4f:6d:37:38:cb:54:51:c0:65:4a: bd:5e:59:06:df:00:e1:86:be:7a:82:71:85:cd:85: 6d:36:b3:25:58:03:70:ed:7f:08:7f:d8:68:83:10: 5f:ef:b9:a1:62:da:d5:03:2c:7d:57:b9:7f:f3:03: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:34:5E:59:70:20:03:70:93:26:79:43:8F:5C:CD:D0:F5:70:30:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9f:c5:ba:bf:50:40:bc:da:d5:40:06:c6:21:cc:12:b5:ba: 88:f3:8d:9f:de:69:a5:18:ff:fe:93:59:a1:6e:16:6f:6e:37: f3:10:16:19:f2:f2:5b:4e:c3:3d:b6:c4:cb:48:36:7e:1a:1b: 36:37:73:36:0e:d3:61:12:51:b8:74:f0:f7:31:07:09:75:79: 40:c4:28:eb:ff:6f:96:98:f6:96:34:f6:b9:20:2a:4c:91:3b: 07:3f:09:9f:bb:d7:b7:97:e9:d8:1b:80:8d:71:44:99:39:2b: ac:fd:f4:74:cc:09:2c:40:7d:62:a9:7f:97:f6:94:a8:fc:84: 98:b0:27:5f:eb:3e:55:c9:64:24:bb:7a:3f:b8:26:b5:b8:7b: cc:f8:ed:1f:56:6a:18:83:59:17:8e:74:c8:6b:11:a9:71:75: 8a:02:c9:b4:7a:56:ba:d2:6b:c0:46:c7:3b:82:b5:d7:4e:af: 0a:37:1f:29:e3:a4:13:a8:51:c3:8f:c4:d4:e4:2d:d2:98:8a: 3d:4c:94:0c:ef:ec:9f:8c:9f:25:6e:1c:cd:f5:ee:9f:f7:b3: db:b8:44:80:03:b3:f8:4d:7e:12:ed:82:ae:f5:44:9a:6b:91: bf:e2:23:1a:c7:c4:f6:37:a6:96:3c:7a:29:5b:12:b2:f2:a7: 9c:8b:8e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU5pMuG9gH15ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MWY3OWFlMTUtZTVjNC00M2NmLThjMTItNDI3OThhY2I1MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2izeDB9fM8pTSz+LFaD3uYr/xGEBmlgYUiN Q6vv7jktLt7nZAzuPfspwd4qt9Ao4Ht/wd/2+7m9Wn1edDBn2XaO0Tf6oNLvoMSP HMlofohC58db9jAAVMsCmNZOWY4ZcO07bUpzA9fvWWKXdcm5tS6QTI+xiTJzBBZy QcDY7GINHEdCVXlFf43k+GBRktRSidQ+H8eeW2FJOiKlnSv4ePaV1R4v/VN6V3wZ ttHYidxZFLRfmXrRx0z/6nNwjWAV4hGrifW2CE9tNzjLVFHAZUq9XlkG3wDhhr56 gnGFzYVtNrMlWANw7X8If9hogxBf77mhYtrVAyx9V7l/8wPEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO80XllwIANwkyZ5Q49czdD1cDAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY1MTY1ZTMtZDFiNS0z MGM4LTliYjItMzQwYjAwZTQxODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6fxbq/UEC82tVABsYhzBK1uojzjZ/eaaUY//6TWaFuFm9uN/MQFhny 8ltOwz22xMtINn4aGzY3czYO02ESUbh08PcxBwl1eUDEKOv/b5aY9pY09rkgKkyR Owc/CZ+717eX6dgbgI1xRJk5K6z99HTMCSxAfWKpf5f2lKj8hJiwJ1/rPlXJZCS7 ej+4JrW4e8z47R9WahiDWReOdMhrEalxdYoCybR6VrrSa8BGxzuCtddOrwo3Hynj pBOoUcOPxNTkLdKYij1MlAzv7J+MnyVuHM317p/3s9u4RIADs/hNfhLtgq71RJpr kb/iIxrHxPY3ppY8eilbErLyp5yLjo8= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:33 2025 by rpki-client