$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa File: c849a306-4c2a-3fc3-b123-c6713222f536.roa (raw, json) Hash identifier: DTClDEm2PesbWn1WzpQnSHqLPZcimMXACbkVuxGteS4= Subject key identifier: E1:C5:30:16:BD:A9:49:35:F2:4F:DB:99:3B:AD:80:E4:40:F3:9A:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF32FB5FD1F89FA7CEC40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f3:2f:b5:fd:1f:89:fa:7c:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=c2f95dd0-99ed-458b-8736-2180b7c0cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:3e:61:56:d0:28:73:e7:a4:dd:c6:c3:a0: 70:64:19:45:7d:68:30:81:c5:c4:d5:7e:ed:4a:d0: 19:07:55:15:57:71:d2:73:2c:1f:92:7a:9c:85:53: b0:0f:b1:f3:0b:59:fd:35:4b:fc:5f:80:5e:84:c8: 63:02:f0:25:a8:b8:f0:5a:99:b4:a4:8a:d6:74:51: 31:a1:02:e4:ce:0c:41:25:93:d0:54:f0:4f:a2:e1: ee:84:a4:b6:34:29:f3:98:27:a4:33:ab:89:3a:33: 36:c9:b2:4d:c3:7c:77:3f:93:4b:03:e7:a9:5e:aa: f7:2c:a4:3f:9f:07:cf:ba:4a:7c:fc:a3:97:41:55: 81:56:22:7d:92:c5:c1:69:f4:6b:e9:f7:34:5f:5d: a9:fb:6a:bd:82:d4:c7:79:80:30:15:d9:35:fb:be: f6:97:c4:1d:ef:f7:9e:8a:c6:47:a0:71:1d:cb:98: 7d:6a:db:62:69:f4:17:9c:09:ff:9a:97:9b:16:a6: dc:d8:67:86:66:df:ef:17:6a:4d:65:4c:a3:37:bd: c3:e9:c4:2f:aa:38:7b:58:93:93:c6:bb:61:27:9e: 81:78:ce:31:b2:d6:a5:3c:e6:3f:0e:e2:08:88:9a: 27:7e:24:71:1c:e4:bb:bf:65:c5:c1:93:07:e9:2c: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C5:30:16:BD:A9:49:35:F2:4F:DB:99:3B:AD:80:E4:40:F3:9A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:73:47:06:df:05:e4:02:88:2b:f8:e2:2f:2c:92:6a:91:fe: 3a:ff:9b:29:3e:89:af:5d:85:fb:b7:9a:5d:19:cb:d6:4f:a4: 35:8b:05:87:b2:b6:69:5c:e3:7a:c2:e9:ff:60:72:ba:98:71: b7:43:07:3d:f9:29:c8:c5:6b:81:48:71:dc:13:2f:81:9a:96: 7b:19:04:74:83:84:5e:6a:b1:ff:aa:73:9e:05:a6:23:67:ad: 72:38:b9:7c:2b:fa:66:6c:18:a4:b8:da:92:b4:4d:03:7a:fb: 4c:63:08:05:c2:b9:f1:da:74:1f:1e:cb:b6:44:28:9b:72:35: 19:c8:ce:fe:5b:2f:64:ef:6e:42:1c:b4:40:19:6f:ae:a1:08: 0c:70:4f:72:98:9c:99:5c:f3:66:bb:c3:1c:28:4c:b4:18:e3: 89:5d:c0:4c:48:1e:87:81:b4:5d:1d:04:d4:93:69:dc:6b:9e: 7f:ba:63:73:be:39:85:c3:fe:5b:37:b6:7c:38:8b:a4:1b:1d: dc:8b:ab:a7:82:eb:7f:21:d3:73:ea:37:d5:de:53:58:df:7c: d4:bd:d3:06:f8:4e:8e:df:f1:cc:16:9d:1e:b3:43:85:9c:f8: 12:54:ae:5a:2a:f5:1a:98:b4:0b:64:51:32:ba:a5:10:be:1a: d4:38:cb:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvMvtf0fifp87EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk YzJmOTVkZDAtOTllZC00NThiLTg3MzYtMjE4MGI3YzBjZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRU+YVbQKHPnpN3Gw6BwZBlFfWgwgcXE1X7t StAZB1UVV3HScywfknqchVOwD7HzC1n9NUv8X4BehMhjAvAlqLjwWpm0pIrWdFEx oQLkzgxBJZPQVPBPouHuhKS2NCnzmCekM6uJOjM2ybJNw3x3P5NLA+epXqr3LKQ/ nwfPukp8/KOXQVWBViJ9ksXBafRr6fc0X12p+2q9gtTHeYAwFdk1+772l8Qd7/ee isZHoHEdy5h9attiafQXnAn/mpebFqbc2GeGZt/vF2pNZUyjN73D6cQvqjh7WJOT xrthJ56BeM4xstalPOY/DuIIiJonfiRxHOS7v2XFwZMH6Sw0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHFMBa9qUk18k/bmTutgORA85qUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg0OWEzMDYtNGMyYS0z ZmMzLWIxMjMtYzY3MTMyMjJmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNzRwbfBeQCiCv44i8skmqR/jr/myk+ia9dhfu3ml0Zy9ZPpDWLBYey tmlc43rC6f9gcrqYcbdDBz35KcjFa4FIcdwTL4GalnsZBHSDhF5qsf+qc54FpiNn rXI4uXwr+mZsGKS42pK0TQN6+0xjCAXCufHadB8ey7ZEKJtyNRnIzv5bL2TvbkIc tEAZb66hCAxwT3KYnJlc82a7wxwoTLQY44ldwExIHoeBtF0dBNSTadxrnn+6Y3O+ OYXD/ls3tnw4i6QbHdyLq6eC638h03PqN9XeU1jffNS90wb4To7f8cwWnR6zQ4Wc +BJUrloq9RqYtAtkUTK6pRC+GtQ4y2o= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:56 2025 by rpki-client