$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa File: ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa (raw, json) Hash identifier: TJtlPgzuUacy0PbS0qwgHe5Yi1Gf/dIXgcIGDnsjJk4= Subject key identifier: 13:68:71:F7:D0:A3:95:5F:41:CC:5A:45:5E:D9:74:67:9B:A4:01:14 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BA791AE1B4AB24A2CC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.153.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:ba:79:1a:e1:b4:ab:24:a2:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=d1e977ca-a29f-4762-b606-6c1b25c481ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:9a:9a:10:70:80:35:ff:b7:89:cf:ce:12: 9f:93:d2:36:5b:9b:d0:98:36:c2:3d:c6:81:4a:d5: 62:47:93:55:7a:f8:f6:66:55:b7:9d:79:bd:15:42: 13:e1:8e:c5:f6:43:d0:88:6f:b0:99:4c:15:a3:b5: 3a:d5:09:c7:d9:c7:17:93:3f:0b:36:0c:b5:3b:e4: e2:35:d3:2d:85:93:58:66:3f:6f:0a:60:59:d0:f9: 09:e1:9e:38:9e:3b:f4:a8:c3:ca:d0:67:b1:6b:17: f9:c2:b9:03:af:48:c4:8c:1c:87:ca:b8:c0:b9:79: b4:fa:63:ab:bb:8a:35:75:f7:2c:dc:a1:ad:45:b7: 46:46:5d:b7:34:d8:4f:22:01:f8:ba:b9:ad:4b:0c: 89:41:48:d3:52:bb:39:66:d4:37:01:60:4d:02:70: 81:75:24:76:78:87:bd:fd:41:75:45:fd:82:b6:9f: ad:b6:c7:9a:5f:a5:4c:2c:ce:d1:6e:ee:b6:6e:1b: 12:2c:2a:ba:7c:27:c0:03:f3:0c:86:8e:c4:59:92: d5:4f:8f:36:cd:db:7c:ce:04:10:23:48:ae:cb:47: 1e:83:e8:b0:9f:9e:07:e3:75:88:98:3f:47:7e:5c: 30:ad:35:d5:08:e9:5a:0f:5d:68:11:55:9a:5b:b6: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:71:F7:D0:A3:95:5F:41:CC:5A:45:5E:D9:74:67:9B:A4:01:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:18:ff:da:6b:b8:af:4d:1c:3a:26:6d:23:55:cf:64:dc:32: fe:ea:18:4f:93:e3:f5:fc:a1:ff:81:9d:47:21:2c:3c:57:2b: ad:32:ea:e4:cf:b4:92:d7:07:0d:93:ec:52:1f:c4:c7:a3:d7: 2a:36:ce:20:b1:f9:98:d6:25:37:d8:c5:e6:4b:f3:7c:6b:25: 6f:85:be:77:84:00:f8:4b:8e:b6:54:c0:25:5d:a4:f9:1f:da: 41:f0:b6:46:e2:8b:dd:05:70:67:ba:06:70:44:97:9b:59:72: 3a:74:66:63:c8:a7:ce:9a:fc:a2:a9:ac:e4:98:3b:d3:3c:8f: 22:f2:b5:8e:f2:bb:e3:3f:7f:e9:e4:2f:b8:d1:82:03:17:d5: 2c:25:5d:66:24:e1:62:a2:c2:b3:a0:b3:02:71:c8:d4:91:2d: a6:e5:f8:26:a6:63:f0:cc:27:3d:ac:2c:1f:ed:7f:c4:e5:df: 9a:39:92:67:61:f2:d2:b7:76:f2:a5:07:fd:90:f5:3a:fb:48: 8e:5a:28:21:77:bf:45:51:b2:d6:f5:c2:99:4e:28:3f:23:32: 4c:dd:5e:21:2b:eb:08:df:a4:da:50:21:3a:ec:0e:53:cc:76: 60:3b:b2:7b:ad:b7:08:ca:ec:19:a2:da:71:65:52:f1:f8:ba: 58:25:d3:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7p5GuG0qySizIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk ZDFlOTc3Y2EtYTI5Zi00NzYyLWI2MDYtNmMxYjI1YzQ4MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomiamhBwgDX/t4nPzhKfk9I2W5vQmDbCPcaB StViR5NVevj2ZlW3nXm9FUIT4Y7F9kPQiG+wmUwVo7U61QnH2ccXkz8LNgy1O+Ti NdMthZNYZj9vCmBZ0PkJ4Z44njv0qMPK0Gexaxf5wrkDr0jEjByHyrjAuXm0+mOr u4o1dfcs3KGtRbdGRl23NNhPIgH4urmtSwyJQUjTUrs5ZtQ3AWBNAnCBdSR2eIe9 /UF1Rf2Ctp+ttseaX6VMLM7Rbu62bhsSLCq6fCfAA/MMho7EWZLVT482zdt8zgQQ I0iuy0ceg+iwn54H43WImD9HflwwrTXVCOlaD11oEVWaW7YvkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNocffQo5VfQcxaRV7ZdGebpAEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VkMDg2NTctM2ViMy0z YWQ3LWE3ZmMtZTkwNThjNWE3NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcY/9pruK9NHDombSNVz2TcMv7qGE+T4/X8of+BnUchLDxXK60y6uTP tJLXBw2T7FIfxMej1yo2ziCx+ZjWJTfYxeZL83xrJW+FvneEAPhLjrZUwCVdpPkf 2kHwtkbii90FcGe6BnBEl5tZcjp0ZmPIp86a/KKprOSYO9M8jyLytY7yu+M/f+nk L7jRggMX1SwlXWYk4WKiwrOgswJxyNSRLabl+CamY/DMJz2sLB/tf8Tl35o5kmdh 8tK3dvKlB/2Q9Tr7SI5aKCF3v0VRstb1wplOKD8jMkzdXiEr6wjfpNpQITrsDlPM dmA7snuttwjK7Bmi2nFlUvH4ulgl09o= -----END CERTIFICATE-----Generated at Tue Apr 8 14:39:42 2025 by rpki-client