$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa File: d4a0852e-de74-312e-9a78-d07763f519c2.roa (raw, json) Hash identifier: u0KG6wAXUfecTrGg8c8vJyHWnnBKFpq2wJ/zvF4QByw= Subject key identifier: 4A:CE:20:92:D9:80:02:77:0D:FD:13:04:46:3E:54:ED:B6:D7:0D:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858489D05EC5B8D3767FB69D57900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 20.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:ec:5b:8d:37:67:fb:69:d5:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=bd662137-5601-4b95-8f72-c7fc5eaa8ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:5a:9b:d3:38:ff:f2:89:de:db:a1:12:87: 3c:fc:78:ca:4c:17:f7:3d:2b:31:81:ce:be:3f:09: 96:7e:c0:61:4d:8e:0e:19:fc:3f:b2:50:56:03:ec: ca:5a:3f:6c:67:40:0e:20:38:d9:7f:e6:bc:ff:80: 54:b8:d0:11:f4:2e:9c:e1:2a:0d:5f:32:66:05:ff: e6:b9:4d:7a:3c:b0:7a:c0:11:d6:1a:c9:11:67:97: 8e:50:3d:77:8f:87:0a:af:61:a6:d1:98:44:52:4e: 0a:51:bb:13:67:e7:a1:24:1d:f7:3a:16:ce:0b:13: 30:15:ad:ba:76:91:44:86:c3:7d:e1:95:a2:a6:e1: 31:df:b4:35:38:c9:b7:f0:ab:69:43:e9:c5:1d:40: a0:05:67:ad:e6:ee:5c:d8:6b:67:c3:72:c7:3f:6d: b8:50:08:6b:27:6f:31:0a:ea:63:cf:e8:f7:83:38: d5:52:71:92:1a:98:20:fc:22:c2:48:21:75:14:bb: 9e:27:26:06:db:8c:80:45:04:72:f6:4f:3d:2c:82: 3b:5a:ea:e1:68:b4:a4:ec:33:ba:ba:0e:eb:b6:3f: cd:f0:1e:7a:00:e5:41:9f:8c:b1:85:b6:ec:e9:78: c1:4a:bd:47:ec:e2:d2:6e:49:d3:10:e3:52:2d:bb: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CE:20:92:D9:80:02:77:0D:FD:13:04:46:3E:54:ED:B6:D7:0D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ca:b0:5f:7b:c4:b4:a3:df:88:72:a2:ab:91:5b:55:89:a8: 2b:aa:2a:0a:08:17:73:77:47:f5:12:09:06:59:22:5b:b1:8e: f0:c7:0d:3a:91:09:5e:c6:4a:c6:b6:a7:49:b4:0a:c1:69:a6: 7b:87:73:33:ca:df:18:72:77:44:ec:39:c0:8d:28:5e:98:13: a1:41:55:31:c3:df:54:2e:13:95:d3:e8:5a:3a:f1:0d:66:32: 8d:19:cd:43:5c:1b:ca:36:de:ac:2b:ae:5d:1d:73:64:63:55: ce:6f:6d:54:f1:5c:7c:fe:5e:18:03:42:e9:84:bf:7f:35:67: ef:5c:47:29:5c:76:18:64:b3:85:f4:dc:b8:f1:06:77:3f:7b: 98:dc:45:38:9b:5b:5f:88:63:1d:81:6f:2d:57:e9:7c:01:d6: c5:88:73:80:3e:9c:33:a9:ce:de:82:c4:5c:48:70:0e:29:f9: db:5f:72:15:c9:a1:cc:4f:6d:61:32:2a:72:14:d2:0e:7d:bf: a2:e7:c1:9b:89:be:98:35:ed:d2:e3:58:63:0f:64:cf:fa:ea: 93:06:ff:3e:74:d6:cb:7c:b9:be:f8:fc:ac:1e:03:db:47:be: 2e:fa:fa:d2:47:b2:80:2a:a3:e3:33:3b:fc:b1:23:32:1d:08: 11:6d:48:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBexbjTdn+2nVeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk YmQ2NjIxMzctNTYwMS00Yjk1LThmNzItYzdmYzVlYWE4ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLNam9M4//KJ3tuhEoc8/HjKTBf3PSsxgc6+ PwmWfsBhTY4OGfw/slBWA+zKWj9sZ0AOIDjZf+a8/4BUuNAR9C6c4SoNXzJmBf/m uU16PLB6wBHWGskRZ5eOUD13j4cKr2Gm0ZhEUk4KUbsTZ+ehJB33OhbOCxMwFa26 dpFEhsN94ZWipuEx37Q1OMm38KtpQ+nFHUCgBWet5u5c2Gtnw3LHP224UAhrJ28x Cupjz+j3gzjVUnGSGpgg/CLCSCF1FLueJyYG24yARQRy9k89LII7WurhaLSk7DO6 ug7rtj/N8B56AOVBn4yxhbbs6XjBSr1H7OLSbknTEONSLbvc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErOIJLZgAJ3Df0TBEY+VO221w3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDRhMDg1MmUtZGU3NC0z MTJlLTlhNzgtZDA3NzYzZjUxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzKsF97xLSj34hyoquRW1WJqCuqKgoIF3N3R/USCQZZIluxjvDHDTqR CV7GSsa2p0m0CsFppnuHczPK3xhyd0TsOcCNKF6YE6FBVTHD31QuE5XT6Fo68Q1m Mo0ZzUNcG8o23qwrrl0dc2RjVc5vbVTxXHz+XhgDQumEv381Z+9cRylcdhhks4X0 3LjxBnc/e5jcRTibW1+IYx2Bby1X6XwB1sWIc4A+nDOpzt6CxFxIcA4p+dtfchXJ ocxPbWEyKnIU0g59v6LnwZuJvpg17dLjWGMPZM/66pMG/z501st8ub74/KweA9tH vi76+tJHsoAqo+MzO/yxIzIdCBFtSDw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:03 2025 by rpki-client