$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa File: d720d3d4-588b-310b-9b5e-0b5376deda30.roa (raw, json) Hash identifier: elzX1fYTeSG2JXpxGEpjMqPjfIe+KKw+iELRWr8nbAA= Subject key identifier: C4:8F:B6:5A:7A:4C:13:14:72:11:D0:00:54:9D:D8:49:23:D2:33:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858496A19B1DA63DBB5BEF30BF880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b1:da:63:db:b5:be:f3:0b:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=abdfd8fc-f5e7-4acc-bf9d-ab032ae0495a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:e1:61:52:e1:67:4e:ad:75:7e:a0:8c:11: c4:e5:e6:26:b8:dc:1e:c8:55:5c:fd:42:73:a3:ee: 87:03:9a:7e:30:b8:9d:c5:26:cf:04:c5:3a:75:79: 1b:76:19:fe:e7:dd:7c:d1:46:24:ed:c7:5b:62:18: 3b:5a:52:86:1e:28:e1:a0:33:63:09:c8:f2:1d:a9: 0b:af:df:df:1e:e5:cb:82:7b:77:72:f8:23:4a:ca: 67:7c:36:79:04:24:11:1a:4d:25:03:ad:43:da:93: 50:65:1d:1e:24:19:9c:8b:a8:ae:34:d7:1c:8c:63: 03:af:80:f0:ef:0f:24:9e:6a:4c:f7:37:23:e9:b4: ac:ef:ce:81:c4:5c:fc:9d:5c:2f:bc:0d:63:07:60: ad:b3:dd:56:8b:92:ea:49:c3:19:3f:fb:0c:3f:db: 99:47:e1:ad:96:ee:16:0b:31:db:ef:ef:e7:a6:65: 65:b3:d9:8b:5c:05:57:80:5f:2f:17:17:49:04:37: 6f:10:8d:e9:89:da:cb:2c:f5:3f:78:ee:45:63:87: 1b:eb:41:f5:e5:4a:28:40:d8:0e:df:5d:4e:5d:4b: d9:62:f6:00:8c:b4:af:0f:ea:fd:93:60:e6:6b:58: f6:ea:92:e8:12:f2:fb:cd:a6:e6:e2:a0:2a:d0:cc: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8F:B6:5A:7A:4C:13:14:72:11:D0:00:54:9D:D8:49:23:D2:33:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:f1:2e:4a:dd:c7:d5:45:62:ab:50:f2:ee:63:3f:ed:5f: 7d:b7:4d:90:a7:ab:ae:6e:b1:05:ec:3e:d3:1c:33:88:90:e9: ff:34:3a:55:bf:66:e3:87:78:8d:31:9e:23:9d:67:3d:82:f5: 5e:7e:a1:26:6a:11:fb:98:82:f1:91:cb:3b:df:eb:e1:06:23: df:02:04:10:c6:de:24:c9:01:ad:60:8c:5c:07:a4:15:0d:10: e7:65:6a:f8:4b:59:15:4a:f0:b0:16:b1:03:25:ac:2d:d9:f0: 59:8f:de:fd:e1:33:ef:fb:be:58:b6:73:6e:a3:54:13:53:dc: 5c:08:9e:e1:58:88:2b:bd:48:b3:67:80:39:ed:e7:42:d7:74: 37:f4:87:3a:09:f0:ff:ec:f8:00:bf:40:d2:c3:ee:27:59:a2: 07:a1:e8:98:26:7f:6f:a6:cc:8d:22:be:31:6c:be:a7:f3:97: 07:b4:59:b9:28:3d:09:cd:d4:89:74:ec:a6:18:e3:b6:56:0a: f0:d7:d8:1f:86:72:91:22:3a:bc:9c:23:f8:ab:f9:e2:1d:f3: 4d:3a:fa:ff:96:9b:2c:5a:a7:84:31:79:34:43:fb:d7:53:88: 76:aa:f0:f6:e4:32:e0:17:d7:63:fb:be:4b:f8:97:55:2b:1c: c2:fb:5a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbHaY9u1vvML+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YWJkZmQ4ZmMtZjVlNy00YWNjLWJmOWQtYWIwMzJhZTA0OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxfhYVLhZ06tdX6gjBHE5eYmuNweyFVc/UJz o+6HA5p+MLidxSbPBMU6dXkbdhn+59180UYk7cdbYhg7WlKGHijhoDNjCcjyHakL r9/fHuXLgnt3cvgjSspnfDZ5BCQRGk0lA61D2pNQZR0eJBmci6iuNNccjGMDr4Dw 7w8knmpM9zcj6bSs786BxFz8nVwvvA1jB2Cts91Wi5LqScMZP/sMP9uZR+Gtlu4W CzHb7+/npmVls9mLXAVXgF8vFxdJBDdvEI3pidrLLPU/eO5FY4cb60H15UooQNgO 311OXUvZYvYAjLSvD+r9k2Dma1j26pLoEvL7zabm4qAq0Mw7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSPtlp6TBMUchHQAFSd2Ekj0jNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyMGQzZDQtNTg4Yi0z MTBiLTliNWUtMGI1Mzc2ZGVkYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASa8S5K3cfVRWKrUPLuYz/tX323TZCnq65usQXsPtMcM4iQ6f80OlW/ ZuOHeI0xniOdZz2C9V5+oSZqEfuYgvGRyzvf6+EGI98CBBDG3iTJAa1gjFwHpBUN EOdlavhLWRVK8LAWsQMlrC3Z8FmP3v3hM+/7vli2c26jVBNT3FwInuFYiCu9SLNn gDnt50LXdDf0hzoJ8P/s+AC/QNLD7idZogeh6Jgmf2+mzI0ivjFsvqfzlwe0Wbko PQnN1Il07KYY47ZWCvDX2B+GcpEiOrycI/ir+eId8006+v+Wmyxap4QxeTRD+9dT iHaq8PbkMuAX12P7vkv4l1UrHML7Wq4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:18 2025 by rpki-client