$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa File: d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa (raw, json) Hash identifier: SDPf2wqc+Qrxx7g+lb+quyJD83mLbUOSq6lYFFdUSz8= Subject key identifier: 90:B9:F3:6E:F2:73:C4:5C:33:02:65:10:02:77:57:7D:06:48:87:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493AA3E63418DD7C4D8B29EFE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 8069 IP address blocks: 20.33.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e6:34:18:dd:7c:4d:8b:29:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=94b9a128-47c8-42cd-8ae3-01963022e2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:56:8b:cc:c4:44:fd:d9:6b:aa:23:d2:59: 98:a4:5e:27:e8:55:3f:2e:29:05:bd:71:bb:63:bb: c2:81:fd:9c:43:50:14:e6:3c:3d:26:82:a5:6f:7c: 0d:50:4c:f6:b0:c0:5f:f9:45:4d:1a:85:1c:2b:52: 18:48:6f:e7:76:c3:81:b0:f0:05:a5:fc:4e:ae:e8: 78:37:5f:08:45:27:08:6e:a3:5f:a2:cc:4b:5e:27: 76:a0:87:74:69:da:20:27:74:b5:5c:e3:0f:f3:49: 48:3a:54:99:f1:c2:4b:38:bb:5b:19:dc:4b:c2:ef: 99:8d:24:dc:b2:ac:8c:fa:11:85:5e:42:3c:b6:03: 15:e7:2d:a5:d6:e9:4b:b5:25:9f:2f:c1:34:96:a6: df:72:e7:42:73:02:25:8d:5c:d1:70:ad:70:de:a2: 5f:93:38:30:80:54:76:68:aa:e2:fc:1f:1c:dd:54: 9e:d1:c5:ae:52:47:b9:16:17:ec:83:60:68:3d:fa: 7c:d4:88:ae:0a:76:76:2c:fd:e2:bb:b1:f2:22:ac: 64:0b:f6:de:3a:1d:bf:a8:5b:06:70:40:75:34:aa: 4e:eb:22:df:f2:41:b2:47:9d:91:e8:90:a8:4a:7e: 46:98:c5:00:17:1a:ce:0a:2d:5e:4d:3f:f3:a8:dd: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:F3:6E:F2:73:C4:5C:33:02:65:10:02:77:57:7D:06:48:87:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:08:60:4e:4b:ea:4c:be:9f:77:19:ed:8a:d3:09:cb:fb:63: 9d:fd:e8:f8:a8:72:59:59:14:24:93:6e:68:b7:24:fd:29:38: ae:6a:41:49:e2:ca:25:df:5e:8e:ed:45:0d:5b:ce:4b:b7:46: fe:d8:ef:26:7c:4b:1f:35:ca:b7:5a:8b:f9:e7:90:52:7f:22: 53:53:9d:db:58:45:52:9f:b2:ad:1a:a1:c1:6e:97:2a:6b:bd: 0e:7a:74:f7:9c:55:cf:07:39:f5:8f:b4:53:36:3f:3b:7e:63: 82:3d:b6:be:d9:3b:f4:f9:3c:fd:0c:c5:41:28:d5:36:a7:6f: 29:c5:31:38:84:c6:75:0f:2c:f2:05:de:6f:7e:19:f5:bc:8c: 2a:f2:b2:49:0b:31:51:2d:63:8b:56:b4:cd:02:97:4d:09:e6: db:8c:98:21:8f:f3:ac:77:f9:d9:b1:e9:f9:ea:a0:9e:63:dc: 12:e6:0c:e7:3b:14:b7:16:8c:b5:13:cf:d8:69:f3:e3:ca:82: e0:1f:7c:3f:53:de:06:70:09:2e:02:b9:96:32:38:54:e6:b5: bf:a4:1c:75:dd:61:1b:7e:38:a6:67:76:08:37:99:ec:26:27: 65:41:c4:4e:eb:71:9b:66:70:72:87:0d:18:26:ba:15:b1:4e: 09:64:47:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+Y0GN18TYsp7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk OTRiOWExMjgtNDdjOC00MmNkLThhZTMtMDE5NjMwMjJlMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtblWi8zERP3Za6oj0lmYpF4n6FU/LikFvXG7 Y7vCgf2cQ1AU5jw9JoKlb3wNUEz2sMBf+UVNGoUcK1IYSG/ndsOBsPAFpfxOruh4 N18IRScIbqNfosxLXid2oId0adogJ3S1XOMP80lIOlSZ8cJLOLtbGdxLwu+ZjSTc sqyM+hGFXkI8tgMV5y2l1ulLtSWfL8E0lqbfcudCcwIljVzRcK1w3qJfkzgwgFR2 aKri/B8c3VSe0cWuUke5Fhfsg2BoPfp81IiuCnZ2LP3iu7HyIqxkC/beOh2/qFsG cEB1NKpO6yLf8kGyR52R6JCoSn5GmMUAFxrOCi1eTT/zqN0rxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC5827yc8RcMwJlEAJ3V30GSIdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc4OGZjOTktZmEzOC0z YzA0LThmYzQtN2ViNmJiMTI1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4IYE5L6ky+n3cZ7YrTCcv7Y5396PiocllZFCSTbmi3JP0pOK5qQUni yiXfXo7tRQ1bzku3Rv7Y7yZ8Sx81yrdai/nnkFJ/IlNTndtYRVKfsq0aocFulypr vQ56dPecVc8HOfWPtFM2Pzt+Y4I9tr7ZO/T5PP0MxUEo1TanbynFMTiExnUPLPIF 3m9+GfW8jCryskkLMVEtY4tWtM0Cl00J5tuMmCGP86x3+dmx6fnqoJ5j3BLmDOc7 FLcWjLUTz9hp8+PKguAffD9T3gZwCS4CuZYyOFTmtb+kHHXdYRt+OKZndgg3mewm J2VBxE7rcZtmcHKHDRgmuhWxTglkR5M= -----END CERTIFICATE-----Generated at Tue Apr 8 18:53:12 2025 by rpki-client