$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa File: e1715101-8757-35c5-9b97-2c8a2220e65e.roa (raw, json) Hash identifier: C6paOFUDLnISJnEzEKip3aNfOQanoWopVjLMt9hKee4= Subject key identifier: FF:C6:87:5E:DC:24:E9:E1:D2:02:EE:E0:87:12:AB:77:33:8E:00:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C25F70C5C14FA9DBC8970 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:25:f7:0c:5c:14:fa:9d:bc:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=757538ce-3e76-4a05-b271-88ef30540a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:7f:a7:06:7c:9a:4b:c8:7a:60:ca:cd:92: 04:8b:eb:6f:39:00:cc:f5:f3:3d:12:75:c4:7b:f5: 85:84:4f:d1:c8:37:40:52:b9:96:d8:4e:44:56:1a: e3:81:47:db:86:f9:8c:ee:38:33:a6:b8:d9:1d:38: a0:fd:4e:eb:e6:55:99:6d:a5:8b:22:08:e7:17:12: f9:16:2a:61:d7:22:e5:2a:4f:35:71:e5:d5:c9:20: d6:1f:df:35:96:5f:5c:0d:b5:18:37:1b:4c:74:46: 94:5f:df:97:d6:a2:a2:08:31:77:c3:1e:2b:70:39: 98:34:5c:2b:b5:fc:77:f8:ee:3f:59:e4:a4:2a:f6: 58:20:2c:1e:02:35:f9:6e:e0:01:58:72:e9:ec:8f: cb:86:26:9a:b5:b8:32:4a:53:bc:98:de:3f:0a:31: 82:1f:7a:81:ab:04:f5:5a:87:4c:a1:39:5a:c7:60: 59:2d:ac:ee:45:b0:3c:22:01:bb:87:87:98:52:6f: 3c:77:ac:b4:b0:e9:d8:09:78:21:21:13:d9:96:92: 28:6a:c9:df:26:50:1a:ca:7a:2b:16:f5:c3:06:8d: e0:a8:2a:14:d8:cc:f7:26:2e:a3:29:2e:b4:c0:63: 86:9d:a9:3a:91:7f:9f:b2:a9:71:41:da:75:e4:0b: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C6:87:5E:DC:24:E9:E1:D2:02:EE:E0:87:12:AB:77:33:8E:00:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:10:b0:3f:65:70:3e:9f:c3:16:1c:34:c2:0f:de:1e:b6:75: 57:0f:50:03:c9:40:d4:4d:19:7c:e4:99:5e:d9:0f:4b:a9:d4: 0d:44:e8:76:7a:30:07:42:a3:d7:b2:bd:70:1e:74:b2:34:45: 60:b0:62:1d:1c:6d:83:a3:05:e8:02:e1:ed:06:5d:58:35:2b: e1:ec:22:9d:5c:b3:5e:ad:79:66:76:b6:a6:37:f1:d3:a2:84: c3:c3:09:d5:47:3f:ed:b4:61:ba:29:82:38:68:57:9c:85:95: 48:28:fd:82:c2:23:95:99:f6:c7:cb:df:0f:ab:9c:7c:16:81: 32:63:90:e7:12:fa:09:d5:09:50:19:8f:7f:af:2a:bc:97:40: c3:6d:8a:cc:36:d0:a3:1b:7c:12:22:48:f1:78:0b:f4:82:41: 01:ec:8f:8d:72:99:0d:5c:d3:21:67:91:44:c9:1c:ae:d8:2d: 8d:ff:3d:b1:2a:cf:b1:ca:8f:1a:04:a1:4c:41:32:e2:f1:f9: 97:3d:3f:22:05:56:b0:c5:ce:5a:cb:47:4c:7a:ed:a1:14:12: ca:f9:e8:80:16:51:bb:a6:41:8a:2c:c8:74:2d:03:65:36:a7: 3a:7b:94:e7:e6:fb:1e:58:a8:50:c7:05:e1:68:32:b2:15:25: 34:25:b4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCX3DFwU+p28iXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NzU3NTM4Y2UtM2U3Ni00YTA1LWIyNzEtODhlZjMwNTQwYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Z/pwZ8mkvIemDKzZIEi+tvOQDM9fM9EnXE e/WFhE/RyDdAUrmW2E5EVhrjgUfbhvmM7jgzprjZHTig/U7r5lWZbaWLIgjnFxL5 Fiph1yLlKk81ceXVySDWH981ll9cDbUYNxtMdEaUX9+X1qKiCDF3wx4rcDmYNFwr tfx3+O4/WeSkKvZYICweAjX5buABWHLp7I/LhiaatbgySlO8mN4/CjGCH3qBqwT1 WodMoTlax2BZLazuRbA8IgG7h4eYUm88d6y0sOnYCXghIRPZlpIoasnfJlAaynor FvXDBo3gqCoU2Mz3Ji6jKS60wGOGnak6kX+fsqlxQdp15AuPoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/Gh17cJOnh0gLu4IcSq3czjgC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE3MTUxMDEtODc1Ny0z NWM1LTliOTctMmM4YTIyMjBlNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoQsD9lcD6fwxYcNMIP3h62dVcPUAPJQNRNGXzkmV7ZD0up1A1E6HZ6 MAdCo9eyvXAedLI0RWCwYh0cbYOjBegC4e0GXVg1K+HsIp1cs16teWZ2tqY38dOi hMPDCdVHP+20YbopgjhoV5yFlUgo/YLCI5WZ9sfL3w+rnHwWgTJjkOcS+gnVCVAZ j3+vKryXQMNtisw20KMbfBIiSPF4C/SCQQHsj41ymQ1c0yFnkUTJHK7YLY3/PbEq z7HKjxoEoUxBMuLx+Zc9PyIFVrDFzlrLR0x67aEUEsr56IAWUbumQYosyHQtA2U2 pzp7lOfm+x5YqFDHBeFoMrIVJTQltMQ= -----END CERTIFICATE-----Generated at Wed Apr 9 01:02:40 2025 by rpki-client