$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa File: ff8e386e-f345-3347-af96-09dacf6ef59f.roa (raw, json) Hash identifier: bjeNbEsF0ibO6cbBl2tYmKYwvfxzymWySsGJ1BGwYRM= Subject key identifier: 67:A2:EA:E7:0E:20:84:22:EF:09:ED:57:02:41:4B:FC:00:B8:EB:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BC2BDA0FB0DE55A9A870 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.33.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bc:2b:da:0f:b0:de:55:a9:a8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=427f7dff-f321-4171-b42e-274251c347ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:e9:c9:41:a9:4a:3c:cd:e3:62:d7:ea:41: 15:69:d2:c5:95:67:91:87:a2:6c:8c:4d:67:8d:7a: db:eb:17:06:f1:ac:86:f4:ae:24:94:c7:c1:41:d4: dc:aa:e6:0d:05:e0:f3:a8:1e:06:6f:85:c3:6b:a2: bb:46:aa:b4:c1:5a:6f:90:67:97:54:ae:3e:9b:b4: 17:91:34:8d:9d:a1:ba:b8:10:f0:8f:6a:50:7d:44: 20:2e:8b:bd:57:02:ec:f2:71:fd:10:7b:cd:0a:ce: 22:7d:da:ea:67:9e:1f:f9:88:c6:50:80:54:52:eb: 35:b3:f4:11:50:d5:60:63:a0:54:d4:f4:c4:b0:41: 13:ec:f9:da:44:b7:af:92:7a:68:a5:75:37:a3:6c: fb:50:86:2e:f4:5d:25:3e:27:86:2d:c8:27:5e:1b: ec:e1:81:c3:cd:e5:3c:ae:70:61:91:3a:4b:f1:e1: bb:3f:5d:4a:90:3e:de:b6:19:dd:bb:bf:fa:99:f7: 6f:b9:77:2a:1a:ed:af:b8:3c:03:4e:3e:ff:bc:b3: 27:d8:33:4b:61:c3:17:a8:b5:08:ae:54:60:53:de: ec:c2:7b:df:05:46:a2:02:53:0d:fe:7e:04:ec:36: c6:b6:14:25:1e:58:94:48:9d:1f:d4:70:97:64:6d: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A2:EA:E7:0E:20:84:22:EF:09:ED:57:02:41:4B:FC:00:B8:EB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f5:b7:a7:ef:2f:0f:41:ef:21:46:15:b4:78:81:a0:64:98: 75:37:23:9b:27:78:4b:fd:da:73:92:fc:b8:d9:da:29:f0:8f: 19:ef:9d:2f:fa:b5:88:21:2e:df:1c:38:a5:3b:4e:fb:40:be: b4:34:54:90:84:f0:83:cc:c4:1f:f6:93:eb:d0:5b:e9:c9:7d: cd:d6:d3:90:84:11:e3:24:4d:10:e2:e5:91:1e:77:e6:27:e0: c5:a9:af:08:91:d7:72:cf:5a:66:ea:7e:36:7e:01:d6:da:86: d1:77:c3:20:36:ef:5d:31:8e:3b:a2:aa:69:43:32:de:5d:c0: 96:ff:ca:41:5b:43:f2:c2:ab:3c:ff:bc:ac:f5:0d:04:6f:c2: 6d:c6:70:4b:98:5c:5b:e7:54:f8:ee:94:67:d0:c4:fd:cd:cc: 71:58:9f:ae:92:d5:fb:c9:1c:18:80:85:f0:3d:5d:4c:63:b7: 75:71:a0:d9:3f:58:d4:a5:4b:a5:ed:8c:e0:2e:2b:8e:94:d0: 72:36:35:49:f8:52:7e:11:10:48:97:c6:28:47:b7:12:44:92: 66:ca:4c:eb:da:75:90:32:b9:cf:f0:0f:29:7e:95:f8:5a:91: da:6f:9d:a2:b6:f5:d4:1f:4e:77:43:77:73:b5:31:99:f2:5f: 17:a5:c9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7wr2g+w3lWpqHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk NDI3ZjdkZmYtZjMyMS00MTcxLWI0MmUtMjc0MjUxYzM0N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPDpyUGpSjzN42LX6kEVadLFlWeRh6JsjE1n jXrb6xcG8ayG9K4klMfBQdTcquYNBeDzqB4Gb4XDa6K7Rqq0wVpvkGeXVK4+m7QX kTSNnaG6uBDwj2pQfUQgLou9VwLs8nH9EHvNCs4ifdrqZ54f+YjGUIBUUus1s/QR UNVgY6BU1PTEsEET7PnaRLevknpopXU3o2z7UIYu9F0lPieGLcgnXhvs4YHDzeU8 rnBhkTpL8eG7P11KkD7ethndu7/6mfdvuXcqGu2vuDwDTj7/vLMn2DNLYcMXqLUI rlRgU97swnvfBUaiAlMN/n4E7DbGthQlHliUSJ0f1HCXZG15CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGei6ucOIIQi7wntVwJBS/wAuOsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmY4ZTM4NmUtZjM0NS0z MzQ3LWFmOTYtMDlkYWNmNmVmNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD71t6fvLw9B7yFGFbR4gaBkmHU3I5sneEv92nOS/LjZ2inwjxnvnS/6 tYghLt8cOKU7TvtAvrQ0VJCE8IPMxB/2k+vQW+nJfc3W05CEEeMkTRDi5ZEed+Yn 4MWprwiR13LPWmbqfjZ+AdbahtF3wyA2710xjjuiqmlDMt5dwJb/ykFbQ/LCqzz/ vKz1DQRvwm3GcEuYXFvnVPjulGfQxP3NzHFYn66S1fvJHBiAhfA9XUxjt3VxoNk/ WNSlS6XtjOAuK46U0HI2NUn4Un4REEiXxihHtxJEkmbKTOvadZAyuc/wDyl+lfha kdpvnaK29dQfTndDd3O1MZnyXxelyaU= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:33 2025 by rpki-client