$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa File: 0548421c-e41b-3675-9d81-df4e842b0bb4.roa (raw, json) Hash identifier: OdXjDVXME0PIitHfXOi8Xcnc5cP/A/NztFvHeT8ya08= Subject key identifier: DE:FB:5C:E0:85:56:69:9E:CA:92:C6:19:E2:F7:BE:EC:AF:D5:EB:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D16550884797B5CBD00FDDC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.33.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:50:88:47:97:b5:cb:d0:0f:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=26627f3f-8675-4e4e-a08d-0d4880650431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:1f:d1:e7:26:8a:22:70:97:a7:2a:07:f3: cb:cd:38:6f:1e:09:83:de:3c:0b:19:a0:cd:d9:6d: 2f:02:27:19:e9:92:ea:de:0b:64:9d:54:66:4c:16: 0a:fd:3e:31:c7:05:01:a5:fb:e2:60:8f:30:81:2e: a0:ed:2b:03:b9:a2:5a:28:bf:3c:ad:29:bd:63:5d: 0a:cc:b9:25:6f:4a:2f:8b:ec:14:31:26:c5:63:f3: 92:3f:6e:9f:08:4f:c6:a9:a4:b8:ca:4f:dd:5e:6c: 06:90:66:9f:e4:e6:12:c7:63:e5:36:1e:59:cd:43: a5:48:c9:b6:74:10:26:40:02:71:ae:5a:c2:14:6c: 53:4b:15:20:7b:5e:4a:9e:cb:ad:79:f3:eb:a4:4b: 0c:7a:59:58:0c:1d:78:d0:e8:b7:f5:54:d1:0d:05: 96:c1:bb:c2:ee:01:56:e0:3b:b0:74:b0:c1:ff:07: 29:31:b8:f1:bc:80:b5:90:65:bd:9b:37:a8:ed:29: 65:b6:2c:50:4b:a4:72:3a:5f:c1:00:60:17:07:1a: c2:d8:60:21:1e:01:00:1c:7f:58:cd:e4:2b:91:6f: 8c:31:39:a0:14:f0:ba:0b:f4:c5:81:cd:15:ab:d1: 8d:10:57:d5:65:c7:a5:a1:f1:c8:44:5d:72:61:48: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:5C:E0:85:56:69:9E:CA:92:C6:19:E2:F7:BE:EC:AF:D5:EB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0548421c-e41b-3675-9d81-df4e842b0bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7b:a4:3c:63:68:0d:f3:bd:9f:9f:23:6c:a8:21:af:de:fc: 97:5b:00:52:c5:87:52:6d:96:0c:bc:cd:cb:1f:41:f4:dd:b4: 0b:4f:3a:37:eb:e5:93:b7:c4:4a:f1:b1:4a:48:6c:af:3d:70: 50:68:f1:1b:37:e8:27:7b:f1:6b:96:87:67:ad:06:42:b1:54: 6d:9f:0b:05:8f:4c:33:46:af:ea:2c:07:c8:3f:ca:6e:30:60: d1:19:3b:3d:04:de:ce:e0:b1:20:7f:5e:47:e1:56:64:a3:c8: 43:47:fa:b2:b0:a8:ec:62:54:0c:ee:b5:e5:bf:36:2b:96:93: ba:d1:5c:06:02:af:c2:66:af:cf:2d:2d:b1:ef:87:11:ef:54: ac:0a:2c:20:7a:7a:d7:ef:5f:5e:aa:f5:bf:d0:70:33:9c:c3: e0:81:96:22:a6:e1:aa:56:87:5f:a9:4e:7c:25:21:48:97:f3: 8e:2b:d8:5a:5d:2c:91:15:5d:1f:57:b2:9e:66:e9:39:6b:aa: 20:02:a6:01:37:f9:61:1b:c8:72:6d:a8:e3:01:06:93:4d:31: ba:cf:04:6b:db:0e:95:45:5e:55:fb:62:4b:2c:2d:23:9d:3a: 91:6a:84:ab:41:7a:6b:9c:01:bf:82:c7:9c:2f:c2:9d:74:47: 09:68:14:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZVCIR5e1y9AP3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjY2MjdmM2YtODY3NS00ZTRlLWEwOGQtMGQ0ODgwNjUwNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNUf0ecmiiJwl6cqB/PLzThvHgmD3jwLGaDN 2W0vAicZ6ZLq3gtknVRmTBYK/T4xxwUBpfviYI8wgS6g7SsDuaJaKL88rSm9Y10K zLklb0ovi+wUMSbFY/OSP26fCE/GqaS4yk/dXmwGkGaf5OYSx2PlNh5ZzUOlSMm2 dBAmQAJxrlrCFGxTSxUge15KnsutefPrpEsMellYDB140Oi39VTRDQWWwbvC7gFW 4DuwdLDB/wcpMbjxvIC1kGW9mzeo7SlltixQS6RyOl/BAGAXBxrC2GAhHgEAHH9Y zeQrkW+MMTmgFPC6C/TFgc0Vq9GNEFfVZcelofHIRF1yYUgcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN77XOCFVmmeypLGGeL3vuyv1etZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDU0ODQyMWMtZTQxYi0z Njc1LTlkODEtZGY0ZTg0MmIwYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx7pDxjaA3zvZ+fI2yoIa/e/JdbAFLFh1Jtlgy8zcsfQfTdtAtPOjfr 5ZO3xErxsUpIbK89cFBo8Rs36Cd78WuWh2etBkKxVG2fCwWPTDNGr+osB8g/ym4w YNEZOz0E3s7gsSB/XkfhVmSjyENH+rKwqOxiVAzuteW/NiuWk7rRXAYCr8Jmr88t LbHvhxHvVKwKLCB6etfvX16q9b/QcDOcw+CBliKm4apWh1+pTnwlIUiX844r2Fpd LJEVXR9Xsp5m6TlrqiACpgE3+WEbyHJtqOMBBpNNMbrPBGvbDpVFXlX7YkssLSOd OpFqhKtBemucAb+Cx5wvwp10RwloFEI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:04 2025 by rpki-client