$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa File: 077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa (raw, json) Hash identifier: IZ9c6Nl4sHVO3M8CnmZd+qGp+DUjn2ad3Oxj6JbYHxg= Subject key identifier: B1:FF:60:B0:37:38:CC:51:81:9C:3E:D4:E0:13:72:DB:DC:A7:32:FD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D1655029FC69D3E59911EC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.33.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:50:29:fc:69:d3:e5:99:11:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=18c6b063-977e-4d9e-862a-1822560f6901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:90:2c:1d:ca:9d:b9:92:33:b1:43:8e:69: d9:ff:bc:c0:f9:e2:71:19:cd:85:9b:9d:3b:8d:04: ad:f8:48:85:98:a5:ca:57:d4:89:a2:6c:99:87:11: 78:fd:12:38:50:f8:11:9e:06:bb:f3:4b:9f:dd:ce: 25:d0:38:24:19:c7:d6:08:68:52:7a:03:59:46:1a: f1:09:ee:cc:ee:d2:2f:98:80:cd:47:12:43:b6:40: 8f:92:4a:4d:67:cc:c6:5a:df:ed:a9:f6:23:ff:e7: d8:b1:52:88:22:72:9b:b2:23:8e:9d:8a:cc:3f:9a: 66:d4:2a:8c:1e:75:ac:4b:17:36:c1:d4:36:d5:ea: b4:54:16:0e:2d:39:3c:bb:1a:48:e9:38:48:6b:55: c4:63:d5:9b:a6:10:6a:0c:a4:75:dd:82:36:0b:50: e8:c2:fc:83:f3:60:c5:72:c0:99:99:d4:38:99:2a: de:c5:98:a7:5f:b4:ed:bb:22:32:44:11:04:98:37: fc:32:66:61:72:3e:59:67:03:af:12:14:27:33:ec: 9a:6a:0e:09:0a:b7:cc:57:13:5b:da:ab:86:d2:8d: f3:ba:19:76:a6:ba:a9:a5:f2:4c:44:4a:91:4b:db: 2f:b1:80:94:b0:51:61:2f:5c:4f:91:08:5b:73:e9: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:60:B0:37:38:CC:51:81:9C:3E:D4:E0:13:72:DB:DC:A7:32:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:3b:dd:b7:90:b8:79:23:72:ea:56:17:55:b1:cf:e9:6c:2c: d8:2d:56:eb:ce:02:1a:97:ad:d1:66:e8:6b:0d:1a:69:66:ba: a5:e2:ca:fc:b6:68:bb:38:ef:13:cb:a2:54:17:fb:85:60:6b: 6f:7c:02:e0:2e:21:80:e4:af:cc:66:11:c1:ac:a9:68:c3:3f: 46:53:97:eb:28:90:1d:91:87:e0:e6:71:d3:be:8a:19:d7:c9: e6:e7:80:55:ff:c6:d4:8e:05:10:4d:fd:92:04:1a:e2:06:50: 90:96:41:31:5e:71:00:37:af:81:66:06:46:e5:7a:f8:f0:c5: 4c:11:21:bf:48:c1:a7:3d:0b:a3:be:6d:ba:54:14:96:ea:0c: 80:54:a5:bb:47:f1:d3:e5:27:b2:bb:07:d7:31:71:cd:4c:d1: a7:52:8b:d9:3f:c2:21:2d:24:57:44:ea:c1:25:0d:4a:fa:21: 98:fa:ba:93:ca:47:e0:f5:d8:c0:2a:0d:93:42:34:80:7b:b5: 10:32:5b:f9:1f:25:99:3d:9a:da:c3:9e:b4:36:e4:7c:ed:9e: 28:0c:71:76:7d:f1:14:f4:84:d0:c8:52:77:82:f1:9e:c0:ba: 7b:2d:85:0a:2d:b3:ba:31:df:7f:6e:ae:a5:57:ea:88:b5:38: 5d:33:65:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZVAp/GnT5ZkR7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MThjNmIwNjMtOTc3ZS00ZDllLTg2MmEtMTgyMjU2MGY2OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEKQLB3KnbmSM7FDjmnZ/7zA+eJxGc2Fm507 jQSt+EiFmKXKV9SJomyZhxF4/RI4UPgRnga780uf3c4l0DgkGcfWCGhSegNZRhrx Ce7M7tIvmIDNRxJDtkCPkkpNZ8zGWt/tqfYj/+fYsVKIInKbsiOOnYrMP5pm1CqM HnWsSxc2wdQ21eq0VBYOLTk8uxpI6ThIa1XEY9WbphBqDKR13YI2C1DowvyD82DF csCZmdQ4mSrexZinX7TtuyIyRBEEmDf8MmZhcj5ZZwOvEhQnM+yaag4JCrfMVxNb 2quG0o3zuhl2prqppfJMREqRS9svsYCUsFFhL1xPkQhbc+nhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH/YLA3OMxRgZw+1OATctvcpzL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDc3NTUyZjgtNGMyYy0z Mzk0LWJhYjctZDMyYjc3YjZiMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs73beQuHkjcupWF1Wxz+lsLNgtVuvOAhqXrdFm6GsNGmlmuqXiyvy2 aLs47xPLolQX+4Vga298AuAuIYDkr8xmEcGsqWjDP0ZTl+sokB2Rh+DmcdO+ihnX yebngFX/xtSOBRBN/ZIEGuIGUJCWQTFecQA3r4FmBkblevjwxUwRIb9Iwac9C6O+ bbpUFJbqDIBUpbtH8dPlJ7K7B9cxcc1M0adSi9k/wiEtJFdE6sElDUr6IZj6upPK R+D12MAqDZNCNIB7tRAyW/kfJZk9mtrDnrQ25HztnigMcXZ98RT0hNDIUneC8Z7A unsthQots7ox339urqVX6oi1OF0zZWY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:33:19 2025 by rpki-client