$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa File: 14c71dae-6e19-3c93-9f11-94b8dad2435d.roa (raw, json) Hash identifier: B+gmco6SfmxGqFoq8FJ9BP4MU2tN1QZ0wT0+lLtzzE8= Subject key identifier: 84:2E:EF:92:62:F7:CA:2B:D8:37:31:33:E1:35:76:A8:8B:AB:64:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A3E644A971E9FCE0060 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:3e:64:4a:97:1e:9f:ce:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=030b4b2e-5674-4ab5-b20a-d45d04a5dc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:6b:76:b6:ad:02:c7:d8:d8:9e:ea:95:d9: 82:74:27:68:29:0e:db:70:4d:3b:26:8f:39:7b:7c: e5:f0:0d:1b:20:4c:07:04:ce:f4:2d:a2:cb:96:7c: a7:b3:79:42:d6:bc:03:c7:96:85:0b:7a:d7:7f:2b: f8:01:b3:2f:a3:21:36:4b:4c:c3:a8:5a:7a:b4:96: a7:5a:1e:b6:7e:b5:14:0e:b6:f5:81:54:ad:db:e8: 4f:ad:1d:64:a6:2d:0c:a7:6a:fa:3d:16:6b:fb:c5: 7d:ff:f7:a2:81:e4:14:c5:c3:18:3a:10:68:40:3c: 9d:aa:74:c7:c7:5a:5f:e8:69:22:89:7e:a8:fc:08: 01:39:d6:9d:31:b4:a8:d3:fe:a8:91:1e:b8:24:5e: 45:03:83:9d:0e:84:78:29:76:dd:a5:5a:21:77:82: 0e:8e:a5:de:1b:e3:bb:8a:cb:23:1e:fd:8c:89:f6: 53:05:12:ba:be:0d:d8:cc:d0:03:95:20:bc:a3:ee: 7a:51:35:09:39:af:40:4a:03:15:5d:9e:d5:f9:bd: 48:af:97:1a:ed:03:d6:50:06:96:3f:e8:7a:20:f2: ce:26:d8:a3:ea:21:ff:a3:b8:03:a4:c4:df:cb:8d: e1:cd:ce:27:26:67:e3:29:70:4c:95:22:0d:17:d0: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:EF:92:62:F7:CA:2B:D8:37:31:33:E1:35:76:A8:8B:AB:64:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b0:d2:44:a7:4c:c5:6c:1d:76:77:82:20:58:ff:12:c8:37: 3c:f4:33:69:7e:a6:48:32:dc:00:22:b1:3c:61:8f:ae:bb:ca: b3:20:58:aa:b5:ba:3e:5e:43:c0:34:c0:9d:1d:2c:9a:05:b8: 2d:e3:47:73:3a:27:60:43:e2:19:60:94:51:79:97:21:6a:6e: 1a:4a:b8:99:ae:6a:27:3e:4c:9f:12:c9:58:15:87:ea:ac:27: 9c:40:83:7f:6d:97:df:a8:35:ba:20:c2:63:d2:7e:34:81:5d: 92:be:29:aa:5e:82:b1:44:b1:c7:6d:f2:ca:5e:91:29:8f:1b: 05:e9:4d:30:45:d6:28:c8:fc:18:2f:94:47:64:88:97:61:1d: 42:7a:62:3c:6c:3c:39:54:f5:ec:48:9f:1f:a8:cb:b2:90:d4: 5c:dc:8e:34:e1:4d:8d:90:7d:d9:6c:f3:99:23:25:58:cb:08: b6:3c:de:28:ff:7d:d7:b5:77:21:1e:44:b4:3d:ca:91:0c:91: 45:af:74:2a:eb:54:e9:f0:12:c2:4c:99:7d:83:99:3e:f4:f8: 1e:54:7c:a0:dd:d2:2d:3c:59:e6:3a:d7:2b:08:e1:63:b6:5d: 5f:c7:cc:a5:5f:b4:dd:22:db:7d:df:0f:ce:bf:76:09:1b:73: 3a:b5:73:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWno+ZEqXHp/OAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDMwYjRiMmUtNTY3NC00YWI1LWIyMGEtZDQ1ZDA0YTVkYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+drdratAsfY2J7qldmCdCdoKQ7bcE07Jo85 e3zl8A0bIEwHBM70LaLLlnyns3lC1rwDx5aFC3rXfyv4AbMvoyE2S0zDqFp6tJan Wh62frUUDrb1gVSt2+hPrR1kpi0Mp2r6PRZr+8V9//eigeQUxcMYOhBoQDydqnTH x1pf6GkiiX6o/AgBOdadMbSo0/6okR64JF5FA4OdDoR4KXbdpVohd4IOjqXeG+O7 issjHv2MifZTBRK6vg3YzNADlSC8o+56UTUJOa9ASgMVXZ7V+b1Ir5ca7QPWUAaW P+h6IPLOJtij6iH/o7gDpMTfy43hzc4nJmfjKXBMlSINF9CuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQu75Ji98or2DcxM+E1dqiLq2RKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRjNzFkYWUtNmUxOS0z YzkzLTlmMTEtOTRiOGRhZDI0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKw0kSnTMVsHXZ3giBY/xLINzz0M2l+pkgy3AAisTxhj667yrMgWKq1 uj5eQ8A0wJ0dLJoFuC3jR3M6J2BD4hlglFF5lyFqbhpKuJmuaic+TJ8SyVgVh+qs J5xAg39tl9+oNbogwmPSfjSBXZK+KapegrFEscdt8spekSmPGwXpTTBF1ijI/Bgv lEdkiJdhHUJ6YjxsPDlU9exInx+oy7KQ1FzcjjThTY2Qfdls85kjJVjLCLY83ij/ fde1dyEeRLQ9ypEMkUWvdCrrVOnwEsJMmX2DmT70+B5UfKDd0i08WeY61ysI4WO2 XV/HzKVftN0i233fD86/dgkbczq1c9Q= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:36 2025 by rpki-client