$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa File: 23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa (raw, json) Hash identifier: YsNQORj7BGFu7LjgSqgBmN9AY5VwsUYvGJwUMaAdrWQ= Subject key identifier: 96:8D:7A:EA:97:CE:0C:19:6D:44:40:CF:AB:21:85:23:C7:BF:1F:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA93A5E28212C14F049480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:93:a5:e2:82:12:c1:4f:04:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=3dc54e20-dffe-4ca0-889c-3d7eb6482cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:fd:5e:9e:12:b2:67:f9:4c:1a:f2:6d:61: 9b:32:22:08:c9:0c:69:1b:86:f9:39:0f:e8:22:ff: 4d:ea:2c:24:75:c4:dc:98:b6:6b:e3:86:a7:ca:71: a6:d3:75:e8:81:d8:a8:aa:88:c1:77:f1:c5:aa:b0: 32:7d:10:60:05:ba:4b:ba:3e:75:01:b1:30:a4:a8: 09:09:ba:74:ea:0b:8e:e3:dd:f2:89:c4:dc:9c:88: 0b:ae:67:70:18:96:c2:20:0d:1b:b8:e0:d0:8c:4f: b4:02:30:2b:4a:2b:48:2f:0c:01:8d:a8:a3:04:4c: 43:bb:2e:10:dd:f4:cc:3a:94:e6:e6:41:5e:47:77: 3c:bd:04:f4:64:28:19:11:1d:71:cb:f8:fd:93:88: 55:21:40:d0:ce:5b:ce:ee:e8:46:30:7f:c6:d9:1d: a8:03:cc:16:e2:85:bd:b4:b8:ba:b6:0e:4f:81:91: 58:be:1d:0d:e0:46:d1:82:70:65:65:61:b7:4a:0a: ec:1d:ed:cf:b6:b9:63:b5:76:6c:9c:8f:53:ca:9e: 71:72:35:45:4e:0f:f7:67:34:7c:d4:2f:9f:10:2d: 43:68:1c:27:d2:d2:96:47:d3:c9:09:88:8b:4f:d6: 14:c5:2d:5d:3b:59:8b:74:14:dc:07:2f:2a:d5:64: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:7A:EA:97:CE:0C:19:6D:44:40:CF:AB:21:85:23:C7:BF:1F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c1:b6:4e:d8:70:29:25:99:5f:85:31:b6:60:5e:0d:52:b5: 61:2e:da:38:bc:03:72:13:2f:a7:c8:58:17:0c:08:d9:9d:e5: 81:0d:f1:0d:93:c2:19:44:fc:3f:bc:ba:ee:46:79:a7:0e:09: 59:ac:9e:4c:30:d4:e4:5a:eb:d6:92:60:43:84:18:5f:ed:91: 41:d7:46:90:d8:9b:7d:b3:f4:95:58:f7:1f:77:0b:2e:62:d8: 84:ee:de:62:b3:f5:d9:c0:c1:13:8c:6c:34:bd:d1:18:69:73: 28:0c:17:3b:35:39:0d:69:e7:87:e0:81:15:cf:d1:96:62:d6: d4:a0:57:0f:3d:fb:de:50:1d:77:05:95:7d:d5:28:a6:96:f3: 0f:55:aa:e8:c3:49:e6:35:64:19:07:c4:33:73:d3:d3:28:e0: f9:2f:94:16:56:14:2a:71:57:18:78:20:cc:3b:db:ec:38:da: 2b:6c:99:72:78:40:6e:02:d5:94:98:8c:38:44:82:6b:bc:b0: 22:0c:f0:f9:b3:11:4b:ff:fa:32:cd:ab:25:4e:c2:32:1b:1c: e2:0d:43:21:26:f2:7a:02:85:02:69:e5:78:52:61:72:fd:df: 7d:c9:42:d1:a5:86:e3:6f:7b:c9:90:7e:7e:a1:97:21:5f:e4: 9e:b4:00:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypOl4oISwU8ElIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk M2RjNTRlMjAtZGZmZS00Y2EwLTg4OWMtM2Q3ZWI2NDgyY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRr9Xp4Ssmf5TBrybWGbMiIIyQxpG4b5OQ/o Iv9N6iwkdcTcmLZr44anynGm03XogdioqojBd/HFqrAyfRBgBbpLuj51AbEwpKgJ Cbp06guO493yicTcnIgLrmdwGJbCIA0buODQjE+0AjArSitILwwBjaijBExDuy4Q 3fTMOpTm5kFeR3c8vQT0ZCgZER1xy/j9k4hVIUDQzlvO7uhGMH/G2R2oA8wW4oW9 tLi6tg5PgZFYvh0N4EbRgnBlZWG3SgrsHe3PtrljtXZsnI9Typ5xcjVFTg/3ZzR8 1C+fEC1DaBwn0tKWR9PJCYiLT9YUxS1dO1mLdBTcBy8q1WTtCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaNeuqXzgwZbURAz6shhSPHvx+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjNiNzUyNjctZTA2MC0z ZmYyLWFiNjEtM2E2YjVhMTNlZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrBtk7YcCklmV+FMbZgXg1StWEu2ji8A3ITL6fIWBcMCNmd5YEN8Q2T whlE/D+8uu5GeacOCVmsnkww1ORa69aSYEOEGF/tkUHXRpDYm32z9JVY9x93Cy5i 2ITu3mKz9dnAwROMbDS90RhpcygMFzs1OQ1p54fggRXP0ZZi1tSgVw89+95QHXcF lX3VKKaW8w9VqujDSeY1ZBkHxDNz09Mo4PkvlBZWFCpxVxh4IMw72+w42itsmXJ4 QG4C1ZSYjDhEgmu8sCIM8PmzEUv/+jLNqyVOwjIbHOINQyEm8noChQJp5XhSYXL9 333JQtGlhuNve8mQfn6hlyFf5J60ACo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:46:37 2025 by rpki-client