$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: DrjSZw4fJLhVaQzFkjKHissRbpjI8UsDwl+H9RUophE= Subject key identifier: EC:3B:C5:0C:EE:B5:82:A1:D9:9F:34:1F:AF:30:DC:53:C5:27:32:CA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858499294A99616B4B52DB9DBCD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a9:96:16:b4:b5:2d:b9:db:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=93123695-41f8-44ae-9f5d-a76d2a46b93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:18:d2:ac:62:39:ae:c3:65:8c:35:63:2a: 36:9f:cf:50:19:4e:09:28:e3:6f:98:c6:a5:9c:1b: 81:47:84:23:85:51:2c:c6:d9:63:6d:38:d5:b7:cf: de:4e:73:6b:f5:ce:04:f0:e1:6f:ad:4f:cd:f3:c3: 85:e9:05:c4:f8:ff:12:21:d8:89:35:83:0b:af:9e: 19:17:bc:3c:13:4b:a8:b2:2e:18:79:7c:e4:20:ad: 18:61:51:7d:b4:de:3b:75:19:75:98:0e:6e:26:c6: 95:ba:6b:ae:59:04:57:ba:c4:2a:c4:e9:bd:b3:e0: 33:ac:e1:94:6e:bc:8f:ae:02:e0:87:32:c8:dd:f3: d0:70:7d:56:45:1d:88:39:99:cf:e4:ad:5f:65:04: a7:d7:9c:4d:f8:9a:6b:21:28:38:38:95:6f:2a:f7: fe:74:8f:8f:5d:ae:e9:01:07:b0:71:80:54:0a:13: 76:c5:ad:a5:65:cd:8d:cf:53:64:a4:71:67:37:46: 56:dd:eb:48:f0:9b:f4:6b:26:9c:51:7b:f1:78:f7: bb:0f:48:10:8b:86:4e:34:72:6d:20:a6:a3:61:02: 18:66:02:e0:13:f2:6e:f8:db:16:1b:d4:81:bb:2b: 07:a6:50:0f:de:37:39:f9:da:3b:8c:c3:6d:1b:bb: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3B:C5:0C:EE:B5:82:A1:D9:9F:34:1F:AF:30:DC:53:C5:27:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:af:0e:ab:16:38:75:db:b5:01:67:aa:e4:c1:7e:2a:92:43: 0c:1e:2c:b0:53:bd:ea:0e:77:4a:67:9b:07:5a:03:60:9e:60: ba:e4:e4:74:f7:9c:09:8b:07:2a:cf:8d:c1:09:03:2c:a4:62: fb:de:c3:61:67:39:ce:dc:b7:7d:5e:0b:40:5b:51:c4:d5:25: 43:ed:99:06:17:3d:77:9e:9b:95:83:a1:58:a6:b1:02:e3:ed: f9:ae:55:fa:3f:24:6a:32:7a:2e:3a:6d:19:41:b5:e6:7b:45: 3c:2a:a7:13:9a:b7:91:d3:36:76:fa:45:32:b5:42:b6:a2:9b: fc:9e:cd:af:d6:d1:0c:f9:50:3a:34:8d:c2:b5:1c:21:03:a6: 7b:00:ae:37:3d:ba:aa:5a:ab:68:09:11:39:41:e7:e8:40:b3: c5:12:01:53:b4:8b:91:92:19:13:b7:49:5b:a7:04:a6:bf:46: ff:74:e1:4d:b8:c7:10:71:6b:f6:cc:4b:95:54:f4:ce:29:9a: 1b:62:02:b3:33:15:51:42:0d:ae:25:28:53:f6:4f:1c:20:0a: 9f:34:70:bd:d8:e9:b7:89:00:71:c6:eb:e2:c4:72:65:47:0b: 42:f8:59:69:85:fc:57:87:02:0d:b9:c2:78:84:4b:9d:0f:80: 28:5d:a5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKmWFrS1LbnbzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OTMxMjM2OTUtNDFmOC00NGFlLTlmNWQtYTc2ZDJhNDZiOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHoY0qxiOa7DZYw1Yyo2n89QGU4JKONvmMal nBuBR4QjhVEsxtljbTjVt8/eTnNr9c4E8OFvrU/N88OF6QXE+P8SIdiJNYMLr54Z F7w8E0uosi4YeXzkIK0YYVF9tN47dRl1mA5uJsaVumuuWQRXusQqxOm9s+AzrOGU bryPrgLghzLI3fPQcH1WRR2IOZnP5K1fZQSn15xN+JprISg4OJVvKvf+dI+PXa7p AQewcYBUChN2xa2lZc2Nz1NkpHFnN0ZW3etI8Jv0ayacUXvxePe7D0gQi4ZONHJt IKajYQIYZgLgE/Ju+NsWG9SBuysHplAP3jc5+do7jMNtG7vi/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw7xQzutYKh2Z80H68w3FPFJzLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+vDqsWOHXbtQFnquTBfiqSQwweLLBTveoOd0pnmwdaA2CeYLrk5HT3 nAmLByrPjcEJAyykYvvew2FnOc7ct31eC0BbUcTVJUPtmQYXPXeem5WDoVimsQLj 7fmuVfo/JGoyei46bRlBteZ7RTwqpxOat5HTNnb6RTK1Qraim/yeza/W0Qz5UDo0 jcK1HCEDpnsArjc9uqpaq2gJETlB5+hAs8USAVO0i5GSGRO3SVunBKa/Rv904U24 xxBxa/bMS5VU9M4pmhtiArMzFVFCDa4lKFP2TxwgCp80cL3Y6beJAHHG6+LEcmVH C0L4WWmF/FeHAg25wniES50PgChdpdQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:50 2025 by rpki-client