$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa File: 27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa (raw, json) Hash identifier: VMZF/RwElqfKj2oMdRQp9iqrS4OX5CH6w1reE9jI//I= Subject key identifier: 75:87:98:82:FB:D2:4F:84:99:A5:A8:4A:54:AF:91:C8:21:1C:43:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF341C391AEDA2D08B3280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:1c:39:1a:ed:a2:d0:8b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=3510f5f9-dd0f-4e73-9aca-1da0ec3ccfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:24:1f:a7:44:22:7b:55:db:c8:ab:ea:94: cf:cf:45:de:02:24:45:15:ad:29:71:5f:8f:a9:be: 1a:13:c2:7b:1b:66:37:28:49:cd:aa:9c:a8:fe:e7: b0:ad:08:73:29:ce:9e:65:a4:9e:40:33:d6:74:a8: 47:bb:bf:e6:5d:84:5c:9d:30:7e:0b:21:87:ec:b3: a9:6b:f9:af:f9:2b:18:82:09:fe:5a:ad:30:22:f5: 74:95:58:96:c6:d8:e3:6d:ec:4a:f2:f6:0d:90:fe: c6:6e:9b:c2:96:00:86:a4:f6:48:50:91:a2:00:f0: b0:30:58:ab:ec:e6:8c:13:d0:d0:f6:cf:a8:a9:fe: 3d:a5:1c:c9:f3:e7:b6:0a:77:ee:9c:ae:02:0a:81: 50:cc:4f:27:97:60:a1:35:ac:7b:8c:e7:73:a4:c5: 81:90:f2:7f:a5:7c:80:60:d8:49:48:82:0a:09:11: 7a:83:c5:3d:1d:47:69:1f:2e:dc:59:b5:b4:be:de: e8:ae:a1:76:88:1b:ca:d0:db:68:eb:4e:7b:db:e3: a5:e6:a5:c9:0a:dc:a7:40:23:c3:97:54:f4:d6:3a: 0b:b2:16:53:25:1e:80:92:ea:07:65:fe:08:80:77: 79:6c:e6:16:1b:b5:68:99:a2:04:aa:f1:44:14:e5: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:98:82:FB:D2:4F:84:99:A5:A8:4A:54:AF:91:C8:21:1C:43:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:be:65:30:cd:05:af:1c:80:75:bd:5f:31:f5:fb:b3:85:ef: 24:93:07:02:c9:6e:03:03:94:69:e2:04:f1:17:ee:eb:fd:19: 5c:b0:a3:d4:d4:73:d6:dc:44:a4:d1:3f:c0:ef:1b:99:3e:72: b7:16:36:1a:f0:78:77:2e:b8:e2:0f:eb:35:fc:c6:03:8a:75: e2:96:49:69:b1:f3:6b:7c:14:14:14:7e:aa:c8:63:e6:0b:dd: 35:51:48:f3:82:ec:96:b8:1c:b3:8c:25:d3:14:4d:6f:20:10: bc:24:fc:66:be:be:7e:29:ca:84:24:63:95:08:a6:56:2e:a8: 41:79:43:e6:29:97:93:3a:be:e7:18:f1:0b:f7:f7:c2:4b:b4: 79:02:20:48:9c:85:4e:48:d7:cc:f7:c8:4a:ac:d9:e8:85:c4: 26:4a:63:58:87:33:6f:b3:92:9b:c9:81:65:32:ca:70:ef:2d: 17:09:6d:c5:45:94:49:b8:12:bb:63:6e:19:d7:b5:b5:59:47: 80:ee:ea:f8:fc:b1:1e:1d:ea:1a:5a:19:fb:d4:02:76:b4:e5: d6:f3:7c:bc:00:e8:86:ad:bb:8f:d1:b4:0b:f1:c5:40:54:03: b5:ad:6b:1f:e2:79:23:41:c4:3b:ad:ef:94:a3:59:55:8a:f2: 15:43:0b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzQcORrtotCLMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzUxMGY1ZjktZGQwZi00ZTczLTlhY2EtMWRhMGVjM2NjZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArskkH6dEIntV28ir6pTPz0XeAiRFFa0pcV+P qb4aE8J7G2Y3KEnNqpyo/uewrQhzKc6eZaSeQDPWdKhHu7/mXYRcnTB+CyGH7LOp a/mv+SsYggn+Wq0wIvV0lViWxtjjbexK8vYNkP7GbpvClgCGpPZIUJGiAPCwMFir 7OaME9DQ9s+oqf49pRzJ8+e2CnfunK4CCoFQzE8nl2ChNax7jOdzpMWBkPJ/pXyA YNhJSIIKCRF6g8U9HUdpHy7cWbW0vt7orqF2iBvK0Nto60572+Ol5qXJCtynQCPD l1T01joLshZTJR6AkuoHZf4IgHd5bOYWG7VomaIEqvFEFOXMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWHmIL70k+EmaWoSlSvkcghHENcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjdmYWVmMWQtMTMwNC0z Y2IwLWJiZTMtY2U2YmM5ZWNiZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe+ZTDNBa8cgHW9XzH1+7OF7ySTBwLJbgMDlGniBPEX7uv9GVywo9TU c9bcRKTRP8DvG5k+crcWNhrweHcuuOIP6zX8xgOKdeKWSWmx82t8FBQUfqrIY+YL 3TVRSPOC7Ja4HLOMJdMUTW8gELwk/Ga+vn4pyoQkY5UIplYuqEF5Q+Ypl5M6vucY 8Qv398JLtHkCIEichU5I18z3yEqs2eiFxCZKY1iHM2+zkpvJgWUyynDvLRcJbcVF lEm4ErtjbhnXtbVZR4Du6vj8sR4d6hpaGfvUAna05dbzfLwA6Iatu4/RtAvxxUBU A7Wtax/ieSNBxDut75SjWVWK8hVDC7A= -----END CERTIFICATE-----Generated at Sun Apr 27 05:36:48 2025 by rpki-client