$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa File: 28d91d14-0e2e-3866-8eda-06232954e8f9.roa (raw, json) Hash identifier: jBqtLw3Xeg70M8yiM+nIMKcoFLru9g6xm+J0979l0Qc= Subject key identifier: AA:5C:A9:1B:C8:4B:A0:20:49:70:D1:E3:94:59:08:7E:55:07:4E:46 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01F26C4CC0D1BB4235C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1f:26:c4:cc:0d:1b:b4:23:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=25bc02b4-9a0e-4aac-b3b1-26c4be06b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:bf:d2:31:83:5c:c1:90:9c:d2:02:36:92: cf:b5:ef:98:cd:fa:1a:42:2e:01:8a:62:c2:4f:09: fb:db:82:13:f4:cc:4f:ea:4c:21:57:5b:6a:2f:4e: d5:3a:7e:3a:57:d9:5a:01:4a:c8:15:b0:fc:bd:88: 31:a1:65:13:8b:7b:11:fe:62:9e:e3:68:aa:02:7d: 58:54:2c:fd:75:11:4f:b9:83:9e:9e:92:88:72:47: 14:08:41:b7:3f:78:ce:91:9b:db:0e:7d:ff:ed:8b: e3:27:8c:0a:0e:9d:ec:aa:b9:0e:14:ca:9d:1a:2f: 2d:14:b3:02:ae:35:33:2d:44:b7:4e:50:77:7e:c0: 6b:21:11:e4:27:0b:d1:71:c2:84:68:f9:b1:52:94: 49:ed:8c:7a:78:1a:da:9f:78:1e:8e:e9:b6:d5:a5: 71:d8:5d:97:82:3e:90:44:67:3f:1f:79:0a:e7:d4: b9:40:d8:63:cf:17:39:da:21:de:ab:9c:57:7f:bd: a5:5c:0b:35:be:95:29:84:15:6f:9d:0c:42:0b:fe: dc:39:28:e7:b3:f3:3b:59:f7:fb:0c:63:63:7a:96: d7:f7:09:b7:5c:69:d2:ec:70:4d:28:e9:b4:13:73: a7:cc:3d:af:79:da:ed:0d:52:71:42:4a:68:13:9e: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:A9:1B:C8:4B:A0:20:49:70:D1:E3:94:59:08:7E:55:07:4E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f5:50:69:f2:21:2b:a9:e3:a8:03:48:4f:34:b2:cb:c8:a7: ab:b4:56:34:a5:9f:af:af:8a:1c:63:cf:23:77:6b:26:d6:17: 33:0e:da:c6:c4:c7:22:d4:3e:1b:e6:84:38:f6:a5:f4:70:87: 51:6f:03:f1:73:5e:4a:34:68:fe:25:08:86:81:04:71:be:8e: 25:9a:5e:04:b2:80:92:cd:47:be:b1:d7:8a:ad:14:0f:95:73: 24:da:1d:0e:55:c6:19:ad:6b:36:d4:af:a4:c2:79:1a:33:6a: 2f:bc:af:1b:5d:2b:68:b3:7f:c6:b1:50:a9:58:39:cc:13:a4: 24:8a:3e:55:67:5f:f3:cc:cf:0c:e1:79:44:2b:20:ec:4b:99: f7:fd:17:46:83:88:88:76:2b:0c:e9:2d:75:6e:75:05:cc:76: ae:75:b0:c1:2c:7a:8f:59:10:36:e0:0a:0c:48:2d:83:87:07: 16:de:03:6b:5d:5f:18:19:8d:be:80:6a:16:51:9f:a0:7e:8d: 76:ef:af:19:bd:82:9c:69:4d:63:15:ea:74:2c:8f:98:4d:8e: 6b:d2:11:b9:cf:1f:17:24:5d:20:56:88:af:a0:b7:5d:be:29: 80:05:4e:95:6e:3b:92:7f:4a:db:2c:37:a0:c0:3a:65:5a:60: 50:c2:6e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB8mxMwNG7QjXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MjViYzAyYjQtOWEwZS00YWFjLWIzYjEtMjZjNGJlMDZiNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzO/0jGDXMGQnNICNpLPte+YzfoaQi4BimLC Twn724IT9MxP6kwhV1tqL07VOn46V9laAUrIFbD8vYgxoWUTi3sR/mKe42iqAn1Y VCz9dRFPuYOenpKIckcUCEG3P3jOkZvbDn3/7YvjJ4wKDp3sqrkOFMqdGi8tFLMC rjUzLUS3TlB3fsBrIRHkJwvRccKEaPmxUpRJ7Yx6eBran3gejum21aVx2F2Xgj6Q RGc/H3kK59S5QNhjzxc52iHeq5xXf72lXAs1vpUphBVvnQxCC/7cOSjns/M7Wff7 DGNjepbX9wm3XGnS7HBNKOm0E3OnzD2vedrtDVJxQkpoE54t1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpcqRvIS6AgSXDR45RZCH5VB05GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhkOTFkMTQtMGUyZS0z ODY2LThlZGEtMDYyMzI5NTRlOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf1UGnyISup46gDSE80ssvIp6u0VjSln6+vihxjzyN3aybWFzMO2sbE xyLUPhvmhDj2pfRwh1FvA/FzXko0aP4lCIaBBHG+jiWaXgSygJLNR76x14qtFA+V cyTaHQ5VxhmtazbUr6TCeRozai+8rxtdK2izf8axUKlYOcwTpCSKPlVnX/PMzwzh eUQrIOxLmff9F0aDiIh2KwzpLXVudQXMdq51sMEseo9ZEDbgCgxILYOHBxbeA2td XxgZjb6AahZRn6B+jXbvrxm9gpxpTWMV6nQsj5hNjmvSEbnPHxckXSBWiK+gt12+ KYAFTpVuO5J/StssN6DAOmVaYFDCbj8= -----END CERTIFICATE-----Generated at Mon Jun 16 12:02:46 2025 by rpki-client