$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa File: 37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa (raw, json) Hash identifier: 581CoEz8zZvr0Lj3tnOhrmWC9dYHaYI1pk5vcyuGQJ4= Subject key identifier: 5E:72:2D:76:44:EB:92:5C:96:B3:CE:F2:8B:59:83:5C:23:12:16:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA75348A53CD4097F7080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:53:48:a5:3c:d4:09:7f:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e1e8ff0e-6eb4-4784-91b3-53ffcd1e42db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:ed:78:bf:03:30:8b:eb:58:2b:5b:dc:ff: a7:a8:20:3a:5d:c8:f5:73:94:48:38:d9:65:07:98: 62:96:1e:4c:fd:ac:bb:f3:48:f1:e8:c4:b8:fc:6b: f6:cc:fa:be:e7:ae:51:4c:71:bb:ac:e6:07:f3:df: 53:cb:0a:98:22:54:e6:b3:58:9a:ec:dc:74:50:f3: 31:86:75:dd:fc:32:6c:35:1c:10:47:7b:0c:17:40: 6d:41:be:b6:a6:49:e4:ec:a0:f3:60:0f:13:ee:86: b5:49:0e:2b:7a:4d:4d:ef:74:8f:58:fc:3a:1a:5b: 1d:05:fd:16:0f:b1:a8:25:c0:b1:be:8c:f7:ac:ff: c0:db:59:c0:58:99:d1:e1:9b:4e:d1:a4:c5:ad:42: 32:bc:34:27:cf:40:b6:0f:fa:32:2e:b2:3c:5b:57: 9c:88:33:ce:13:47:4a:bb:b2:db:79:db:10:7d:2a: 27:62:d1:d4:4a:36:da:7a:91:5b:b2:57:8a:24:4f: 33:d9:27:22:f9:69:f1:da:5b:8d:0f:33:bf:1f:96: d3:80:f1:73:f9:88:8b:99:d2:98:f7:b5:51:af:87: 2a:9d:8b:b1:e4:6a:28:e2:02:b8:ab:de:28:8d:f8: 66:f5:41:53:94:c8:a9:9b:cb:5b:18:a3:95:34:67: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:2D:76:44:EB:92:5C:96:B3:CE:F2:8B:59:83:5C:23:12:16:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:44:17:48:bb:11:fa:58:c7:d8:53:50:ab:3d:2e:f2:c0:64: b6:02:bb:e8:0b:bc:8c:1d:8e:49:58:0f:9e:48:c4:22:21:c7: c8:35:87:3b:69:c5:ad:5e:bc:8b:f2:c2:8e:42:07:31:4a:85: ed:71:08:fa:d4:46:d3:cf:78:34:2d:66:98:28:31:b4:6b:62: 25:6f:1f:91:8d:69:c7:a3:15:44:d1:d1:32:7e:4b:c3:f3:18: 93:fb:08:65:53:ec:39:33:df:34:f2:b8:51:e2:e8:cc:0a:80: 35:ea:94:c3:af:5e:41:5f:b0:23:4a:96:8d:6e:6b:a6:e5:08: 1b:e9:64:37:5c:a3:06:90:b3:1f:06:07:83:83:01:26:3e:f6: 56:ca:44:50:45:66:24:0e:c9:64:2d:94:65:42:de:64:6e:71: cc:d2:f1:8e:2d:35:d0:d5:a2:fa:f8:38:62:5a:25:3d:3f:74: bc:2c:ec:7c:09:e7:a8:23:58:9b:34:ce:65:cc:c0:54:1a:c0: 9b:c8:9a:41:76:c3:5e:30:75:9a:25:21:6c:bd:67:c8:4a:cd: d5:91:5c:8a:37:64:d3:c9:d3:14:77:c4:4b:b0:4c:cc:db:83: 91:8f:7b:d7:08:6d:f9:30:f8:8a:33:4d:65:74:6f:b8:62:f1: 72:e9:6c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6dTSKU81Al/cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTFlOGZmMGUtNmViNC00Nzg0LTkxYjMtNTNmZmNkMWU0MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF3teL8DMIvrWCtb3P+nqCA6Xcj1c5RIONll B5hilh5M/ay780jx6MS4/Gv2zPq+565RTHG7rOYH899TywqYIlTms1ia7Nx0UPMx hnXd/DJsNRwQR3sMF0BtQb62pknk7KDzYA8T7oa1SQ4rek1N73SPWPw6GlsdBf0W D7GoJcCxvoz3rP/A21nAWJnR4ZtO0aTFrUIyvDQnz0C2D/oyLrI8W1eciDPOE0dK u7LbedsQfSonYtHUSjbaepFbsleKJE8z2Sci+Wnx2luNDzO/H5bTgPFz+YiLmdKY 97VRr4cqnYux5Goo4gK4q94ojfhm9UFTlMipm8tbGKOVNGe+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5yLXZE65JclrPO8otZg1wjEhZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzc1ODBjMGMtMmE1NS0z M2IzLTgzNzAtZjFkZTBkZjdhM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNEF0i7EfpYx9hTUKs9LvLAZLYCu+gLvIwdjklYD55IxCIhx8g1hztp xa1evIvywo5CBzFKhe1xCPrURtPPeDQtZpgoMbRrYiVvH5GNacejFUTR0TJ+S8Pz GJP7CGVT7Dkz3zTyuFHi6MwKgDXqlMOvXkFfsCNKlo1ua6blCBvpZDdcowaQsx8G B4ODASY+9lbKRFBFZiQOyWQtlGVC3mRucczS8Y4tNdDVovr4OGJaJT0/dLws7HwJ 56gjWJs0zmXMwFQawJvImkF2w14wdZolIWy9Z8hKzdWRXIo3ZNPJ0xR3xEuwTMzb g5GPe9cIbfkw+IozTWV0b7hi8XLpbNs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:01 2025 by rpki-client