$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa File: 43d09c92-e733-3dac-88d4-a905a60d1295.roa (raw, json) Hash identifier: pXcFrlX2r7fnaSZv4ykIeOo8gQE2UOv9c8wB4RVJMl0= Subject key identifier: 41:5F:5C:9F:32:8D:88:BB:D1:82:F3:79:FF:69:97:E7:4A:08:EA:28 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA940D65F8102CF83EC020 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:94:0d:65:f8:10:2c:f8:3e:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=5d7b9970-afdf-47ff-afeb-606636120fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:16:ff:7a:1d:bd:f6:9c:27:8d:dc:1e:1b: 0d:b6:dc:9b:c1:a3:4d:a7:3b:b6:29:d2:45:01:92: d3:5c:63:e1:1f:30:02:1e:7b:a5:c5:44:de:fa:12: 42:4f:cf:ff:57:fa:31:48:40:ae:db:52:3d:55:66: 4b:09:bc:8f:47:09:23:ed:4e:d5:2e:9b:93:ba:cb: 87:67:6a:39:75:d5:e6:83:5c:8e:8d:be:67:e7:d4: 95:52:86:a4:b4:3b:f0:0f:1a:1f:14:6f:e1:10:42: cb:19:56:bb:86:96:eb:14:6c:b7:14:e3:8c:7d:f9: a5:ce:9b:1c:66:0b:d2:d7:a2:92:bf:3a:1c:0c:f4: f6:67:9b:4a:56:4a:e0:c7:8c:95:ed:b7:f0:a1:64: ec:99:77:c1:89:e5:4c:5b:93:c8:64:23:f8:7c:4d: a8:48:c4:79:b1:c7:ed:76:49:f8:ea:2a:5b:dd:61: 92:3e:20:4c:de:b3:ed:64:03:0a:d3:ce:92:8f:f4: 8f:43:e1:a7:53:cf:c5:ae:7e:53:92:32:bb:b6:b4: 69:cd:f5:12:04:ed:06:00:7b:8a:77:22:86:e5:09: 05:a7:6e:06:95:aa:a5:7d:b3:0e:73:81:a0:f6:5c: 41:e6:47:48:62:1e:b1:d7:1f:2c:53:ac:01:84:ba: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5F:5C:9F:32:8D:88:BB:D1:82:F3:79:FF:69:97:E7:4A:08:EA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a5:82:00:c3:54:d3:79:27:7d:16:95:d7:46:2c:cd:b8:67: 0a:49:11:ac:b2:dc:dd:56:44:be:da:73:4c:8c:8a:69:18:77: 6c:fe:7c:7a:e6:c0:d2:2e:94:78:a8:38:38:9e:73:2f:59:cc: 07:e0:a8:49:1b:6a:67:6d:3d:7f:63:af:5c:5d:80:28:e4:d4: 7d:1a:a4:d9:de:12:a5:22:e5:93:95:38:2a:f4:88:62:86:27: b7:cc:15:ba:d5:09:d5:23:9c:87:69:a4:42:53:a0:d2:a5:ec: 07:64:2b:01:bc:dc:b6:1d:52:1a:bf:f3:e1:42:55:6a:8c:94: a4:9f:1d:30:40:24:59:d2:b8:87:12:e5:a2:5d:26:44:78:d5: 69:82:0c:b7:a8:c9:67:b6:cc:81:b2:00:d9:00:bc:24:78:90: 95:ae:48:cd:59:3c:b8:f2:e3:41:51:a8:33:dd:3a:84:65:1e: 30:a2:89:29:38:93:91:d0:e0:ec:46:9e:00:f1:70:4f:83:e8: b9:a3:23:de:47:8a:e8:c4:98:59:bd:b2:a7:0f:cc:c0:e5:82: 95:4d:c0:fc:ea:de:b2:51:43:c1:59:d8:c8:03:b0:14:2e:24: 4b:cf:85:41:ff:d0:41:ab:fd:0b:65:92:a2:77:89:c6:d3:a7: 3c:31:c9:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypQNZfgQLPg+wCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NWQ3Yjk5NzAtYWZkZi00N2ZmLWFmZWItNjA2NjM2MTIwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipkW/3odvfacJ43cHhsNttybwaNNpzu2KdJF AZLTXGPhHzACHnulxUTe+hJCT8//V/oxSECu21I9VWZLCbyPRwkj7U7VLpuTusuH Z2o5ddXmg1yOjb5n59SVUoaktDvwDxofFG/hEELLGVa7hpbrFGy3FOOMffmlzpsc ZgvS16KSvzocDPT2Z5tKVkrgx4yV7bfwoWTsmXfBieVMW5PIZCP4fE2oSMR5scft dkn46ipb3WGSPiBM3rPtZAMK086Sj/SPQ+GnU8/Frn5TkjK7trRpzfUSBO0GAHuK dyKG5QkFp24GlaqlfbMOc4Gg9lxB5kdIYh6x1x8sU6wBhLrg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFfXJ8yjYi70YLzef9pl+dKCOooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDNkMDljOTItZTczMy0z ZGFjLTg4ZDQtYTkwNWE2MGQxMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOlggDDVNN5J30WlddGLM24ZwpJEayy3N1WRL7ac0yMimkYd2z+fHrm wNIulHioODiecy9ZzAfgqEkbamdtPX9jr1xdgCjk1H0apNneEqUi5ZOVOCr0iGKG J7fMFbrVCdUjnIdppEJToNKl7AdkKwG83LYdUhq/8+FCVWqMlKSfHTBAJFnSuIcS 5aJdJkR41WmCDLeoyWe2zIGyANkAvCR4kJWuSM1ZPLjy40FRqDPdOoRlHjCiiSk4 k5HQ4OxGngDxcE+D6LmjI95HiujEmFm9sqcPzMDlgpVNwPzq3rJRQ8FZ2MgDsBQu JEvPhUH/0EGr/QtlkqJ3icbTpzwxyag= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:57 2025 by rpki-client