$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json) Hash identifier: Eq7qguoBvGzC5x6ukox2tXU3w+PO1NKcZ9D+OeE9sig= Subject key identifier: 27:71:A6:00:EB:E7:8F:59:11:E6:80:28:7C:9C:0F:D5:0D:39:09:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849C4D4CFC3F9C73ACF717A78C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cf:c3:f9:c7:3a:cf:71:7a:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=0cb1ac78-3222-4bdc-83eb-2704e86e8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:13:77:a5:8a:bc:da:24:87:71:8c:8d:15: b6:7a:24:fd:13:f1:e2:f4:89:9e:38:62:69:b8:f5: a3:b9:a4:8b:5f:1d:34:f8:89:7f:e5:1b:bc:be:59: 3b:bb:97:78:01:77:23:f3:d5:7e:26:f5:da:e0:e1: bb:55:e5:bd:32:b8:c9:03:c2:b1:e4:1d:cc:84:ef: 88:9d:2c:b4:93:ed:53:78:bb:f4:7c:68:98:1a:0c: 75:97:9b:e7:fe:df:34:07:58:7e:cf:ae:bd:e4:d3: ad:e1:a4:f3:13:58:47:2a:05:9a:ee:b2:1b:d6:47: 90:2c:8a:35:44:c4:81:a1:e7:9e:b3:90:d2:8d:61: bf:c9:de:1d:34:0a:85:ed:c4:b3:e9:a7:d9:6a:32: a9:82:89:6e:bc:3c:bd:55:c9:b8:bb:cb:08:4f:58: 1e:8c:f2:c3:95:2b:19:f5:f6:0f:d2:62:73:d1:94: df:1b:4c:26:e5:98:46:f2:9a:c8:fb:eb:ce:b1:42: 0c:c2:55:f8:26:6e:70:57:6e:aa:d2:9f:83:74:df: 34:b6:23:44:93:c2:36:36:9e:8a:7c:2b:6d:2d:80: aa:d6:42:6d:63:ac:12:c7:a2:91:74:b3:55:9d:7b: b3:c1:de:20:83:80:f9:fb:d4:1f:ae:09:29:70:56: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:71:A6:00:EB:E7:8F:59:11:E6:80:28:7C:9C:0F:D5:0D:39:09:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:06:0a:32:a1:ab:a1:30:25:5b:75:f9:ef:7b:66:ee:39:1e: d2:4a:84:d2:34:4f:11:c7:1e:5e:3b:6e:39:95:69:a3:e2:7f: a2:8a:36:af:55:6f:c6:d4:55:11:df:bb:20:e2:43:c9:85:89: 96:7d:25:90:a3:67:2c:aa:6d:f9:e7:8c:f0:d8:3a:f3:e6:5c: 78:30:17:2e:50:96:4e:f5:42:cc:6b:1b:c8:3d:ca:b1:29:9a: e9:da:51:ef:73:a1:ef:db:b1:46:3f:38:cd:49:f5:62:20:2e: 47:d3:3f:f9:31:9e:26:72:47:8d:37:bc:29:45:37:d6:24:51: e3:d6:cb:2b:16:08:9d:6d:5b:44:10:81:a5:e3:78:f1:d7:25: 29:cf:94:5a:28:b9:18:85:ea:ea:1e:20:3f:4f:52:cb:6a:73: ee:9f:96:71:19:32:de:3b:e7:88:d9:42:af:43:5a:b2:e5:00: e5:d2:74:56:fb:5e:6f:0a:53:51:41:e5:0b:ca:c1:8f:da:8d: fd:a1:a0:0b:fa:e6:c4:a1:cc:2e:f5:c2:4f:05:35:0d:95:56: 82:6f:51:4d:be:53:b0:15:60:c2:3a:55:a3:81:7b:f2:5c:58: 8c:fd:11:e0:c8:3c:08:f1:f1:c6:9b:7f:3e:f3:3f:1a:a6:cc: 31:9b:5d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1M/D+cc6z3F6eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MGNiMWFjNzgtMzIyMi00YmRjLTgzZWItMjcwNGU4NmU4ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYcTd6WKvNokh3GMjRW2eiT9E/Hi9ImeOGJp uPWjuaSLXx00+Il/5Ru8vlk7u5d4AXcj89V+JvXa4OG7VeW9MrjJA8Kx5B3MhO+I nSy0k+1TeLv0fGiYGgx1l5vn/t80B1h+z6695NOt4aTzE1hHKgWa7rIb1keQLIo1 RMSBoeees5DSjWG/yd4dNAqF7cSz6afZajKpgoluvDy9Vcm4u8sIT1gejPLDlSsZ 9fYP0mJz0ZTfG0wm5ZhG8prI++vOsUIMwlX4Jm5wV26q0p+DdN80tiNEk8I2Np6K fCttLYCq1kJtY6wSx6KRdLNVnXuzwd4gg4D5+9QfrgkpcFaX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdxpgDr549ZEeaAKHycD9UNOQnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgGCjKhq6EwJVt1+e97Zu45HtJKhNI0TxHHHl47bjmVaaPif6KKNq9V b8bUVRHfuyDiQ8mFiZZ9JZCjZyyqbfnnjPDYOvPmXHgwFy5Qlk71QsxrG8g9yrEp munaUe9zoe/bsUY/OM1J9WIgLkfTP/kxniZyR403vClFN9YkUePWyysWCJ1tW0QQ gaXjePHXJSnPlFoouRiF6uoeID9PUstqc+6flnEZMt4754jZQq9DWrLlAOXSdFb7 Xm8KU1FB5QvKwY/ajf2hoAv65sShzC71wk8FNQ2VVoJvUU2+U7AVYMI6VaOBe/Jc WIz9EeDIPAjx8cabfz7zPxqmzDGbXZA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:08 2025 by rpki-client