$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json) Hash identifier: zYINK40/L9l46VLOFDOqTamXwm1rIluUORbhFefq8IY= Subject key identifier: 5A:63:3B:D3:3C:63:95:B4:1F:93:04:7F:AA:5E:89:F1:66:C9:E6:60 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01ECCC526029D4EDA0500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:cc:c5:26:02:9d:4e:da:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=e24cbfa1-517e-4943-82ef-7d4f0768af79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:be:d8:48:18:9c:b6:5f:5a:74:2b:02:d5: b5:b7:98:9c:fa:d0:ff:5e:dc:d1:a0:63:82:61:8a: 0f:54:41:b2:b8:c8:ed:5b:09:39:b1:3d:6e:b2:9e: 86:76:f8:22:c0:3b:a6:af:e9:11:f6:48:d1:7d:d0: df:40:93:2f:53:93:0f:28:98:52:91:52:cc:96:c5: 7d:9f:d2:76:52:7a:ae:aa:c3:74:63:5d:63:26:24: 81:40:38:93:43:87:1f:dc:15:29:64:07:05:16:71: da:7f:14:33:ec:ac:e6:96:a8:05:10:a1:5c:98:dc: 7c:fd:ed:bc:8c:dc:97:db:4e:dc:1f:f8:ed:8e:67: 32:de:1a:16:02:f8:fb:33:4a:a6:1c:a5:48:32:9e: fa:71:74:94:88:21:17:2a:63:7c:d6:8c:25:4e:c2: fc:12:70:2e:d1:4f:22:c9:48:35:fc:17:10:8e:91: f9:4e:dd:2c:fb:f1:9b:b5:0e:c1:49:7f:f8:be:bb: 34:aa:90:50:fd:e1:1c:77:2b:ab:fd:c9:a2:48:ba: bc:71:6f:c6:1f:f9:bf:fe:e6:85:13:57:a0:36:83: ce:02:00:2f:ee:f7:b7:ff:22:98:ac:8b:58:76:9d: e3:ed:83:94:b3:7e:f5:47:19:16:52:9b:0c:7b:2d: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:3B:D3:3C:63:95:B4:1F:93:04:7F:AA:5E:89:F1:66:C9:E6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8e:c2:35:c6:55:9a:b6:c5:f6:49:a4:e5:98:d6:42:90:0a: b3:ef:63:b6:41:f9:f2:c2:4b:ae:59:b7:fd:57:fb:9a:f6:e2: 3b:e7:b9:ce:50:64:1b:b3:64:15:65:cf:d1:3f:13:3f:39:0b: 60:89:9e:0a:ef:1c:d6:7a:41:8e:ae:d5:b8:47:1a:56:13:0d: 28:c5:f8:32:9b:b0:5c:68:59:6a:04:44:a4:ea:b4:39:c8:84: b7:d5:31:6b:de:08:d7:77:9b:1c:38:15:bc:b7:bd:44:01:7f: 53:86:5f:0d:9a:60:34:12:09:cf:4d:b2:e7:58:62:d6:03:82: 8a:fc:a4:96:bf:97:a7:30:24:68:6f:66:2c:58:9f:79:ce:11: 7f:3d:7b:98:9f:98:4f:6c:5d:ef:34:52:e9:73:f1:77:07:08: fa:65:89:8b:22:a4:31:7c:fe:76:fd:c0:e5:6d:80:15:f9:4a: 44:69:8f:f4:cf:f3:d6:11:4b:d5:ec:57:21:46:0e:4c:89:00: f8:43:53:a9:5b:55:c5:c9:4b:99:2f:c7:ee:11:b3:88:1e:59: 87:25:a1:d2:98:22:2a:c4:4d:de:15:88:8c:27:b9:2e:e6:7a: d4:63:2a:c6:4c:25:93:f1:d3:f3:b9:fc:df:35:3d:c1:e1:72: 45:36:fd:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB7MxSYCnU7aBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZTI0Y2JmYTEtNTE3ZS00OTQzLTgyZWYtN2Q0ZjA3NjhhZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikm+2EgYnLZfWnQrAtW1t5ic+tD/XtzRoGOC YYoPVEGyuMjtWwk5sT1usp6GdvgiwDumr+kR9kjRfdDfQJMvU5MPKJhSkVLMlsV9 n9J2UnquqsN0Y11jJiSBQDiTQ4cf3BUpZAcFFnHafxQz7KzmlqgFEKFcmNx8/e28 jNyX207cH/jtjmcy3hoWAvj7M0qmHKVIMp76cXSUiCEXKmN81owlTsL8EnAu0U8i yUg1/BcQjpH5Tt0s+/GbtQ7BSX/4vrs0qpBQ/eEcdyur/cmiSLq8cW/GH/m//uaF E1egNoPOAgAv7ve3/yKYrItYdp3j7YOUs371RxkWUpsMey3JVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpjO9M8Y5W0H5MEf6peifFmyeZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGE5MTU1MmQtNmRlYi0z ZTE5LTgwNWItYWI1MjA2MmE3ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqOwjXGVZq2xfZJpOWY1kKQCrPvY7ZB+fLCS65Zt/1X+5r24jvnuc5Q ZBuzZBVlz9E/Ez85C2CJngrvHNZ6QY6u1bhHGlYTDSjF+DKbsFxoWWoERKTqtDnI hLfVMWveCNd3mxw4Fby3vUQBf1OGXw2aYDQSCc9NsudYYtYDgor8pJa/l6cwJGhv ZixYn3nOEX89e5ifmE9sXe80Uulz8XcHCPpliYsipDF8/nb9wOVtgBX5SkRpj/TP 89YRS9XsVyFGDkyJAPhDU6lbVcXJS5kvx+4Rs4geWYclodKYIirETd4ViIwnuS7m etRjKsZMJZPx0/O5/N81PcHhckU2/Wg= -----END CERTIFICATE-----Generated at Mon Jun 16 12:06:00 2025 by rpki-client