$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa File: 4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa (raw, json) Hash identifier: kYKY847n0elqjjTcDk1U2k86U4BGmQ68xfiD9mTGkjE= Subject key identifier: 38:D5:FB:45:A5:AB:13:CC:7A:B0:AE:D5:B7:8B:E9:65:61:FF:F4:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF34422ED0B03EE3BFC680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:42:2e:d0:b0:3e:e3:bf:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=65486cc6-ec45-4ea7-9d05-3bc8317f0f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:02:2b:45:3d:20:71:81:53:92:63:ba:ef: 29:79:ed:9e:58:49:8a:a4:87:10:8b:a2:05:9c:73: c7:bb:86:0d:bf:1b:10:6b:02:4e:dc:2d:92:3d:e0: ce:fb:cf:a5:d2:2c:87:3e:5d:05:37:ae:84:c0:36: 58:bf:c2:79:b0:12:d8:91:12:0b:a7:36:a8:ea:0e: ca:08:68:4b:bc:3c:24:9a:69:23:16:c4:20:6a:64: 85:ae:5a:79:57:04:1c:10:b0:47:89:27:b2:6e:ca: 53:ff:9a:83:da:f1:48:fc:1a:29:94:7f:21:82:87: dd:df:fd:06:7e:eb:11:b5:24:0b:4a:d6:b4:14:89: b5:82:4c:62:e8:fc:f1:04:00:72:b9:de:43:65:d9: 14:c4:8e:e6:46:7e:45:e3:9d:ee:5e:b4:6d:60:97: 12:6f:b9:00:c8:14:51:c3:75:67:81:bb:68:e2:ec: f4:6c:29:06:76:46:7d:46:20:b9:9d:23:b5:b7:29: 4a:cd:19:2e:4c:ae:d1:bb:6a:19:87:cc:24:cc:6b: 12:10:bd:e3:cb:76:02:65:8a:ee:35:7e:83:d1:1c: 78:24:9c:91:b4:60:92:69:1d:1b:e0:6c:85:fc:05: 3c:9d:34:c5:24:3e:db:18:c1:ad:6b:34:f5:0a:fc: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D5:FB:45:A5:AB:13:CC:7A:B0:AE:D5:B7:8B:E9:65:61:FF:F4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c9:99:4c:25:4f:3f:17:86:de:d7:a5:d9:d1:5c:b8:b9:38: f5:c3:9e:35:5d:45:ce:15:fe:bd:a8:31:0f:28:e7:b2:64:6c: f4:85:29:fa:e3:81:cb:20:a1:a0:98:69:9d:48:3b:d9:5f:79: e4:67:a3:a4:52:c0:39:43:02:e4:4f:fc:40:99:0e:4d:56:47: 72:e3:2d:64:f4:12:a9:17:65:c1:78:0e:3e:7c:60:86:c8:60: 76:13:86:59:75:c8:07:28:df:df:21:a9:60:5a:bb:25:42:ce: c6:5f:6c:2c:5c:9d:ff:4f:21:3e:d8:fd:f5:a4:4b:75:97:2c: 3a:0e:ca:f6:97:3e:94:3e:ae:a3:f7:15:85:f3:5f:60:73:df: 8c:2a:e3:6e:43:3a:28:b0:06:37:63:c8:d0:2c:91:dc:9a:3e: 9a:f9:ec:9c:40:d5:33:cf:99:54:4b:40:3e:a2:2b:72:0f:db: a1:d9:6a:84:ac:4a:ac:e2:63:95:50:af:75:97:e0:c1:24:0e: 9c:f4:8a:a3:15:15:57:e4:2b:27:dc:bf:7c:df:c7:c2:a8:6b: 67:44:34:d0:ac:98:2b:23:f6:a7:29:e0:89:06:be:64:44:5c: 27:7f:66:7d:0f:cd:36:4e:3b:b2:1a:60:c8:81:f9:ca:c7:0f: 24:59:54:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzRCLtCwPuO/xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjU0ODZjYzYtZWM0NS00ZWE3LTlkMDUtM2JjODMxN2YwZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sQCK0U9IHGBU5Jjuu8pee2eWEmKpIcQi6IF nHPHu4YNvxsQawJO3C2SPeDO+8+l0iyHPl0FN66EwDZYv8J5sBLYkRILpzao6g7K CGhLvDwkmmkjFsQgamSFrlp5VwQcELBHiSeybspT/5qD2vFI/BoplH8hgofd3/0G fusRtSQLSta0FIm1gkxi6PzxBAByud5DZdkUxI7mRn5F453uXrRtYJcSb7kAyBRR w3Vngbto4uz0bCkGdkZ9RiC5nSO1tylKzRkuTK7Ru2oZh8wkzGsSEL3jy3YCZYru NX6D0Rx4JJyRtGCSaR0b4GyF/AU8nTTFJD7bGMGtazT1CvwfnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjV+0WlqxPMerCu1beL6WVh//SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGQ3NDkxZjQtMGFhNi0z MGEzLThmMzktYzA5ZGVkOWI0NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7JmUwlTz8Xht7XpdnRXLi5OPXDnjVdRc4V/r2oMQ8o57JkbPSFKfrj gcsgoaCYaZ1IO9lfeeRno6RSwDlDAuRP/ECZDk1WR3LjLWT0EqkXZcF4Dj58YIbI YHYThll1yAco398hqWBauyVCzsZfbCxcnf9PIT7Y/fWkS3WXLDoOyvaXPpQ+rqP3 FYXzX2Bz34wq425DOiiwBjdjyNAskdyaPpr57JxA1TPPmVRLQD6iK3IP26HZaoSs SqziY5VQr3WX4MEkDpz0iqMVFVfkKyfcv3zfx8Koa2dENNCsmCsj9qcp4IkGvmRE XCd/Zn0PzTZOO7IaYMiB+crHDyRZVGU= -----END CERTIFICATE-----Generated at Sun Apr 27 06:35:39 2025 by rpki-client