$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa File: 5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa (raw, json) Hash identifier: YhkSbeloS9xV7neen7lcwzLM887TCWC++6w3QCiXJM0= Subject key identifier: D4:0F:9B:3A:C3:29:25:C7:B3:0E:DA:AB:9B:1D:D1:05:19:57:82:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF34AA4116C67F2AB2A980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:aa:41:16:c6:7f:2a:b2:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=940c90c2-633e-40e9-b5c2-ead348a581a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:23:ef:56:e5:1e:16:af:aa:d4:88:eb:8c: d1:93:84:73:8a:ed:f8:3d:1c:85:32:b5:a0:76:ec: f5:9b:35:97:52:f2:f6:51:dc:ed:74:ea:3c:22:b4: 44:fc:f2:73:bd:f2:6e:98:6b:9e:6b:34:9c:be:38: f6:ba:72:9a:f0:72:5b:5e:dd:99:4e:b3:9b:ff:a8: 87:5e:21:ab:04:fd:86:5d:8f:fe:d8:bc:5e:18:5b: b2:37:6d:0c:5f:bc:5a:fa:f7:98:0f:c6:db:67:1c: fb:53:d7:bf:be:31:6f:d1:04:eb:df:c8:09:a8:5a: 5a:a7:38:3b:d8:42:be:c4:dc:66:0f:36:8b:15:93: ed:31:9d:a1:23:c5:17:36:bd:e9:47:b6:d7:2e:73: fe:25:6f:83:e1:0a:81:17:0a:2c:de:0f:34:bd:a9: 6f:ae:6d:1f:80:11:92:ed:52:75:bc:21:d2:69:14: d0:e2:c1:a4:a5:2c:26:9c:d5:d9:ed:03:02:e3:2d: 7a:27:81:2e:38:11:26:ec:4d:ea:2e:bb:ae:4f:19: 0d:ea:2e:24:5a:0c:7e:4d:ec:37:7d:02:df:bb:cd: a7:74:fc:db:4b:da:fc:21:b2:a3:c1:45:03:23:25: 1b:fd:ed:94:0a:cd:cd:b9:98:07:df:5b:f6:eb:91: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:9B:3A:C3:29:25:C7:B3:0E:DA:AB:9B:1D:D1:05:19:57:82:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5d:ca:fb:cb:ef:c5:cc:15:1c:f9:3f:bc:a4:01:9c:28:3e: aa:03:76:37:5f:68:d9:07:10:de:1d:76:7f:82:43:e9:4a:d8: 58:91:7f:a8:ed:4e:fa:7e:91:be:b0:80:f9:f9:9f:b2:0d:53: e4:d6:fe:0e:ce:7b:a7:5e:1f:7a:9a:3e:7c:39:e2:f6:de:2b: b8:93:1d:db:96:55:75:10:43:33:d2:4f:cd:a6:4a:a3:81:94: 88:3a:28:a0:00:c5:38:a0:83:9a:51:67:95:61:2d:cc:47:a5: 2c:23:3e:b2:81:eb:44:55:25:55:67:d7:bd:52:07:0b:96:8a: 50:f3:52:88:08:0a:d2:24:33:97:c0:e1:99:ea:45:51:db:44: e2:df:a0:49:42:fb:cc:61:06:8b:91:c8:ab:86:cc:7e:04:cb: a2:4d:ba:b0:f4:c0:4c:cb:15:64:f2:4f:4c:c5:98:a2:c0:b7: 6d:55:e6:ec:f5:be:b7:a8:49:5b:2a:0f:2e:a3:08:b3:e1:32: 04:83:4d:21:c1:c6:ca:6b:e8:ee:d2:ee:73:91:2f:6a:e3:e8: ff:4f:70:7e:ae:fe:ae:cf:a4:bb:84:74:ed:a8:8e:2c:3b:ab: 77:2f:6d:3b:69:81:f8:73:a9:4a:86:e7:6f:20:e8:7a:37:02: 5b:20:c2:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzSqQRbGfyqyqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTQwYzkwYzItNjMzZS00MGU5LWI1YzItZWFkMzQ4YTU4MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZMj71blHhavqtSI64zRk4Rziu34PRyFMrWg duz1mzWXUvL2UdztdOo8IrRE/PJzvfJumGueazScvjj2unKa8HJbXt2ZTrOb/6iH XiGrBP2GXY/+2LxeGFuyN20MX7xa+veYD8bbZxz7U9e/vjFv0QTr38gJqFpapzg7 2EK+xNxmDzaLFZPtMZ2hI8UXNr3pR7bXLnP+JW+D4QqBFwos3g80valvrm0fgBGS 7VJ1vCHSaRTQ4sGkpSwmnNXZ7QMC4y16J4EuOBEm7E3qLruuTxkN6i4kWgx+Tew3 fQLfu82ndPzbS9r8IbKjwUUDIyUb/e2UCs3NuZgH31v265H0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQPmzrDKSXHsw7aq5sd0QUZV4KsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0OWRhOWItMzgzOS0z ZDA3LWJjYWQtMGM5MWUxMWJhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpdyvvL78XMFRz5P7ykAZwoPqoDdjdfaNkHEN4ddn+CQ+lK2FiRf6jt Tvp+kb6wgPn5n7INU+TW/g7Oe6deH3qaPnw54vbeK7iTHduWVXUQQzPST82mSqOB lIg6KKAAxTigg5pRZ5VhLcxHpSwjPrKB60RVJVVn171SBwuWilDzUogICtIkM5fA 4ZnqRVHbROLfoElC+8xhBouRyKuGzH4Ey6JNurD0wEzLFWTyT0zFmKLAt21V5uz1 vreoSVsqDy6jCLPhMgSDTSHBxspr6O7S7nORL2rj6P9PcH6u/q7PpLuEdO2ojiw7 q3cvbTtpgfhzqUqG528g6Ho3Alsgwgg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:49 2025 by rpki-client