$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa File: 5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa (raw, json) Hash identifier: wRQ50FpCio+QCxkAIWJaU1k/C/qikq6kMVTIFQ3GkqE= Subject key identifier: 46:ED:45:BD:26:65:9E:44:AA:F8:76:D7:17:05:F3:B8:C2:05:C5:41 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C202801FEAF94B84A33D180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:28:01:fe:af:94:b8:4a:33:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=28871b87-b0e5-42e0-89c0-6c4f726aef5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:a2:f1:0c:9b:dc:68:17:ec:a6:a5:c3:e2: a1:f8:ab:11:b5:10:06:85:b4:66:e1:67:5c:bf:f0: 6c:14:37:4d:15:8a:a0:bb:cf:a8:1e:0a:8c:75:65: 3b:9b:11:15:d1:56:97:e0:ef:b4:15:64:f9:b6:af: c0:5a:0e:90:73:10:c6:60:be:ad:bf:bf:cd:bb:c4: 02:e3:86:c8:01:67:a4:cc:13:6b:35:fb:6e:98:2a: c0:94:1c:d3:5b:2a:93:fe:03:34:06:72:e9:06:37: 2e:e1:94:b2:94:5c:2e:c3:f5:df:7b:ce:78:c2:3a: 26:90:35:bb:2b:83:5e:f2:73:00:8b:fc:ca:dc:56: 31:99:63:6f:06:43:28:6b:74:0d:f8:fd:d7:f7:38: 92:40:57:ac:e7:a7:c4:7f:50:2b:a7:e0:44:ee:4e: c4:7b:57:ea:54:65:8d:00:00:0b:91:cd:a2:13:cb: 67:c0:f0:42:fb:38:2a:3b:12:51:da:f9:81:d8:c6: 11:20:22:3c:55:ab:c2:b1:ae:38:23:e5:76:55:26: ec:d6:5b:67:af:52:1f:ab:ad:33:58:fd:8c:11:ca: 80:2d:38:66:ed:c2:a6:c2:4b:25:b6:7f:89:5b:b4: 40:62:72:8a:dd:10:fd:dc:c7:6f:fe:43:c9:28:08: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:ED:45:BD:26:65:9E:44:AA:F8:76:D7:17:05:F3:B8:C2:05:C5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:bf:57:16:de:25:53:cb:ab:98:41:a4:38:0a:cd:40:ad:3e: 42:77:11:75:01:c0:c5:00:9b:52:37:ed:8f:86:80:fc:9b:32: 10:24:8e:b9:53:4c:a2:c6:84:4d:75:15:f4:56:13:a9:79:a3: 73:ad:1f:6c:7b:d6:05:37:4c:0a:9e:d8:9a:da:9f:8b:b2:a0: fb:e6:97:eb:cc:fe:76:9b:b1:3f:01:25:78:f1:b5:4d:15:49: ee:67:c8:2e:d2:bb:93:72:94:83:62:6d:11:41:4f:4e:3c:c4: 25:0f:5d:10:31:8a:2b:e6:bd:c6:20:dd:88:08:14:66:96:03: 1c:d2:a7:39:1d:e1:56:a1:9f:1a:6a:7c:65:36:44:a1:64:fb: 26:d3:48:01:b7:08:23:55:de:53:0a:1e:1e:65:4b:d6:7c:ae: 94:8c:0e:af:d3:7f:4d:37:99:52:19:1f:15:24:04:38:01:2e: e6:82:9d:47:a7:47:d3:5f:d9:4a:08:20:c0:5b:62:07:d8:77: 41:ca:12:2f:9b:30:50:06:83:63:dd:41:f6:91:d5:4e:71:a8: 9b:44:48:ff:3d:28:1a:4c:92:ae:2c:b2:d9:ab:00:64:4f:15: 40:c6:00:23:38:2d:fa:60:4f:7d:ca:ec:a7:cf:14:5c:20:63: 52:f3:32:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICgB/q+UuEoz0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Mjg4NzFiODctYjBlNS00MmUwLTg5YzAtNmM0ZjcyNmFlZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yqi8Qyb3GgX7Kalw+Kh+KsRtRAGhbRm4Wdc v/BsFDdNFYqgu8+oHgqMdWU7mxEV0VaX4O+0FWT5tq/AWg6QcxDGYL6tv7/Nu8QC 44bIAWekzBNrNftumCrAlBzTWyqT/gM0BnLpBjcu4ZSylFwuw/Xfe854wjomkDW7 K4Ne8nMAi/zK3FYxmWNvBkMoa3QN+P3X9ziSQFes56fEf1Arp+BE7k7Ee1fqVGWN AAALkc2iE8tnwPBC+zgqOxJR2vmB2MYRICI8VavCsa44I+V2VSbs1ltnr1Ifq60z WP2MEcqALThm7cKmwksltn+JW7RAYnKK3RD93Mdv/kPJKAj2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbtRb0mZZ5Eqvh21xcF87jCBcVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM5OThhYjktN2IyZS0z MGQ1LTk3ZmQtYWE0MzM1YWJiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2/VxbeJVPLq5hBpDgKzUCtPkJ3EXUBwMUAm1I37Y+GgPybMhAkjrlT TKLGhE11FfRWE6l5o3OtH2x71gU3TAqe2Jran4uyoPvml+vM/nabsT8BJXjxtU0V Se5nyC7Su5NylINibRFBT048xCUPXRAxiivmvcYg3YgIFGaWAxzSpzkd4Vahnxpq fGU2RKFk+ybTSAG3CCNV3lMKHh5lS9Z8rpSMDq/Tf003mVIZHxUkBDgBLuaCnUen R9Nf2UoIIMBbYgfYd0HKEi+bMFAGg2PdQfaR1U5xqJtESP89KBpMkq4sstmrAGRP FUDGACM4LfpgT33K7KfPFFwgY1LzMus= -----END CERTIFICATE-----Generated at Sun Jun 15 23:05:44 2025 by rpki-client