$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa File: 5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa (raw, json) Hash identifier: AZ4R+SULIAl9Bcl4MbfBGdfwG8pg05WpNlhH9Ck82BM= Subject key identifier: D4:C8:92:4F:66:75:FE:46:59:3F:9A:23:7C:C9:DB:E3:B0:AF:04:EB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7AD382944EAFE97C8800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:d3:82:94:4e:af:e9:7c:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=2b89781c-b9a8-4791-8e4c-2ba872f85c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:59:cb:6f:fe:82:47:76:ea:ab:78:25:dc:d4: bc:46:08:95:2a:94:a3:18:64:40:29:ec:34:83:4e: 35:10:f2:dc:0c:9a:da:f1:bb:c0:e9:11:69:16:1c: 67:d7:7f:1b:6a:75:59:5e:b8:1a:4c:a8:b7:ab:34: 31:5d:cd:c6:b2:bc:24:59:e5:d9:4f:57:13:82:9b: a2:3e:06:46:54:c2:e8:d0:fe:75:03:d9:b8:0a:3e: 81:80:ce:7d:20:37:37:65:8d:15:11:97:8b:45:b2: ab:12:48:c0:35:be:a5:9b:3d:fa:b6:f4:5a:40:48: 31:b0:ed:1b:03:17:33:6e:20:48:d0:01:51:f5:90: 82:9d:10:f7:f7:ef:62:f2:cb:dc:ad:fc:e5:ce:b0: 63:8f:4a:a1:ef:db:40:3d:7d:09:f5:be:af:8b:ff: e5:0b:26:08:2c:cd:c3:ce:4a:50:7f:1f:ff:52:8a: 1e:fe:d9:b7:6f:52:be:e2:e6:55:fe:a5:eb:df:03: ae:4b:2c:11:bf:8f:bc:fd:02:f1:a8:fc:2e:99:ef: 1e:a1:80:11:16:c0:71:f0:d7:d7:bd:b9:af:5b:fc: 45:21:30:4d:e1:fd:69:92:17:dd:53:e9:cc:45:65: 6e:3f:34:0c:28:91:f6:f5:ff:3c:82:fb:bd:32:86: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:92:4F:66:75:FE:46:59:3F:9A:23:7C:C9:DB:E3:B0:AF:04:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:01:3e:d1:4e:f2:2c:e8:68:5f:8f:39:75:02:3b:6c:37:5e: 6c:dd:9a:b4:42:63:78:ef:3d:14:25:f9:52:ec:65:9f:b9:ed: a0:c2:e3:66:47:cd:e6:b9:c4:13:c6:64:88:c3:43:13:e5:29: 43:b0:de:f7:31:04:9d:eb:6e:3a:d0:b5:de:a3:d7:bd:0a:17: 0e:87:90:dc:bd:03:17:a4:8c:54:3d:e7:94:b4:2c:43:14:65: 55:30:ac:c9:8f:7d:73:4e:0f:d8:53:34:66:4a:16:ab:40:d2: c6:48:63:ad:d5:87:78:9b:e0:bc:52:08:8e:a2:a2:f8:2a:f6: 4a:0e:27:91:c8:2a:37:24:ec:77:27:a3:87:9c:c4:bb:5c:95: 1f:a7:e0:89:b2:6e:99:1a:e3:73:45:cb:08:0f:be:f0:ee:c9: ae:21:d6:a8:ca:a5:39:c8:1f:bf:a4:0e:46:30:ab:14:2f:57: af:5e:d6:8d:7c:36:78:f0:89:d2:62:5c:d3:90:41:a9:f6:72: 5a:e2:67:32:d7:b8:c5:e2:37:6d:ed:db:b9:79:eb:1a:2c:63: 10:3c:62:70:37:cd:f2:b4:b7:16:36:30:38:43:dd:eb:0c:a1: 31:bb:48:84:bc:97:02:e7:6f:62:c3:3f:dd:04:9f:00:bd:97: 3a:77:ac:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnrTgpROr+l8iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmI4OTc4MWMtYjlhOC00NzkxLThlNGMtMmJhODcyZjg1YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71nLb/6CR3bqq3gl3NS8RgiVKpSjGGRAKew0 g041EPLcDJra8bvA6RFpFhxn138banVZXrgaTKi3qzQxXc3GsrwkWeXZT1cTgpui PgZGVMLo0P51A9m4Cj6BgM59IDc3ZY0VEZeLRbKrEkjANb6lmz36tvRaQEgxsO0b AxczbiBI0AFR9ZCCnRD39+9i8svcrfzlzrBjj0qh79tAPX0J9b6vi//lCyYILM3D zkpQfx//Uooe/tm3b1K+4uZV/qXr3wOuSywRv4+8/QLxqPwume8eoYARFsBx8NfX vbmvW/xFITBN4f1pkhfdU+nMRWVuPzQMKJH29f88gvu9MobACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTIkk9mdf5GWT+aI3zJ2+OwrwTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ0N2UzZTAtMmQwMC0z OTIzLWI0ZGEtYTE5MmRhN2U1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMBPtFO8izoaF+POXUCO2w3XmzdmrRCY3jvPRQl+VLsZZ+57aDC42ZH zea5xBPGZIjDQxPlKUOw3vcxBJ3rbjrQtd6j170KFw6HkNy9AxekjFQ955S0LEMU ZVUwrMmPfXNOD9hTNGZKFqtA0sZIY63Vh3ib4LxSCI6iovgq9koOJ5HIKjck7Hcn o4ecxLtclR+n4Imybpka43NFywgPvvDuya4h1qjKpTnIH7+kDkYwqxQvV69e1o18 NnjwidJiXNOQQan2clriZzLXuMXiN23t27l56xosYxA8YnA3zfK0txY2MDhD3esM oTG7SIS8lwLnb2LDP90EnwC9lzp3rE8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:36 2025 by rpki-client