$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa File: 61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa (raw, json) Hash identifier: 2luDX9dhD36A1X4vcE6OLNCiRhMihdu9C7iuKGopgtA= Subject key identifier: 84:C4:BC:81:2E:02:F4:66:BA:96:E1:16:C4:56:76:77:18:82:36:EA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A68AF72210E136B3080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:68:af:72:21:0e:13:6b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=32ebdd84-edc7-4575-86d4-9fca5342775b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:7a:3e:19:d8:7c:90:7f:24:bd:05:e2:bc: 97:e2:6f:21:a4:fd:1d:c9:8d:6e:97:7f:36:4d:7c: b9:3f:d7:52:20:de:84:07:f9:19:fe:f8:b1:71:04: f9:9e:93:d6:71:8a:b2:ab:be:67:7c:62:f8:3f:77: 32:80:ee:22:94:26:d3:34:f2:df:90:98:30:13:9c: e9:09:35:a8:bd:cf:b4:dc:bf:20:fb:53:26:a4:b8: 93:e1:5e:c5:22:24:26:19:f2:98:36:43:3a:fb:7c: c9:b4:3f:c4:57:a1:6f:97:ee:51:a0:e6:2c:6f:a5: 35:bb:3b:32:6a:d8:a2:6e:36:e0:e2:8a:ea:7b:8d: b9:df:8f:cd:30:0c:72:27:df:14:81:c0:34:6b:cb: e6:76:9c:bb:7f:5c:87:d1:8f:61:90:ad:ba:02:8e: 39:84:cc:b1:c3:97:07:98:7b:38:ad:3f:a2:f8:e4: da:86:9e:16:3a:dd:3c:17:e0:d2:a6:11:3f:84:e2: ce:0f:6c:95:65:ff:93:98:3b:54:86:4e:44:8e:eb: e5:8d:5b:40:29:7c:5a:df:82:c5:96:97:d8:2f:b6: db:52:15:c8:c9:98:82:e7:94:9e:19:f5:d9:cd:c8: c0:cd:45:58:5a:fd:0c:6c:2b:c7:4f:0b:c8:d8:01: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C4:BC:81:2E:02:F4:66:BA:96:E1:16:C4:56:76:77:18:82:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:27:d7:28:fd:4c:c7:9f:e7:89:19:fa:90:a8:54:ab:a3:e4: 53:cf:45:5c:a2:b6:6d:bd:f2:2c:4c:53:4d:63:60:6b:e9:ab: 37:68:9d:4c:7c:7e:e8:a7:37:f6:5b:60:c0:2d:81:5a:60:c0: 85:e3:6e:55:52:46:70:9f:e5:4d:0b:18:f4:39:9d:91:4b:28: 1d:c6:1c:cc:fb:55:6a:32:99:3b:30:3a:5f:ef:ab:77:b6:69: 28:41:fb:b0:3d:b3:2d:2b:42:c1:70:9b:24:c5:db:8c:20:36: 02:63:b5:c7:1d:38:d2:ce:19:a4:a5:1f:a2:4a:c7:47:99:5a: 80:77:61:42:a3:f0:f1:b5:c9:43:4f:27:23:69:e6:69:d4:f4: 0c:50:f9:ca:ad:20:b4:54:08:40:ae:8c:c1:e2:2a:a5:7f:dc: 28:64:03:0f:e9:5c:59:f6:bb:87:39:86:a6:86:9f:60:70:dc: f9:85:6a:22:23:02:18:d6:64:d9:14:4b:24:24:78:0a:68:1a: 26:0e:ef:2e:3d:f1:e0:2d:65:2f:4b:e4:7b:18:6c:d3:95:98: 93:58:72:18:58:d0:f1:45:52:a4:ef:ac:24:93:1c:18:af:68: a6:7b:fb:0c:d1:fb:7e:d0:6a:4a:09:43:7b:88:cf:55:e3:d0: 83:ef:1f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnpor3IhDhNrMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzJlYmRkODQtZWRjNy00NTc1LTg2ZDQtOWZjYTUzNDI3NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd56PhnYfJB/JL0F4ryX4m8hpP0dyY1ul382 TXy5P9dSIN6EB/kZ/vixcQT5npPWcYqyq75nfGL4P3cygO4ilCbTNPLfkJgwE5zp CTWovc+03L8g+1MmpLiT4V7FIiQmGfKYNkM6+3zJtD/EV6Fvl+5RoOYsb6U1uzsy atiibjbg4orqe42534/NMAxyJ98UgcA0a8vmdpy7f1yH0Y9hkK26Ao45hMyxw5cH mHs4rT+i+OTahp4WOt08F+DSphE/hOLOD2yVZf+TmDtUhk5EjuvljVtAKXxa34LF lpfYL7bbUhXIyZiC55SeGfXZzcjAzUVYWv0MbCvHTwvI2AFFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITEvIEuAvRmupbhFsRWdncYgjbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjE3MzE2NDAtNWMwOS0z YzA5LWE5NjItMGNkOWJjZmRmNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkn1yj9TMef54kZ+pCoVKuj5FPPRVyitm298ixMU01jYGvpqzdonUx8 fuinN/ZbYMAtgVpgwIXjblVSRnCf5U0LGPQ5nZFLKB3GHMz7VWoymTswOl/vq3e2 aShB+7A9sy0rQsFwmyTF24wgNgJjtccdONLOGaSlH6JKx0eZWoB3YUKj8PG1yUNP JyNp5mnU9AxQ+cqtILRUCECujMHiKqV/3ChkAw/pXFn2u4c5hqaGn2Bw3PmFaiIj AhjWZNkUSyQkeApoGiYO7y498eAtZS9L5HsYbNOVmJNYchhY0PFFUqTvrCSTHBiv aKZ7+wzR+37QakoJQ3uIz1Xj0IPvH9A= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:16 2025 by rpki-client