$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa File: 6a974e5c-7db3-322a-b1d2-d8ef64264249.roa (raw, json) Hash identifier: tgWQG1gP/4+SBhd021tNNuqGrIHSY+gBooWGInKlkoo= Subject key identifier: 4D:5D:21:15:FB:E2:3F:2E:03:1A:85:EE:D4:FB:69:BE:71:C3:B3:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D165505919867A4A236342D8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.33.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:50:59:19:86:7a:4a:23:63:42:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=e8680947-5c1d-4ff4-914b-959228a76ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:5c:c5:54:97:7c:4d:9c:2d:ea:58:5c:cb: 19:f9:63:a7:68:35:da:29:1e:b7:df:9e:99:f4:4e: e4:61:d7:68:59:f0:4e:de:64:2e:8e:b8:d3:9d:4e: 36:db:0c:4c:3b:b8:b7:a7:be:bd:68:0a:db:e6:39: e7:45:02:9c:24:0b:32:ae:9d:79:ff:cd:c6:a1:02: 84:b9:5c:a6:c2:e5:b8:cf:55:7d:b2:39:2b:4a:14: 70:cb:c1:e8:3e:5f:1e:86:c2:7d:0c:45:d0:be:ce: 9f:25:7d:08:45:63:82:4c:83:0d:45:eb:bb:4d:71: f4:1c:22:eb:c4:b7:fb:90:b0:e0:4f:0a:92:6e:6a: d5:ed:be:d0:cf:53:35:89:d0:ff:2a:d1:b2:82:6d: f7:bc:95:14:f2:4d:17:8b:38:9f:d1:3e:6f:d2:e9: d1:fe:ed:82:2d:ed:11:0e:c0:b1:1f:c8:2b:37:e8: be:4a:83:46:c7:75:24:0a:1a:83:25:4d:ea:df:87: 27:cc:e6:e4:11:fb:c2:6e:86:63:85:ed:7e:d3:74: 65:4c:54:33:66:75:e3:79:2a:c2:0d:62:75:a6:01: 89:da:b0:38:86:db:e3:f1:ce:bb:8e:73:fd:f4:86: c7:32:c3:18:10:db:a6:c4:20:ec:27:9f:4a:ae:26: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:21:15:FB:E2:3F:2E:03:1A:85:EE:D4:FB:69:BE:71:C3:B3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e9:ff:0c:a4:f8:b7:e7:eb:37:15:c6:6d:34:a7:8f:5e:ac: a1:4a:8b:e6:02:9d:19:8d:3a:3d:02:69:59:5d:5e:a6:f2:b0: 79:bc:99:20:9f:67:fb:71:5b:0a:bd:65:c9:9c:27:e0:b2:e7: 48:f2:ba:06:32:91:f0:2c:d9:75:58:ac:d6:66:10:8e:4e:49: 57:07:60:73:30:63:f5:4f:e0:69:ef:09:ac:d8:dc:a9:47:e3: 52:21:11:d1:73:c6:b3:e5:d5:65:c1:67:49:a9:c6:c1:3e:ea: 3e:a8:eb:52:81:9a:d2:ba:9d:69:90:17:6f:37:88:3b:e5:41: ee:4d:17:0c:97:04:af:3d:60:56:98:8e:3e:53:df:78:c8:0f: 45:3d:40:8e:1f:5a:cc:ae:7f:58:02:ff:dc:af:60:fc:8a:2d: 58:79:cd:a1:a9:81:27:1b:cd:ca:5a:df:c3:ef:18:70:52:b1: 3d:3e:be:22:c7:38:2c:3c:ce:38:93:75:c3:8b:11:c3:c8:75: bd:32:0d:2f:0a:bb:1f:0e:bb:73:59:db:d5:8b:4d:02:ee:c6: 1e:6c:4b:9e:19:71:0b:4f:2d:23:fa:1a:a8:da:64:2a:bc:4a: 12:b4:49:14:d5:a0:ea:e7:48:f3:2c:49:14:58:f8:62:99:68: e7:9a:79:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZVBZGYZ6SiNjQtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZTg2ODA5NDctNWMxZC00ZmY0LTkxNGItOTU5MjI4YTc2YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa5cxVSXfE2cLepYXMsZ+WOnaDXaKR63356Z 9E7kYddoWfBO3mQujrjTnU422wxMO7i3p769aArb5jnnRQKcJAsyrp15/83GoQKE uVymwuW4z1V9sjkrShRwy8HoPl8ehsJ9DEXQvs6fJX0IRWOCTIMNReu7TXH0HCLr xLf7kLDgTwqSbmrV7b7Qz1M1idD/KtGygm33vJUU8k0Xizif0T5v0unR/u2CLe0R DsCxH8grN+i+SoNGx3UkChqDJU3q34cnzObkEfvCboZjhe1+03RlTFQzZnXjeSrC DWJ1pgGJ2rA4htvj8c67jnP99IbHMsMYENumxCDsJ59KriZHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1dIRX74j8uAxqF7tT7ab5xw7OVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmE5NzRlNWMtN2RiMy0z MjJhLWIxZDItZDhlZjY0MjY0MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDp/wyk+Lfn6zcVxm00p49erKFKi+YCnRmNOj0CaVldXqbysHm8mSCf Z/txWwq9ZcmcJ+Cy50jyugYykfAs2XVYrNZmEI5OSVcHYHMwY/VP4GnvCazY3KlH 41IhEdFzxrPl1WXBZ0mpxsE+6j6o61KBmtK6nWmQF283iDvlQe5NFwyXBK89YFaY jj5T33jID0U9QI4fWsyuf1gC/9yvYPyKLVh5zaGpgScbzcpa38PvGHBSsT0+viLH OCw8zjiTdcOLEcPIdb0yDS8Kux8Ou3NZ29WLTQLuxh5sS54ZcQtPLSP6GqjaZCq8 ShK0SRTVoOrnSPMsSRRY+GKZaOeaee4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:39:16 2025 by rpki-client