$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa File: 71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa (raw, json) Hash identifier: b68rvtX8ONNeEgP7M8TNe6V3pZY+smV8j/I0nvamPl0= Subject key identifier: AE:B0:FF:D3:E0:2F:6B:42:E6:35:17:60:4F:A9:FD:B7:25:05:98:58 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABDF52550F5EC5E0AA100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:f5:25:50:f5:ec:5e:0a:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=42e7603f-862b-4d99-8a9c-cbe53e6aa153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:bd:bb:af:62:43:c7:a7:61:93:7f:a8:d7: 9c:d1:04:94:99:a9:f1:cc:78:c2:46:66:15:09:e5: 36:67:a8:8f:f4:9c:39:df:f4:67:54:a9:0d:46:62: 42:c6:d1:3a:f3:05:33:5f:53:b2:5d:c8:39:b2:86: 32:f7:21:59:20:b0:85:ae:ee:24:6d:34:8b:b6:15: e3:38:15:bb:41:5a:5c:fa:70:49:6c:11:64:09:1a: af:e9:01:28:eb:c3:f9:77:94:7e:55:20:d8:1d:22: ad:db:47:b2:7d:bb:38:1e:00:e4:37:2e:8a:c4:e3: c4:de:7c:91:30:58:53:7e:63:62:a2:28:98:ad:9f: 9e:41:b2:ec:0e:55:0d:db:81:53:e8:fb:92:2d:6c: 77:7d:f8:50:18:07:28:3c:34:1a:d6:2a:04:5c:83: 8f:dd:f1:5c:f8:68:17:88:ae:2d:56:0c:6b:59:d0: df:56:cd:e8:5f:c6:a6:96:4a:52:60:b4:15:47:c1: 07:f3:c4:99:a0:89:fc:e9:e5:81:9c:50:55:ad:85: 61:95:0f:77:62:4c:b3:fa:12:d7:c6:06:5e:90:d2: e4:10:e6:4c:9e:1e:e4:33:65:8f:61:14:58:46:e0: 34:37:0d:7b:f0:6e:12:cc:21:e8:ed:fc:c6:05:13: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B0:FF:D3:E0:2F:6B:42:E6:35:17:60:4F:A9:FD:B7:25:05:98:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71d0f7d6-9afd-338d-be2b-f05eeb35f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a8:6b:1c:94:32:10:d5:83:0d:17:f4:ef:df:f4:ba:93:7a: d7:45:7a:c8:f4:f1:49:54:5d:d8:ca:a0:55:80:3b:e4:61:c3: 63:fa:03:1a:18:c2:9a:f9:80:07:ce:2d:c8:29:7a:15:13:4e: 18:ad:de:95:13:63:aa:64:7a:b9:8c:e4:84:d1:14:e6:88:b4: 4e:18:f1:23:d3:98:40:a6:0d:61:b2:18:d7:01:2d:eb:e8:6a: 17:22:00:7e:37:e3:6f:a9:d8:87:7e:f4:1f:76:6f:44:36:23: c0:2b:c1:a0:86:9b:bc:7c:6c:ef:c8:49:ea:05:e4:e6:89:47: dd:4c:cb:37:d8:cc:08:63:22:e4:0a:10:e2:5d:ec:2e:ec:db: d7:33:49:47:f6:b1:6c:ba:7c:39:fa:9f:2d:30:8a:f9:0c:ac: 47:f2:6a:95:c6:97:49:6c:4d:eb:3a:f6:64:3c:b4:fb:a2:32: a5:39:13:05:58:c1:b8:0d:a6:5e:0b:59:47:fa:ff:2c:4d:be: 52:9f:4a:87:21:a1:3b:51:bc:b5:6c:76:54:c0:c2:5b:7b:4d: f4:0c:96:cb:14:d3:75:1a:86:b0:be:66:20:98:0c:ef:d7:a6: 05:3e:68:32:23:fa:b0:40:fe:f5:93:e5:af:3b:93:b7:f6:5f: 53:38:69:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r31JVD17F4KoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk NDJlNzYwM2YtODYyYi00ZDk5LThhOWMtY2JlNTNlNmFhMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLy9u69iQ8enYZN/qNec0QSUmanxzHjCRmYV CeU2Z6iP9Jw53/RnVKkNRmJCxtE68wUzX1OyXcg5soYy9yFZILCFru4kbTSLthXj OBW7QVpc+nBJbBFkCRqv6QEo68P5d5R+VSDYHSKt20eyfbs4HgDkNy6KxOPE3nyR MFhTfmNioiiYrZ+eQbLsDlUN24FT6PuSLWx3ffhQGAcoPDQa1ioEXIOP3fFc+GgX iK4tVgxrWdDfVs3oX8amlkpSYLQVR8EH88SZoIn86eWBnFBVrYVhlQ93Ykyz+hLX xgZekNLkEOZMnh7kM2WPYRRYRuA0Nw178G4SzCHo7fzGBRN1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6w/9PgL2tC5jUXYE+p/bclBZhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzFkMGY3ZDYtOWFmZC0z MzhkLWJlMmItZjA1ZWViMzVmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuoaxyUMhDVgw0X9O/f9LqTetdFesj08UlUXdjKoFWAO+Rhw2P6AxoY wpr5gAfOLcgpehUTThit3pUTY6pkermM5ITRFOaItE4Y8SPTmECmDWGyGNcBLevo ahciAH4342+p2Id+9B92b0Q2I8ArwaCGm7x8bO/ISeoF5OaJR91MyzfYzAhjIuQK EOJd7C7s29czSUf2sWy6fDn6ny0wivkMrEfyapXGl0lsTes69mQ8tPuiMqU5EwVY wbgNpl4LWUf6/yxNvlKfSochoTtRvLVsdlTAwlt7TfQMlssU03UahrC+ZiCYDO/X pgU+aDIj+rBA/vWT5a87k7f2X1M4aUU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:27:07 2025 by rpki-client