$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74a99d73-a23b-3461-a293-5dbdb6ebbeef.roa File: 74a99d73-a23b-3461-a293-5dbdb6ebbeef.roa (raw, json) Hash identifier: ofvKQ/wJn/2aaj1jbpcLWVE5vQCqpNRWcI7dhAX0g7c= Subject key identifier: BD:07:52:0E:C8:F5:17:74:D1:96:DC:55:25:EE:BD:AB:A0:AE:8A:C7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849B9AA0AE7211B348622D99200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74a99d73-a23b-3461-a293-5dbdb6ebbeef.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 8069 IP address blocks: 20.33.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:e7:21:1b:34:86:22:d9:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=f67e6010-25c3-451c-984a-6418925de779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:34:e4:dd:73:f0:42:c8:d5:f4:ea:c8:28: 29:54:76:75:f6:b2:0b:dd:45:e6:9a:a6:34:60:31: a3:1e:1d:54:bb:53:76:f9:a1:5f:c2:9e:8f:2c:97: 4a:4d:99:67:80:b7:b8:40:7b:ef:80:26:e5:01:a6: 52:74:98:5e:df:7e:ae:bd:eb:ee:79:2e:b1:9f:de: 68:7d:e4:9f:ff:77:26:31:20:e6:e1:70:aa:b3:7a: ac:d6:f9:cf:2a:07:83:58:a6:38:1f:0f:6f:64:c8: af:67:33:9c:b5:f0:73:3c:d7:cb:20:9c:a4:25:e1: 5c:8f:7f:28:50:b9:ca:c4:d7:58:eb:15:32:f1:2b: e6:eb:b8:d6:31:c0:63:27:9a:eb:20:e6:bf:b8:76: 6a:a5:9d:31:2a:39:90:ac:15:78:0a:b9:d8:31:3b: 78:88:5c:7e:0f:9c:78:9e:05:3a:e4:9d:e8:3c:88: 04:e9:ad:88:f4:ba:92:c8:1f:80:bc:27:e0:55:ac: 14:b4:59:1d:1b:9e:bb:71:0f:f1:1c:b8:1f:c7:fe: 2e:e4:8c:75:21:80:6f:00:f2:a2:bb:1b:7d:6f:15: 55:14:42:1e:1b:3d:bb:30:d4:20:d0:a1:0f:c5:09: 23:09:4b:4f:b5:d3:6a:b4:02:50:73:54:ee:97:7b: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:52:0E:C8:F5:17:74:D1:96:DC:55:25:EE:BD:AB:A0:AE:8A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74a99d73-a23b-3461-a293-5dbdb6ebbeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8d:c2:cf:fe:d5:20:41:32:43:06:1d:b7:c2:46:e6:92:75: 7c:bf:00:31:aa:8a:72:c9:f7:e2:f4:87:63:e5:2d:96:da:c3: 62:e1:66:51:b7:bb:62:b8:0a:e1:cd:2c:06:0a:4e:1a:5e:a9: 20:59:4a:05:ee:3c:3c:14:44:53:5a:f5:19:f3:8e:04:ba:f2: 59:53:b0:f0:ba:9e:46:1b:8b:fa:7e:96:b2:c9:75:0e:7f:36: a3:cf:3a:48:ec:f0:ef:44:b9:1e:ab:0b:58:92:25:f3:6b:6c: ba:c8:f1:7b:e1:b4:aa:92:6e:2c:e3:5f:f3:2b:0c:44:3a:45: b9:d1:b1:ca:3c:66:98:fd:8a:0c:f2:4d:c4:f8:1c:c3:1f:5e: 63:31:5a:86:fc:7f:ba:fc:d7:52:dd:36:78:9e:81:2a:af:d3: 1a:69:76:2a:ce:d5:1f:ba:82:d4:5b:a6:e0:51:76:4c:3c:b4: f3:60:9d:78:7f:04:cf:70:09:74:17:24:71:04:fa:2c:cf:06: 05:73:61:ca:f8:25:99:b2:0d:e2:71:08:bc:99:c8:0a:9f:56: 2f:11:e7:42:e4:57:b4:e9:97:8c:ca:1d:bb:45:22:d4:0a:0c: fa:9f:9c:28:ed:3b:e2:8e:e0:03:18:a0:cf:5e:12:17:fd:03: f8:0f:4a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgrnIRs0hiLZkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjY3ZTYwMTAtMjVjMy00NTFjLTk4NGEtNjQxODkyNWRlNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdY05N1z8ELI1fTqyCgpVHZ19rIL3UXmmqY0 YDGjHh1Uu1N2+aFfwp6PLJdKTZlngLe4QHvvgCblAaZSdJhe336uvevueS6xn95o feSf/3cmMSDm4XCqs3qs1vnPKgeDWKY4Hw9vZMivZzOctfBzPNfLIJykJeFcj38o ULnKxNdY6xUy8Svm67jWMcBjJ5rrIOa/uHZqpZ0xKjmQrBV4CrnYMTt4iFx+D5x4 ngU65J3oPIgE6a2I9LqSyB+AvCfgVawUtFkdG567cQ/xHLgfx/4u5Ix1IYBvAPKi uxt9bxVVFEIeGz27MNQg0KEPxQkjCUtPtdNqtAJQc1Tul3tdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0HUg7I9Rd00ZbcVSXuvaugrorHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzRhOTlkNzMtYTIzYi0z NDYxLWEyOTMtNWRiZGI2ZWJiZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiNws/+1SBBMkMGHbfCRuaSdXy/ADGqinLJ9+L0h2PlLZbaw2LhZlG3 u2K4CuHNLAYKThpeqSBZSgXuPDwURFNa9RnzjgS68llTsPC6nkYbi/p+lrLJdQ5/ NqPPOkjs8O9EuR6rC1iSJfNrbLrI8XvhtKqSbizjX/MrDEQ6RbnRsco8Zpj9igzy TcT4HMMfXmMxWob8f7r811LdNniegSqv0xppdirO1R+6gtRbpuBRdkw8tPNgnXh/ BM9wCXQXJHEE+izPBgVzYcr4JZmyDeJxCLyZyAqfVi8R50LkV7Tpl4zKHbtFItQK DPqfnCjtO+KO4AMYoM9eEhf9A/gPShE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:53:41 2025 by rpki-client