$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa File: 785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa (raw, json) Hash identifier: Ouzsg6j7TfcRMSPQvNLJNgwl8RRtmC6/If54+5qrUFo= Subject key identifier: EE:DC:C3:78:25:0D:70:24:37:78:A9:63:FA:C7:22:17:D4:99:09:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABDD1EB2D80BE04980C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:d1:eb:2d:80:be:04:98:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=53de92cb-97bb-48d7-a785-0205d1f65ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:86:e4:e0:d9:6c:b5:11:14:e8:86:59:54: 5c:9f:7d:22:1d:67:73:ee:58:e9:85:55:7e:ab:07: 2e:3f:8f:d8:d1:36:55:17:95:57:b2:ab:61:00:e1: 11:d2:92:20:2c:13:c9:ce:f4:cc:7a:59:d8:f6:17: 57:53:a4:82:6b:4c:13:2b:68:2c:7f:45:27:93:e1: de:7f:b7:e8:da:8d:3e:9c:ea:53:51:6d:62:39:6e: bc:e5:f4:90:e7:21:0d:ed:34:62:bb:53:cf:93:ab: 26:fc:2a:43:37:49:21:8e:cd:05:49:0c:0a:66:9d: 67:5f:e1:16:e3:21:19:f1:5b:a7:07:e4:f7:a9:a1: 75:28:b6:a2:98:e4:1e:93:28:8f:f4:d5:00:ce:1f: c5:8b:cd:0e:ea:28:01:1e:6c:5d:cb:26:b8:47:08: fd:f2:03:67:ce:5e:13:08:ec:6e:22:ab:04:bb:c8: da:42:c6:8b:1c:bf:54:6f:3d:fb:bd:b2:29:8f:45: 0d:43:12:6b:07:f7:07:84:bf:7f:46:84:f0:00:a1: 8b:c2:59:b5:93:40:89:ec:81:c0:3c:e9:a4:2a:47: b8:a7:7e:15:50:4f:17:2b:39:0d:1e:1e:66:16:ff: ff:cc:be:a4:a2:fe:9a:53:3f:22:37:78:ea:54:5e: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DC:C3:78:25:0D:70:24:37:78:A9:63:FA:C7:22:17:D4:99:09:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a1:4a:02:7e:21:9b:ce:25:b1:a5:c3:1e:c9:79:b1:af:ce: a4:e7:88:3b:a9:db:b9:8e:2f:1b:3d:3f:ec:b2:56:b8:98:51: 4c:54:ce:81:37:25:79:95:43:17:6f:c4:10:c7:d4:c5:5a:e1: b4:ce:43:57:7a:59:0b:2c:ba:5e:84:72:45:4e:e2:60:44:bf: 96:13:f3:90:03:88:ef:21:19:bd:46:68:3a:66:29:e6:e9:cd: 57:94:00:bd:46:e3:8f:8d:41:81:2a:d7:e3:b2:a4:5b:66:6e: 19:0f:05:9c:d6:df:c2:9b:33:37:f3:02:e0:7b:be:31:5f:ee: 80:8d:99:f8:03:6c:d7:8c:c6:bc:ba:12:51:e2:6e:aa:35:fc: 6a:44:1d:84:13:6a:14:ed:15:68:95:42:6b:d7:46:68:3c:53: 8a:ad:78:b0:cb:13:72:ac:c4:2c:cb:9f:9e:ef:7c:d8:e3:1c: d3:bb:bc:3a:50:6d:69:bf:6f:17:04:91:67:73:1f:8f:34:69: d4:01:64:a1:ed:fa:b6:09:33:90:6e:40:bd:02:0e:98:92:85: d4:ce:99:1b:6a:50:c8:dc:d3:0c:8e:39:94:f8:8f:ce:38:d5: 27:54:89:c9:b7:15:90:dc:b8:1f:47:52:08:0b:c4:09:d7:f2: 38:39:cc:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r3R6y2AvgSYDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk NTNkZTkyY2ItOTdiYi00OGQ3LWE3ODUtMDIwNWQxZjY1ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/2G5ODZbLURFOiGWVRcn30iHWdz7ljphVV+ qwcuP4/Y0TZVF5VXsqthAOER0pIgLBPJzvTMelnY9hdXU6SCa0wTK2gsf0Unk+He f7fo2o0+nOpTUW1iOW685fSQ5yEN7TRiu1PPk6sm/CpDN0khjs0FSQwKZp1nX+EW 4yEZ8VunB+T3qaF1KLaimOQekyiP9NUAzh/Fi80O6igBHmxdyya4Rwj98gNnzl4T COxuIqsEu8jaQsaLHL9Ubz37vbIpj0UNQxJrB/cHhL9/RoTwAKGLwlm1k0CJ7IHA POmkKke4p34VUE8XKzkNHh5mFv//zL6kov6aUz8iN3jqVF4B/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7cw3glDXAkN3ipY/rHIhfUmQlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg1ZWY2YzEtMGYyOS0z MzcyLWE4MGYtY2UyNjllNzZiNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2hSgJ+IZvOJbGlwx7JebGvzqTniDup27mOLxs9P+yyVriYUUxUzoE3 JXmVQxdvxBDH1MVa4bTOQ1d6WQssul6EckVO4mBEv5YT85ADiO8hGb1GaDpmKebp zVeUAL1G44+NQYEq1+OypFtmbhkPBZzW38KbMzfzAuB7vjFf7oCNmfgDbNeMxry6 ElHibqo1/GpEHYQTahTtFWiVQmvXRmg8U4qteLDLE3KsxCzLn57vfNjjHNO7vDpQ bWm/bxcEkWdzH480adQBZKHt+rYJM5BuQL0CDpiShdTOmRtqUMjc0wyOOZT4j844 1SdUicm3FZDcuB9HUggLxAnX8jg5zHY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:52:26 2025 by rpki-client