$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa File: 7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa (raw, json) Hash identifier: 7Ht4STXv18d+KIdjYzRgib5Us3kbvo0L5Z7N30Ip7Zc= Subject key identifier: 9E:E4:5E:38:EA:59:F3:B1:68:CC:B1:B7:8F:60:61:DB:8C:16:B0:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF3435B0C1C47D9945C7C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:35:b0:c1:c4:7d:99:45:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2bff089f-040f-4330-b55e-fae616d11de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:33:5b:5d:6c:12:73:2e:c8:37:ee:52:90: 8c:2c:84:d3:c7:79:3c:4e:ad:27:be:d3:39:6b:d2: 18:fe:36:d6:21:f9:3b:c3:4f:9d:84:7e:51:ee:8c: 7c:91:0d:66:06:e9:e2:75:5e:92:6f:c2:9b:6b:ab: 70:a2:71:9f:2d:0a:46:8f:74:63:9a:75:79:7f:8e: cf:cf:df:31:97:3a:b4:bd:34:47:df:20:44:e9:ee: d8:df:6b:52:fc:fe:82:ce:33:8b:5b:ed:95:29:51: b3:55:b8:56:5f:f6:51:23:84:be:82:2a:6c:e0:dd: 2a:f9:79:c3:22:f8:d7:0a:54:9f:d2:33:26:4b:c8: 69:68:2f:a2:d1:b2:87:51:27:2f:73:37:9d:61:63: 24:5a:e5:af:9e:7e:7a:6b:02:38:be:43:2f:55:35: 09:77:b2:70:79:c4:cd:70:13:57:c3:3d:c2:3a:57: aa:d5:a2:41:e1:81:8c:96:85:35:e2:12:a8:96:99: 80:62:64:1c:1b:9a:35:67:46:64:83:f3:eb:46:64: 8e:05:58:67:7c:6e:48:b6:ca:b5:ec:63:82:e4:93: 55:d8:12:30:5f:8c:03:08:e8:ec:f9:5c:e5:05:ad: 55:d1:53:66:9d:51:b7:af:db:06:dc:c9:6b:35:38: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E4:5E:38:EA:59:F3:B1:68:CC:B1:B7:8F:60:61:DB:8C:16:B0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:71:54:0e:12:0c:62:93:97:b9:33:03:cc:f0:0e:fd:bd:a7: eb:50:11:d2:58:3d:3e:f1:cf:65:34:81:3f:c5:6d:2b:62:05: 93:09:3e:7e:f3:50:23:1b:4f:c8:de:e8:b9:5b:6d:6f:71:75: 2d:d3:d3:15:78:89:ed:6e:9d:c4:97:bf:14:f1:79:f0:c6:71: f5:07:5a:76:b5:d9:ca:6b:c4:41:06:ad:a9:80:9e:95:f2:dc: 1b:dc:03:23:59:a6:14:b0:dd:15:91:65:ce:9d:1e:e4:81:20: e8:d5:06:7b:c8:0a:11:a1:a5:99:c0:e2:64:d8:e9:6e:8a:c4: af:31:2a:7b:eb:88:90:ef:27:ea:a5:92:43:62:44:82:fc:b7: 5b:07:3f:69:f8:ec:75:da:56:da:4f:66:42:2b:fc:23:3f:c7: fe:c6:c9:de:ea:8c:cf:e8:ab:fa:ed:ad:39:0d:52:ae:f0:27: 66:2e:91:03:ce:1a:5d:66:79:3b:b3:fc:74:ab:27:68:79:5b: dd:f7:27:4a:24:ee:88:2b:26:e8:38:bc:f9:b4:eb:69:b4:bb: 66:8b:93:e0:46:5c:7a:3b:8e:b6:6e:ab:ff:17:5b:68:68:59: 48:50:2f:28:d2:dc:88:29:64:ff:49:1c:a9:f5:67:e0:3c:2b: 53:dd:76:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzQ1sMHEfZlFx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmJmZjA4OWYtMDQwZi00MzMwLWI1NWUtZmFlNjE2ZDExZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslszW11sEnMuyDfuUpCMLITTx3k8Tq0nvtM5 a9IY/jbWIfk7w0+dhH5R7ox8kQ1mBunidV6Sb8Kba6twonGfLQpGj3RjmnV5f47P z98xlzq0vTRH3yBE6e7Y32tS/P6CzjOLW+2VKVGzVbhWX/ZRI4S+gips4N0q+XnD IvjXClSf0jMmS8hpaC+i0bKHUScvczedYWMkWuWvnn56awI4vkMvVTUJd7JwecTN cBNXwz3COleq1aJB4YGMloU14hKolpmAYmQcG5o1Z0Zkg/PrRmSOBVhnfG5Itsq1 7GOC5JNV2BIwX4wDCOjs+VzlBa1V0VNmnVG3r9sG3MlrNThpfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7kXjjqWfOxaMyxt49gYduMFrBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0ZTRjNzEtNTNjZS0z Y2RkLWJjODAtN2E0YmJmZDlhNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRxVA4SDGKTl7kzA8zwDv29p+tQEdJYPT7xz2U0gT/FbStiBZMJPn7z UCMbT8je6LlbbW9xdS3T0xV4ie1uncSXvxTxefDGcfUHWna12cprxEEGramAnpXy 3BvcAyNZphSw3RWRZc6dHuSBIOjVBnvIChGhpZnA4mTY6W6KxK8xKnvriJDvJ+ql kkNiRIL8t1sHP2n47HXaVtpPZkIr/CM/x/7Gyd7qjM/oq/rtrTkNUq7wJ2YukQPO Gl1meTuz/HSrJ2h5W933J0ok7ogrJug4vPm062m0u2aLk+BGXHo7jrZuq/8XW2ho WUhQLyjS3IgpZP9JHKn1Z+A8K1Pddq8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:56 2025 by rpki-client