$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa File: 826b271f-edee-3676-98e4-6d4c334e95f2.roa (raw, json) Hash identifier: pJ6x3LeRh5oxXiXGW0pYZUOd9IQMlYV7+u9q1JxCfcU= Subject key identifier: E1:63:11:8A:60:EF:09:1D:5A:05:8B:CB:64:1D:04:41:91:36:BE:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA957B50F381E2BDE76040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:95:7b:50:f3:81:e2:bd:e7:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=f7072b25-1a74-45c2-bd9d-77bd4fd0cb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:49:dc:50:17:1b:39:e4:19:15:dc:59:d1: 80:e6:3a:07:ef:89:d6:21:ff:97:79:4b:d9:50:cf: cb:aa:c2:86:18:4b:d9:55:47:af:5d:78:9b:a7:eb: d2:c5:0c:f4:a6:8c:56:66:af:9c:df:54:a3:6d:44: 40:7d:1e:9e:e1:24:0a:7e:ae:16:fe:07:3b:7a:af: e4:8e:d2:c5:46:af:2e:8e:e6:6d:e1:4c:47:ba:63: dc:4a:03:19:99:34:f8:dc:a9:8a:ae:1c:76:ee:1a: 7a:33:8b:ec:b6:c0:dc:ac:7a:27:11:bc:36:28:65: 76:64:9b:d5:7c:e6:fd:ae:fe:39:5a:a4:94:64:1f: 2e:6e:ce:63:06:54:39:b3:b2:3a:f5:5c:94:13:1d: 90:fb:f0:0d:2f:4e:02:54:85:9a:35:52:f4:13:65: d7:58:16:d0:9b:af:a4:3a:53:06:7a:46:fb:ff:ca: f4:cd:77:47:a9:6c:04:46:c3:e5:c5:31:3a:2d:1e: 80:1a:bb:d7:b0:6c:0c:97:24:a6:a6:2e:03:e4:9f: f2:6e:78:8c:d5:d2:dc:bb:99:e4:1a:62:c0:de:02: b6:eb:2f:05:b7:01:81:93:fa:94:b6:a6:73:d6:3e: f4:11:1d:1a:ac:59:84:74:cb:bc:f2:72:be:52:29: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:11:8A:60:EF:09:1D:5A:05:8B:CB:64:1D:04:41:91:36:BE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0d:e5:aa:ab:04:0f:90:65:27:fb:48:d9:d9:c7:28:64:c1: 71:4d:bc:a2:e4:16:27:48:ee:74:18:ab:b1:5f:0d:ce:b5:07: 0c:f4:f5:0d:43:6c:08:a8:50:39:c1:85:c9:a9:6c:88:f1:85: b4:40:d9:a3:f1:be:04:e6:57:41:05:8d:86:20:09:93:4b:d5: 07:67:f0:47:71:71:e4:bb:ac:ab:0d:63:03:68:c9:0e:b1:99: 70:00:d3:60:d3:5d:15:03:d8:bb:b1:fc:8c:c7:56:04:1c:e3: 86:5f:08:8b:5b:0b:60:70:0b:50:10:41:e5:81:62:cc:38:5f: ea:7b:2a:b9:f8:c3:6e:45:28:dc:81:25:27:02:f8:bf:1f:18: 56:72:9a:29:b3:81:00:70:58:7e:02:a7:6c:bf:b6:eb:de:a2: 5f:b2:1b:11:76:71:dc:ac:c3:47:50:a5:6a:9e:ce:a8:f6:38: 34:59:67:95:b8:8d:72:db:c6:85:7f:ac:46:3e:11:6f:9e:af: c3:58:dc:d6:64:04:2e:b9:49:28:96:af:34:c1:9c:0a:1e:79: c4:45:4a:a3:e2:32:06:66:2d:16:0b:24:35:dd:2a:0d:f0:78: de:49:f6:70:65:79:f2:f1:b0:70:61:44:d7:26:b1:e6:0c:4f: b8:f4:8a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypV7UPOB4r3nYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk ZjcwNzJiMjUtMWE3NC00NWMyLWJkOWQtNzdiZDRmZDBjYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPRJ3FAXGznkGRXcWdGA5joH74nWIf+XeUvZ UM/LqsKGGEvZVUevXXibp+vSxQz0poxWZq+c31SjbURAfR6e4SQKfq4W/gc7eq/k jtLFRq8ujuZt4UxHumPcSgMZmTT43KmKrhx27hp6M4vstsDcrHonEbw2KGV2ZJvV fOb9rv45WqSUZB8ubs5jBlQ5s7I69VyUEx2Q+/ANL04CVIWaNVL0E2XXWBbQm6+k OlMGekb7/8r0zXdHqWwERsPlxTE6LR6AGrvXsGwMlySmpi4D5J/ybniM1dLcu5nk GmLA3gK26y8FtwGBk/qUtqZz1j70ER0arFmEdMu88nK+UimW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFjEYpg7wkdWgWLy2QdBEGRNr74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODI2YjI3MWYtZWRlZS0z Njc2LTk4ZTQtNmQ0YzMzNGU5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8N5aqrBA+QZSf7SNnZxyhkwXFNvKLkFidI7nQYq7FfDc61Bwz09Q1D bAioUDnBhcmpbIjxhbRA2aPxvgTmV0EFjYYgCZNL1Qdn8EdxceS7rKsNYwNoyQ6x mXAA02DTXRUD2Lux/IzHVgQc44ZfCItbC2BwC1AQQeWBYsw4X+p7Krn4w25FKNyB JScC+L8fGFZymimzgQBwWH4Cp2y/tuveol+yGxF2cdysw0dQpWqezqj2ODRZZ5W4 jXLbxoV/rEY+EW+er8NY3NZkBC65SSiWrzTBnAoeecRFSqPiMgZmLRYLJDXdKg3w eN5J9nBlefLxsHBhRNcmseYMT7j0iuQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:14 2025 by rpki-client