$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa File: 8ebe7e82-df85-3231-a9f4-547d1fd54426.roa (raw, json) Hash identifier: LllcbRz3DbrMx6V9spxaHYktlhrKlkKCTtYVRECyWPc= Subject key identifier: 01:7C:7A:94:A8:64:2F:CD:32:30:45:66:F9:30:18:32:50:40:6B:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A4BF4D27F7CEDAB1600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:4b:f4:d2:7f:7c:ed:ab:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=b8f96c8e-ba40-4172-be09-de86575692d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:cc:d5:71:c0:7d:4c:4d:fa:82:56:e6:9c: 19:c1:13:46:4a:f1:69:2b:04:25:4f:a5:36:0a:9e: 5c:81:84:f0:65:60:da:be:04:0e:7d:86:ac:c8:4f: ee:d8:41:e0:5f:33:40:7a:1b:1b:68:c5:c8:b2:8a: 61:ec:04:91:55:f2:b6:45:b9:a0:1c:8f:27:e1:95: c2:c9:92:df:9d:34:ef:a6:25:38:d2:68:7e:1d:2b: 00:28:4f:23:27:20:44:a7:8e:17:61:01:0d:7e:77: 19:b3:d6:77:83:e2:5c:d9:30:c4:f5:f9:10:e7:73: 6f:23:61:e8:5e:94:c3:b0:db:2a:a6:1e:c3:cf:bd: a1:11:ba:46:15:62:93:3f:63:3b:76:02:de:39:ad: f8:4b:fb:76:2d:93:34:93:73:ed:cb:35:9c:99:65: a8:d7:09:c5:ea:df:79:d1:96:f1:e0:57:7e:2e:87: 69:a5:26:6c:6d:73:69:3a:9b:ba:db:f2:da:a3:54: 2a:b9:8f:84:58:21:2d:5f:7a:e3:10:7a:e5:e9:dc: 65:e6:9b:39:e9:f4:66:d4:97:f7:36:b7:d7:8d:0f: 0b:81:40:63:44:22:8a:a7:7b:35:a8:39:d0:38:85: 03:a5:c4:c3:a2:c1:42:c9:82:1b:8c:5a:79:5d:69: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:7A:94:A8:64:2F:CD:32:30:45:66:F9:30:18:32:50:40:6B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:9f:3d:ef:08:30:bd:52:40:38:56:11:02:d9:9e:19:9f: e1:c1:b2:c3:4e:76:d5:60:4b:ff:51:84:b4:6a:8c:46:9f:cd: cd:ae:77:01:80:05:2b:d5:a1:55:ad:ba:90:f4:0e:e4:08:71: 38:43:0b:e7:49:4e:cc:f9:91:0d:b2:13:54:45:08:c3:56:ce: 1b:cd:ef:8f:7f:54:13:53:11:1a:c0:f7:a9:4a:44:bf:6f:70: f8:97:b1:4b:36:25:8b:d6:24:50:f5:03:e3:0a:26:02:e3:6c: e7:a5:77:86:83:75:7d:62:96:c5:8e:92:f1:12:96:64:ad:5d: 6e:ea:fd:97:af:ad:1e:db:7b:8b:18:c6:90:c0:59:05:d7:14: 5a:2d:60:f1:22:e1:be:01:97:65:cc:5d:f2:a5:84:a7:d8:50: fc:5d:52:86:20:34:dd:d7:48:ba:e4:80:a1:1a:9a:1e:11:75: 38:32:9b:c2:fc:c8:b8:a1:0b:63:7d:78:72:1b:4d:85:d1:67: 13:08:04:e5:5f:47:83:a1:e3:fc:bd:2d:be:be:cf:04:d9:e8: 65:48:a7:a4:cf:a5:0f:5c:94:1d:40:a7:0a:f1:82:41:f2:4c: 84:df:37:be:e5:c9:31:72:d9:42:37:34:e2:85:aa:47:3a:8f: f8:fb:dd:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnpL9NJ/fO2rFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YjhmOTZjOGUtYmE0MC00MTcyLWJlMDktZGU4NjU3NTY5MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRzM1XHAfUxN+oJW5pwZwRNGSvFpKwQlT6U2 Cp5cgYTwZWDavgQOfYasyE/u2EHgXzNAehsbaMXIsoph7ASRVfK2RbmgHI8n4ZXC yZLfnTTvpiU40mh+HSsAKE8jJyBEp44XYQENfncZs9Z3g+Jc2TDE9fkQ53NvI2Ho XpTDsNsqph7Dz72hEbpGFWKTP2M7dgLeOa34S/t2LZM0k3PtyzWcmWWo1wnF6t95 0Zbx4Fd+LodppSZsbXNpOpu62/Lao1QquY+EWCEtX3rjEHrl6dxl5ps56fRm1Jf3 NrfXjQ8LgUBjRCKKp3s1qDnQOIUDpcTDosFCyYIbjFp5XWmhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF8epSoZC/NMjBFZvkwGDJQQGvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGViZTdlODItZGY4NS0z MjMxLWE5ZjQtNTQ3ZDFmZDU0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqOnz3vCDC9UkA4VhEC2Z4Zn+HBssNOdtVgS/9RhLRqjEafzc2udwGA BSvVoVWtupD0DuQIcThDC+dJTsz5kQ2yE1RFCMNWzhvN749/VBNTERrA96lKRL9v cPiXsUs2JYvWJFD1A+MKJgLjbOeld4aDdX1ilsWOkvESlmStXW7q/ZevrR7be4sY xpDAWQXXFFotYPEi4b4Bl2XMXfKlhKfYUPxdUoYgNN3XSLrkgKEamh4RdTgym8L8 yLihC2N9eHIbTYXRZxMIBOVfR4Oh4/y9Lb6+zwTZ6GVIp6TPpQ9clB1ApwrxgkHy TITfN77lyTFy2UI3NOKFqkc6j/j73UM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:27:04 2025 by rpki-client