$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa File: 95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa (raw, json) Hash identifier: e6haZJqtWEqgrBrYyYlin+Ea6h5zbCMGQ8aM1ngeQ2Y= Subject key identifier: D5:EA:55:71:EC:9F:99:F1:BD:23:16:AC:91:7B:DC:D3:FD:61:BF:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABDB5B8B6041133127800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:b5:b8:b6:04:11:33:12:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=fa683a29-462a-4e7e-9c43-d509ea4ecd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:91:13:f0:c1:58:f7:71:2f:a3:8d:57:9d: 96:71:a0:f8:11:f6:d2:ed:85:96:74:22:07:72:cd: 84:93:74:9a:d1:1d:05:8e:87:d7:c0:fc:01:38:d1: 40:7d:16:91:50:17:a7:d2:00:3b:8c:fa:ff:32:5b: 56:6c:41:27:4a:ea:f1:64:36:4a:7e:e3:49:e4:7b: d6:de:fc:f9:50:22:1d:e6:09:b0:b9:00:5f:be:2d: 7d:34:62:71:64:d9:18:c1:23:25:14:1b:16:67:1f: dd:07:82:f4:e7:a0:ac:e1:3c:2a:44:a1:6a:ae:74: d6:80:57:28:1b:a2:7e:1a:24:7f:78:ef:e1:1b:60: a1:f0:81:dc:98:4c:ac:26:b5:66:91:d7:17:b6:e6: f4:89:b3:6c:8b:db:03:81:05:6e:7d:a3:9d:9b:a2: a1:f2:67:69:46:b7:a1:cb:1d:ec:93:d3:4e:45:8c: 10:6a:57:15:3d:5a:d6:91:9b:a2:58:89:87:02:f0: 86:f6:4e:12:6a:4b:c1:73:d6:2b:3e:2a:86:4c:91: be:b8:2f:71:d4:ca:db:49:f3:ef:0b:5e:98:c3:fe: 9f:c5:ec:17:8c:6c:41:a5:79:11:42:dd:e6:2e:7b: 1b:7c:46:fc:e2:86:28:83:89:12:ec:8b:9d:24:74: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:55:71:EC:9F:99:F1:BD:23:16:AC:91:7B:DC:D3:FD:61:BF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e9:c0:f0:d4:6b:0b:a2:8e:88:28:c2:19:f7:c4:fc:d9:c6: 98:62:8f:ea:ba:be:48:2d:66:79:75:e0:5f:ae:df:d7:89:61: cb:20:0a:16:17:6b:ea:7e:30:2c:56:ab:b8:30:5d:12:19:3b: d6:6d:2b:8c:11:ae:16:74:56:f4:af:d5:a6:9a:69:e2:1d:c7: b0:f9:96:ea:0c:c8:3e:03:20:55:ef:16:2f:70:66:02:22:0e: 2b:8e:77:05:0b:e9:73:72:cb:a9:e8:f6:bd:8a:73:a9:45:49: 34:8c:5a:82:df:86:df:3c:55:f3:a9:49:f9:90:6c:f1:15:58: d3:96:c6:d1:ea:77:5c:a4:00:fd:ae:11:03:49:39:c3:99:be: 7b:04:a9:dd:70:a9:9a:81:34:ce:ea:22:00:b9:d2:e8:04:09: 01:f4:17:36:34:fe:1d:72:db:69:24:6d:0f:c5:0f:ed:84:35: 59:c8:89:2f:4f:f8:12:8d:97:5d:b2:fc:6a:22:d2:aa:58:6f: 49:a9:ce:0c:2f:21:81:ef:84:3d:41:e4:2f:cd:f5:58:3b:a2: c9:4c:b2:46:b4:f0:23:49:18:ef:60:79:b5:48:2e:e3:6e:f9: 65:39:85:24:b2:7a:03:9a:dd:cb:eb:7e:8d:a6:ae:d9:c5:4f: be:4f:e4:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r21uLYEETMSeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk ZmE2ODNhMjktNDYyYS00ZTdlLTljNDMtZDUwOWVhNGVjZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBiRE/DBWPdxL6ONV52WcaD4EfbS7YWWdCIH cs2Ek3Sa0R0FjofXwPwBONFAfRaRUBen0gA7jPr/MltWbEEnSurxZDZKfuNJ5HvW 3vz5UCId5gmwuQBfvi19NGJxZNkYwSMlFBsWZx/dB4L056Cs4TwqRKFqrnTWgFco G6J+GiR/eO/hG2Ch8IHcmEysJrVmkdcXtub0ibNsi9sDgQVufaOdm6Kh8mdpRreh yx3sk9NORYwQalcVPVrWkZuiWImHAvCG9k4SakvBc9YrPiqGTJG+uC9x1MrbSfPv C16Yw/6fxewXjGxBpXkRQt3mLnsbfEb84oYog4kS7IudJHTkdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXqVXHsn5nxvSMWrJF73NP9Yb9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTVmMTRiM2MtMjI4Ny0z YWM3LTkxYTAtNWU0NTU3MmM4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELpwPDUawuijogowhn3xPzZxphij+q6vkgtZnl14F+u39eJYcsgChYX a+p+MCxWq7gwXRIZO9ZtK4wRrhZ0VvSv1aaaaeIdx7D5luoMyD4DIFXvFi9wZgIi DiuOdwUL6XNyy6no9r2Kc6lFSTSMWoLfht88VfOpSfmQbPEVWNOWxtHqd1ykAP2u EQNJOcOZvnsEqd1wqZqBNM7qIgC50ugECQH0FzY0/h1y22kkbQ/FD+2ENVnIiS9P +BKNl12y/Goi0qpYb0mpzgwvIYHvhD1B5C/N9Vg7oslMska08CNJGO9gebVILuNu +WU5hSSyegOa3cvrfo2mrtnFT75P5HI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:11 2025 by rpki-client