$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa File: 9b153f48-fda1-3324-9da3-41ec104e3952.roa (raw, json) Hash identifier: ywgafelupPVBJpLC/Y0bNBJK8WWRJItxqmd5/w/pClw= Subject key identifier: 68:84:A3:B4:14:F6:FB:9D:72:A3:52:33:F1:98:53:EE:D0:E5:53:B0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C20280F87D6655BDA387080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:28:0f:87:d6:65:5b:da:38:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=24d189cf-2f4f-4b44-bc4e-dceab1246c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:9b:43:5b:87:c6:16:b1:09:13:0f:1f:4d: 0c:35:67:0a:12:a6:50:95:80:09:7f:d2:a5:c0:d7: 6f:23:a2:26:c6:3d:8a:82:06:3e:69:e4:28:83:ee: fa:f8:98:de:07:a7:25:88:7b:a2:c9:27:7e:f2:09: ce:ef:ef:a8:b7:5d:20:70:e3:92:bc:8d:f8:9f:25: 57:9e:3c:e4:51:5d:6f:62:80:e3:7f:66:64:71:af: 7c:48:87:f2:23:c7:df:e1:7a:3b:0a:a7:db:e3:72: 5f:57:26:56:f4:af:a2:8e:ef:b9:d0:ff:59:14:53: 9b:50:f3:33:4e:1e:79:2a:ad:2e:c2:fe:02:45:bb: 5e:4b:a6:ff:9a:08:72:b1:6e:05:91:61:f4:56:84: 62:7f:bb:68:90:2f:16:29:f7:75:10:e6:6e:cb:7d: a2:67:a4:0e:6a:fc:1c:0c:b0:97:85:d7:f0:80:2d: d9:06:dd:e2:b5:04:69:f0:78:82:48:01:7c:69:f1: 1c:51:8b:45:02:4e:dd:73:8f:43:e7:06:ba:b2:c8: ab:c9:54:c4:27:8e:92:39:94:a2:55:32:63:92:57: 66:3a:92:e7:78:c8:f9:b5:34:58:96:dd:e2:04:86: 5c:43:f3:c3:57:36:ae:1f:ab:2e:0a:dd:1d:97:8c: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:84:A3:B4:14:F6:FB:9D:72:A3:52:33:F1:98:53:EE:D0:E5:53:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:05:62:26:8c:4c:2f:95:64:e4:a5:5a:94:f1:4b:b5:83:b6: 23:76:eb:e4:00:01:9c:28:bf:7b:7c:57:17:7a:96:1f:57:d9: f9:00:ab:82:c4:f3:20:eb:75:c1:9e:81:cf:b8:af:97:dd:c1: 6a:6f:11:a3:28:25:65:4d:a4:c9:8c:2a:d6:01:65:e9:df:1d: 4c:65:bd:e3:84:23:9c:1f:44:55:7f:2a:66:3d:33:ec:cf:f1: f3:f3:4a:a2:dd:c7:14:dd:4b:61:b2:64:bc:d0:01:80:5e:91: 80:98:7f:94:86:45:05:ea:68:ca:b1:c4:c2:bb:59:c9:94:73: 8e:3c:4c:cb:1c:e6:46:6d:4c:2d:eb:67:a7:e8:5f:82:e2:38: f2:67:cb:6a:e0:1b:50:4d:9d:9e:c2:52:f8:11:46:e4:7d:ec: 83:e6:0e:28:fb:64:7b:f5:24:0e:91:57:bf:c6:46:07:1e:3b: 23:8d:d8:02:c3:31:93:fe:57:29:f7:ca:2c:70:ed:19:d3:86: cb:a1:04:15:8f:67:df:4e:a0:c1:76:4a:17:d6:fc:3b:71:a9: 5e:e8:aa:30:b5:a0:74:2a:00:1a:47:b6:04:ba:ce:08:90:0e: 75:f4:cc:32:bd:75:13:91:7e:5a:5e:34:54:93:92:1a:e6:41: e0:92:ae:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICgPh9ZlW9o4cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MjRkMTg5Y2YtMmY0Zi00YjQ0LWJjNGUtZGNlYWIxMjQ2YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSmbQ1uHxhaxCRMPH00MNWcKEqZQlYAJf9Kl wNdvI6Imxj2KggY+aeQog+76+JjeB6cliHuiySd+8gnO7++ot10gcOOSvI34nyVX njzkUV1vYoDjf2Zkca98SIfyI8ff4Xo7Cqfb43JfVyZW9K+iju+50P9ZFFObUPMz Th55Kq0uwv4CRbteS6b/mghysW4FkWH0VoRif7tokC8WKfd1EOZuy32iZ6QOavwc DLCXhdfwgC3ZBt3itQRp8HiCSAF8afEcUYtFAk7dc49D5wa6ssiryVTEJ46SOZSi VTJjkldmOpLneMj5tTRYlt3iBIZcQ/PDVzauH6suCt0dl4xz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiEo7QU9vudcqNSM/GYU+7Q5VOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWIxNTNmNDgtZmRhMS0z MzI0LTlkYTMtNDFlYzEwNGUzOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0FYiaMTC+VZOSlWpTxS7WDtiN26+QAAZwov3t8Vxd6lh9X2fkAq4LE 8yDrdcGegc+4r5fdwWpvEaMoJWVNpMmMKtYBZenfHUxlveOEI5wfRFV/KmY9M+zP 8fPzSqLdxxTdS2GyZLzQAYBekYCYf5SGRQXqaMqxxMK7WcmUc448TMsc5kZtTC3r Z6foX4LiOPJny2rgG1BNnZ7CUvgRRuR97IPmDij7ZHv1JA6RV7/GRgceOyON2ALD MZP+Vyn3yixw7RnThsuhBBWPZ99OoMF2ShfW/DtxqV7oqjC1oHQqABpHtgS6zgiQ DnX0zDK9dRORflpeNFSTkhrmQeCSrjE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:52:44 2025 by rpki-client