$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: VcHp8caRh/uzNGIyt5FY501dbPcWIFLhBoJ3kPkUG7k= Subject key identifier: 50:8C:46:DC:45:49:4B:39:96:29:1C:59:EC:CB:E2:1C:B0:E2:C3:51 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA75F2DBA58C977011E20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:5f:2d:ba:58:c9:77:01:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f044c0a8-5ccc-4444-a6a2-3f19900c22b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:fe:8c:75:be:ab:1e:d1:1e:12:69:7f:b7: 5a:c8:4e:f4:60:a3:88:95:83:c5:c8:b6:7f:f7:b8: 4f:19:39:6d:48:07:73:9e:ff:52:e7:2d:4f:a1:88: ba:c0:54:24:68:5e:4e:49:78:c3:8b:de:cc:c4:4e: 02:a5:3b:79:19:2a:0e:ca:e8:94:20:5e:3c:45:61: 19:37:04:d2:dd:86:e9:47:56:f3:c6:6c:38:10:2c: 0e:7e:15:34:8d:7f:85:c7:15:74:7b:8a:7a:64:85: 4b:98:ff:94:7f:90:24:f6:a8:73:be:3c:2a:d2:2a: e2:c3:79:67:77:06:b8:a7:08:d7:b4:0b:2b:34:98: f1:a2:28:98:62:2b:a3:a9:df:6c:07:f6:c1:08:69: b8:f2:4b:8b:4c:02:44:39:21:26:04:b8:3e:69:0f: de:b0:10:0d:e1:46:3e:ee:c0:7f:12:66:3e:75:46: 3e:c5:c4:07:d9:ed:cf:e0:56:a2:ff:81:2f:84:29: c7:e0:31:9a:ff:bb:10:b7:d9:2e:28:7d:a6:88:31: b0:4c:7e:8a:fe:15:07:8c:f9:2f:6a:3d:c5:7d:f2: 6f:67:98:0e:d7:97:57:0c:ca:20:ef:7d:16:4f:03: 3d:5c:26:35:3f:4a:91:4b:86:ce:11:50:aa:56:b2: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8C:46:DC:45:49:4B:39:96:29:1C:59:EC:CB:E2:1C:B0:E2:C3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ad:06:66:be:4d:ce:d0:66:fa:e0:05:c7:f7:42:d1:40:b1: c0:a8:81:a3:68:99:46:09:d7:56:37:08:70:4a:3d:ad:7a:42: f9:83:a5:f2:33:62:24:72:ab:aa:07:9b:4d:e1:fd:ae:6c:b3: a2:45:f2:8e:86:04:d5:8b:d9:86:16:08:48:05:18:27:6b:cd: a5:f9:93:2a:4e:94:ae:52:3e:04:ec:52:d1:ea:5d:c8:5b:c0: 23:d8:14:15:83:8d:bc:ac:a1:54:60:72:5d:7b:de:4c:8a:68: 3c:1e:b9:12:58:3a:41:d5:01:88:b8:d1:8f:2a:b9:f2:5b:c2: 5d:77:e8:2d:0b:21:c4:c9:84:32:4a:a2:1e:82:41:fd:7b:6e: 33:65:21:74:26:0c:38:cd:ce:dd:30:49:6f:59:b7:04:1e:bf: 2b:00:92:a4:57:60:70:b9:65:88:f1:e7:96:c6:09:c4:74:ea: 35:57:8a:71:5f:80:90:c7:5b:28:21:99:a1:b6:cf:e5:15:42: 9f:b7:33:38:3a:8c:8a:b3:1e:8a:7b:96:f7:31:62:ad:7f:26: ac:f0:5e:fe:09:54:2b:f7:7f:9a:2c:67:8b:3d:11:37:0b:b3: d8:7a:ad:dc:b7:5b:d5:23:cb:9e:93:e2:b2:c0:59:b6:30:95: 10:3c:8e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6dfLbpYyXcBHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjA0NGMwYTgtNWNjYy00NDQ0LWE2YTItM2YxOTkwMGMyMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVD+jHW+qx7RHhJpf7dayE70YKOIlYPFyLZ/ 97hPGTltSAdznv9S5y1PoYi6wFQkaF5OSXjDi97MxE4CpTt5GSoOyuiUIF48RWEZ NwTS3YbpR1bzxmw4ECwOfhU0jX+FxxV0e4p6ZIVLmP+Uf5Ak9qhzvjwq0iriw3ln dwa4pwjXtAsrNJjxoiiYYiujqd9sB/bBCGm48kuLTAJEOSEmBLg+aQ/esBAN4UY+ 7sB/EmY+dUY+xcQH2e3P4Fai/4EvhCnH4DGa/7sQt9kuKH2miDGwTH6K/hUHjPkv aj3FffJvZ5gO15dXDMog730WTwM9XCY1P0qRS4bOEVCqVrKSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCMRtxFSUs5likcWezL4hyw4sNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACutBma+Tc7QZvrgBcf3QtFAscCogaNomUYJ11Y3CHBKPa16QvmDpfIz YiRyq6oHm03h/a5ss6JF8o6GBNWL2YYWCEgFGCdrzaX5kypOlK5SPgTsUtHqXchb wCPYFBWDjbysoVRgcl173kyKaDweuRJYOkHVAYi40Y8qufJbwl136C0LIcTJhDJK oh6CQf17bjNlIXQmDDjNzt0wSW9ZtwQevysAkqRXYHC5ZYjx55bGCcR06jVXinFf gJDHWyghmaG2z+UVQp+3Mzg6jIqzHop7lvcxYq1/JqzwXv4JVCv3f5osZ4s9ETcL s9h6rdy3W9Ujy56T4rLAWbYwlRA8jqw= -----END CERTIFICATE-----Generated at Sun Jun 15 23:05:46 2025 by rpki-client