$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa File: abe29d06-94cb-33bf-b8fd-20f50b0715db.roa (raw, json) Hash identifier: /uX45pK2gM7KsOZ4h8nAINQwE2jJ/AUpu0mGYvjIsDM= Subject key identifier: B2:79:E5:19:09:78:06:34:33:BD:70:63:66:49:A7:97:8D:B7:86:66 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849631EC8C355665EB778CCE620 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c8:c3:55:66:5e:b7:78:cc:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=5e936890-dc68-4d70-bb7a-5e80246811c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:14:9e:93:8e:7b:b5:81:7b:08:8c:01:e8: 92:32:0b:72:b4:13:54:b5:8e:1c:79:09:a8:bb:00: 7b:b1:8f:bf:e0:f2:11:ad:6a:50:68:23:fb:ff:f3: f2:ff:d0:9a:ae:51:3b:d7:0f:6b:91:8b:7d:f0:a0: f4:8f:31:01:a9:e8:00:b6:9b:d5:69:5d:ac:0c:ca: 28:5e:c1:bd:90:cc:cf:70:ba:36:a7:bf:da:10:04: 42:42:13:01:df:78:46:1e:bc:34:b7:d7:fb:c1:24: 7b:22:32:d5:da:5e:03:2d:eb:81:b9:d7:70:08:ad: 5a:73:23:73:a6:02:ed:ca:c6:e6:de:4a:f1:6e:65: ae:73:14:b0:07:b4:89:40:b0:1c:7e:71:91:fe:44: 89:e8:dc:20:3e:1d:80:50:aa:73:7a:3c:7c:a0:e6: 9a:d0:23:0c:49:09:dd:32:24:23:67:8c:66:42:32: b5:9b:31:44:93:c3:01:4c:6c:4a:32:90:e0:8e:e7: 2b:c7:8a:2b:91:a1:e9:5e:c5:8d:4c:dd:d2:d7:fc: c6:69:fd:72:7e:f6:a3:da:c5:db:30:90:18:bc:3b: 2c:56:71:ee:1e:5f:75:df:35:a3:65:27:be:40:e0: b7:0d:b2:06:d2:fa:21:0a:a0:d6:15:24:91:f8:4c: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:79:E5:19:09:78:06:34:33:BD:70:63:66:49:A7:97:8D:B7:86:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9d:f3:f5:50:aa:25:d4:2f:e9:47:54:b1:d8:2d:8a:ed:3c: ac:2e:ea:ae:b9:b0:33:dd:94:0c:23:7b:99:51:04:1c:e3:bb: 35:dd:2b:5b:91:2d:7d:9a:d4:68:a5:b1:03:27:91:46:17:f1: 63:05:2d:f3:3b:cc:13:3e:21:0a:26:6f:3a:d5:26:0c:a1:54: 04:e4:c9:81:9e:22:b7:7d:a8:7d:6f:5d:dd:db:66:69:0a:8a: 35:e4:c2:f6:51:02:78:cb:a3:91:72:11:a9:4a:bb:8f:78:e1: a3:c7:10:b9:61:4b:96:f4:28:e9:23:75:85:68:a6:28:67:8a: e6:62:5a:1a:8a:b2:38:23:76:e1:ee:d0:da:0a:7b:1a:92:ef: 18:ea:d2:9f:a6:57:4e:62:92:6c:5b:d9:0a:80:20:99:c1:d2: b2:85:95:b9:ef:17:53:1f:e5:82:fc:ca:84:d5:22:32:7a:f5: d9:50:6a:3b:50:68:5b:6c:8e:35:92:02:fd:4b:35:2e:d8:c7: 5d:91:34:5e:6e:0e:e6:a9:3a:41:82:4a:72:20:84:84:6b:bf: 9c:33:57:81:fa:65:e7:db:d0:a0:9e:b2:b9:a2:09:60:90:ba: b1:60:15:8e:75:9f:8a:cd:3e:c1:b5:a2:94:c3:87:a0:09:60: 35:85:64:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsjDVWZet3jM5iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NWU5MzY4OTAtZGM2OC00ZDcwLWJiN2EtNWU4MDI0NjgxMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRwUnpOOe7WBewiMAeiSMgtytBNUtY4ceQmo uwB7sY+/4PIRrWpQaCP7//Py/9CarlE71w9rkYt98KD0jzEBqegAtpvVaV2sDMoo XsG9kMzPcLo2p7/aEARCQhMB33hGHrw0t9f7wSR7IjLV2l4DLeuBuddwCK1acyNz pgLtysbm3krxbmWucxSwB7SJQLAcfnGR/kSJ6NwgPh2AUKpzejx8oOaa0CMMSQnd MiQjZ4xmQjK1mzFEk8MBTGxKMpDgjucrx4orkaHpXsWNTN3S1/zGaf1yfvaj2sXb MJAYvDssVnHuHl913zWjZSe+QOC3DbIG0vohCqDWFSSR+EyR4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ55RkJeAY0M71wY2ZJp5eNt4ZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJlMjlkMDYtOTRjYi0z M2JmLWI4ZmQtMjBmNTBiMDcxNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEid8/VQqiXUL+lHVLHYLYrtPKwu6q65sDPdlAwje5lRBBzjuzXdK1uR LX2a1GilsQMnkUYX8WMFLfM7zBM+IQombzrVJgyhVATkyYGeIrd9qH1vXd3bZmkK ijXkwvZRAnjLo5FyEalKu4944aPHELlhS5b0KOkjdYVopihniuZiWhqKsjgjduHu 0NoKexqS7xjq0p+mV05ikmxb2QqAIJnB0rKFlbnvF1Mf5YL8yoTVIjJ69dlQajtQ aFtsjjWSAv1LNS7Yx12RNF5uDuapOkGCSnIghIRrv5wzV4H6Zefb0KCesrmiCWCQ urFgFY51n4rNPsG1opTDh6AJYDWFZKM= -----END CERTIFICATE-----Generated at Sun Apr 27 09:36:10 2025 by rpki-client