$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa File: acaf306a-f973-3686-b377-298a76888713.roa (raw, json) Hash identifier: YzYVUfqidO7qN0rfyOfhJexJDdxApVtKNHY0+qBhXg8= Subject key identifier: 39:C2:C7:3E:C2:5A:5F:19:C7:03:73:10:A1:4C:E2:02:49:F7:36:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A119AC5F364F9E2BB5F746720 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c5:f3:64:f9:e2:bb:5f:74:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=a3c9cd7d-1634-4fb4-a346-45aac2f9bd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:12:39:e7:a4:ae:0b:6c:51:5f:f6:c0:3c: 33:8b:e6:02:5b:ff:70:45:a7:12:e3:49:9f:15:ab: 8e:4b:c7:8e:ac:dc:69:ac:a8:68:7e:d8:55:68:7a: 9a:e9:27:00:98:49:ab:1e:c4:51:c5:a4:94:de:a2: b1:26:26:58:92:75:9a:58:c4:0b:8e:4a:50:93:34: 57:1a:c0:f8:0c:4f:f4:fa:7a:a4:1c:c3:07:87:2a: b9:ad:b8:6c:e4:38:c6:48:b3:b6:55:20:0d:48:cb: fc:b4:fe:74:28:fe:6b:54:6b:2c:04:b6:e0:60:72: e2:95:ce:01:9f:4b:c6:47:47:aa:38:27:e7:81:d0: 1f:f3:2e:bb:06:71:a5:83:6a:ca:bd:62:df:cb:a6: 97:fd:c3:90:cf:84:1b:cc:b7:4c:1b:ae:dd:28:1f: 86:4e:d4:04:85:a5:44:32:29:42:e6:fe:68:c0:1b: c5:d1:90:40:1d:58:10:bb:74:58:a5:ed:46:79:31: 82:48:11:3f:80:06:ef:a1:75:4d:14:4e:d3:5d:a0: 77:fd:05:b6:8a:f1:99:98:15:6b:6e:0f:b8:a7:17: f4:b7:d6:0f:c7:9e:6f:17:19:20:68:9a:13:14:d6: f8:ea:63:3a:63:da:32:b5:96:99:89:32:15:5a:12: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:C7:3E:C2:5A:5F:19:C7:03:73:10:A1:4C:E2:02:49:F7:36:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e8:0b:32:47:69:a7:77:3b:ea:f2:e3:f7:19:5c:14:f6:7f: a0:c5:e0:cf:14:ea:16:6a:1a:f1:8d:05:c4:70:f7:50:8f:94: 23:6e:cf:0a:d9:51:8b:39:13:c8:2b:5c:7b:27:6a:a4:59:34: 0b:37:26:62:c1:08:92:51:56:92:09:b3:ea:92:f2:c6:7a:76: 39:80:71:f6:90:77:61:27:a5:96:14:b4:10:8d:5e:42:52:20: fb:e9:0b:ef:1c:bf:d3:ae:a2:57:c8:c6:7e:65:18:03:2e:90: 48:bf:dd:8f:76:da:67:95:b6:f7:4a:64:34:00:0e:c1:82:0b: 98:15:0c:f7:09:71:33:de:a9:40:12:aa:db:88:cf:1e:42:36: 84:2f:dc:ab:de:38:15:7a:cf:4b:c7:3f:1f:4e:7d:d6:bc:ab: 88:92:eb:c3:75:15:33:ba:9c:9a:bb:5c:3b:70:5d:11:61:38: 02:7f:99:ff:74:7a:e5:d5:66:93:53:e3:67:9c:1d:9b:9d:2d: 50:dc:80:a5:31:a1:a8:3d:73:d1:82:2a:90:dc:96:90:6e:8f: 24:91:e0:39:8f:de:a3:f0:14:d5:5d:96:e0:12:2a:33:fe:e5: 21:a1:1b:ae:39:66:88:06:8d:ab:6a:8c:18:74:b6:b8:cd:2e: 63:db:c6:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsXzZPniu190ZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk YTNjOWNkN2QtMTYzNC00ZmI0LWEzNDYtNDVhYWMyZjliZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbgSOeekrgtsUV/2wDwzi+YCW/9wRacS40mf FauOS8eOrNxprKhofthVaHqa6ScAmEmrHsRRxaSU3qKxJiZYknWaWMQLjkpQkzRX GsD4DE/0+nqkHMMHhyq5rbhs5DjGSLO2VSANSMv8tP50KP5rVGssBLbgYHLilc4B n0vGR0eqOCfngdAf8y67BnGlg2rKvWLfy6aX/cOQz4QbzLdMG67dKB+GTtQEhaVE MilC5v5owBvF0ZBAHVgQu3RYpe1GeTGCSBE/gAbvoXVNFE7TXaB3/QW2ivGZmBVr bg+4pxf0t9YPx55vFxkgaJoTFNb46mM6Y9oytZaZiTIVWhI4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnCxz7CWl8ZxwNzEKFM4gJJ9za0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWNhZjMwNmEtZjk3My0z Njg2LWIzNzctMjk4YTc2ODg4NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGboCzJHaad3O+ry4/cZXBT2f6DF4M8U6hZqGvGNBcRw91CPlCNuzwrZ UYs5E8grXHsnaqRZNAs3JmLBCJJRVpIJs+qS8sZ6djmAcfaQd2EnpZYUtBCNXkJS IPvpC+8cv9OuolfIxn5lGAMukEi/3Y922meVtvdKZDQADsGCC5gVDPcJcTPeqUAS qtuIzx5CNoQv3KveOBV6z0vHPx9Ofda8q4iS68N1FTO6nJq7XDtwXRFhOAJ/mf90 euXVZpNT42ecHZudLVDcgKUxoag9c9GCKpDclpBujySR4DmP3qPwFNVdluASKjP+ 5SGhG645ZogGjatqjBh0trjNLmPbxiM= -----END CERTIFICATE-----Generated at Tue Jun 17 18:21:24 2025 by rpki-client