$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa File: b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa (raw, json) Hash identifier: lMvITK9wXlWyUrNhIOkvU6H+nS5f9DBzsnLKuNRH2IY= Subject key identifier: ED:86:52:EB:0F:2A:10:F4:B0:AC:08:A3:82:1A:57:B7:BB:2D:FB:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA73AE4D2EC2DD3630E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:3a:e4:d2:ec:2d:d3:63:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d67f8acd-740d-4760-9d40-14d1ebb0f8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:47:ac:bc:c2:0d:f4:fa:d1:07:e6:39:99: 71:c6:ec:a7:f7:45:12:c9:e3:62:e5:37:c3:b1:9f: 92:df:a1:2b:9b:7d:3b:26:4a:ab:4c:83:4b:e7:e1: ba:11:e5:9a:77:c1:ad:a5:b7:e1:48:fd:b7:d5:b0: 31:b0:23:01:5b:3b:61:b3:82:49:fa:49:2f:1a:76: 9d:15:13:e5:d9:ae:8a:1e:c3:cc:98:47:ae:e3:54: e4:52:1f:40:6c:db:d5:89:88:23:04:66:d5:bb:b9: 5b:86:02:c3:8a:dc:71:22:c4:53:58:97:9a:37:dc: be:c2:10:91:26:e6:cb:20:50:0d:0a:61:10:e9:3c: b3:6a:c8:d6:91:83:c4:8e:00:5d:f5:9e:08:d8:f5: 9d:8b:da:c1:3c:cb:64:e2:ec:bc:af:2d:9d:d4:65: be:fe:8b:76:be:22:5f:2c:db:c3:18:af:3b:1c:da: d1:b4:38:65:04:09:cb:1a:8e:9a:62:37:01:93:cd: 92:be:ba:ae:67:3b:53:f5:51:10:51:0f:f7:b8:fe: cc:53:cd:b3:ab:e9:19:19:9c:52:f7:68:65:e2:9c: 2e:fa:af:43:71:a8:0d:b0:50:28:be:61:ba:45:7b: d4:0c:39:a7:f5:2e:f0:be:43:36:48:fd:9f:f9:e3: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:86:52:EB:0F:2A:10:F4:B0:AC:08:A3:82:1A:57:B7:BB:2D:FB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b2bc358f-c842-379c-acb8-c59d49fe1b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b9:be:b3:58:8b:6e:8e:78:b9:bc:4e:02:7b:b2:9a:26:69: 41:15:2d:43:d7:9f:06:1c:ff:18:44:3b:31:4a:5f:f9:c8:b8: b6:da:b4:fe:8a:fd:de:b7:c5:e4:9a:d7:4e:f2:93:6d:92:24: ef:27:50:58:51:2e:35:20:74:fb:3f:d2:5e:66:f7:12:57:05: af:aa:e2:1c:98:21:71:a8:6c:e8:d0:93:8b:a6:a7:ec:79:21: a7:8c:44:fe:cb:2d:07:8a:1a:96:99:99:86:91:f8:9e:2d:e9: e6:01:4e:02:7f:ee:9e:bc:7e:fa:3f:53:cd:78:aa:2e:73:c0: da:06:8e:29:37:b7:5a:1d:34:d6:d3:9a:03:fb:a6:de:36:3f: 63:55:59:b6:75:18:52:57:e0:df:ef:4f:35:27:2e:e7:a3:4e: 24:a6:08:83:79:80:43:00:31:38:0c:25:17:3b:de:8f:31:d8: 63:80:bc:29:fd:4a:fb:f8:85:fd:51:45:e9:0a:1f:87:e6:bc: 7b:d4:f2:3c:82:7b:e0:47:8f:99:93:0b:e7:a0:3b:07:06:b6: 08:cc:c3:57:e3:e2:52:da:72:17:ef:b4:34:bc:d0:13:a8:26: b1:1b:8c:e6:0f:36:c6:2c:5f:2c:55:9c:b3:a8:1f:23:03:e5: 5c:85:ff:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6c65NLsLdNjDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDY3ZjhhY2QtNzQwZC00NzYwLTlkNDAtMTRkMWViYjBmOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6dHrLzCDfT60QfmOZlxxuyn90USyeNi5TfD sZ+S36Erm307JkqrTINL5+G6EeWad8GtpbfhSP231bAxsCMBWzths4JJ+kkvGnad FRPl2a6KHsPMmEeu41TkUh9AbNvViYgjBGbVu7lbhgLDitxxIsRTWJeaN9y+whCR JubLIFANCmEQ6TyzasjWkYPEjgBd9Z4I2PWdi9rBPMtk4uy8ry2d1GW+/ot2viJf LNvDGK87HNrRtDhlBAnLGo6aYjcBk82SvrquZztT9VEQUQ/3uP7MU82zq+kZGZxS 92hl4pwu+q9DcagNsFAovmG6RXvUDDmn9S7wvkM2SP2f+eMjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2GUusPKhD0sKwIo4IaV7e7LfsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjJiYzM1OGYtYzg0Mi0z NzljLWFjYjgtYzU5ZDQ5ZmUxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS5vrNYi26OeLm8TgJ7spomaUEVLUPXnwYc/xhEOzFKX/nIuLbatP6K /d63xeSa107yk22SJO8nUFhRLjUgdPs/0l5m9xJXBa+q4hyYIXGobOjQk4ump+x5 IaeMRP7LLQeKGpaZmYaR+J4t6eYBTgJ/7p68fvo/U814qi5zwNoGjik3t1odNNbT mgP7pt42P2NVWbZ1GFJX4N/vTzUnLuejTiSmCIN5gEMAMTgMJRc73o8x2GOAvCn9 Svv4hf1RRekKH4fmvHvU8jyCe+BHj5mTC+egOwcGtgjMw1fj4lLachfvtDS80BOo JrEbjOYPNsYsXyxVnLOoHyMD5VyF/1Q= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:55 2025 by rpki-client