$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json) Hash identifier: p23680Tvnqn0NlpfirCuMtOYHXWC2nN9bt0e/EVHy4A= Subject key identifier: EB:C5:45:5D:64:2D:94:0B:F6:BA:D1:42:2A:A0:B4:4C:8C:4A:72:8E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A597CEC56D9BA5BBB40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:59:7c:ec:56:d9:ba:5b:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=659b5cd4-f1ee-42a6-a88f-cc885fcaf673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:52:78:c6:7f:d4:bb:f3:7d:05:36:4b:0b: 09:76:da:08:cd:46:d8:4d:cf:fe:b7:a0:b9:fc:f2: 7e:d5:61:d4:83:28:10:77:ca:d7:7a:5d:ff:33:04: 15:5d:a9:49:de:dc:de:d4:e8:76:c5:48:25:a2:e2: 75:fe:7b:a4:75:6a:48:7d:1e:49:33:82:12:9c:6f: 07:a4:09:76:a2:94:6f:ae:dd:fb:2d:4a:42:32:ce: db:a3:3c:5f:56:25:0a:fd:41:6f:a2:c0:f9:6e:c9: db:d2:47:80:f4:85:3f:12:0e:89:7d:62:95:d6:12: 34:6a:d6:9c:45:f8:5a:f8:50:f3:b8:4a:94:db:71: 5a:ba:d0:5f:07:f5:8c:7e:e3:cf:c9:8d:36:04:fd: 91:7b:ce:e4:dd:1c:c6:5e:7d:ed:ad:2e:9f:31:b0: 13:ff:81:40:e7:38:28:81:d1:fa:2e:10:5c:2e:33: c8:5d:dc:b6:24:55:fa:9b:7e:88:17:c3:7d:ff:77: 30:aa:71:4b:95:fe:ad:94:f8:77:6f:5d:6d:2f:10: 9b:e9:84:0a:79:0b:f3:9f:a5:99:b0:0d:66:36:a0: 65:95:5e:06:8c:1a:40:a7:88:67:a8:31:87:d3:35: 19:8d:e9:b8:a2:c8:25:69:2b:ca:8c:9b:6b:3d:b6: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:45:5D:64:2D:94:0B:F6:BA:D1:42:2A:A0:B4:4C:8C:4A:72:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f4:60:41:4f:f5:30:23:94:c9:93:c2:02:54:b5:c6:38:86: 60:73:49:df:2c:e8:f9:4f:c4:e8:35:c7:e0:69:a0:be:91:d7: c0:8f:7d:c4:45:6f:52:be:5f:67:12:80:4a:d7:28:d1:7d:f8: f6:4d:eb:e4:59:58:c7:43:b9:27:6c:54:cc:8c:7a:f2:5e:40: 24:c3:12:af:ed:7f:0a:21:c3:69:f4:44:f5:b5:55:dc:76:e0: 9f:4f:c6:d4:e1:d5:7e:4c:19:b8:51:f4:b0:fa:fb:a2:19:4c: 9b:98:35:b8:3a:58:49:89:3c:c6:24:2b:f4:9f:6b:99:d9:e7: 63:e2:ad:ad:c0:ad:82:29:18:27:25:b9:70:18:d7:8d:0e:26: 1a:e7:59:d0:fa:9c:e6:0d:ab:02:4e:81:0e:f6:ef:65:d5:98: a9:6b:f2:ab:fb:40:32:ea:b1:5d:6e:0c:e6:da:33:cc:9f:f3: f3:08:e8:a8:bc:29:c7:05:37:b6:f7:a5:b5:37:9e:b0:e9:79: 09:63:51:8f:77:60:f5:07:71:d0:1a:e5:0f:57:15:67:e8:13: c2:57:53:01:70:35:cf:12:9a:9d:5c:aa:9e:3a:9a:a8:ac:e5: 8f:07:1e:56:cb:de:c5:d0:94:12:e3:af:02:59:9d:08:75:ee: a1:bf:2c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnpZfOxW2bpbu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjU5YjVjZDQtZjFlZS00MmE2LWE4OGYtY2M4ODVmY2FmNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFSeMZ/1LvzfQU2SwsJdtoIzUbYTc/+t6C5 /PJ+1WHUgygQd8rXel3/MwQVXalJ3tze1Oh2xUglouJ1/nukdWpIfR5JM4ISnG8H pAl2opRvrt37LUpCMs7bozxfViUK/UFvosD5bsnb0keA9IU/Eg6JfWKV1hI0atac Rfha+FDzuEqU23FautBfB/WMfuPPyY02BP2Re87k3RzGXn3trS6fMbAT/4FA5zgo gdH6LhBcLjPIXdy2JFX6m36IF8N9/3cwqnFLlf6tlPh3b11tLxCb6YQKeQvzn6WZ sA1mNqBllV4GjBpAp4hnqDGH0zUZjem4osglaSvKjJtrPbYD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvFRV1kLZQL9rrRQiqgtEyMSnKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD0YEFP9TAjlMmTwgJUtcY4hmBzSd8s6PlPxOg1x+BpoL6R18CPfcRF b1K+X2cSgErXKNF9+PZN6+RZWMdDuSdsVMyMevJeQCTDEq/tfwohw2n0RPW1Vdx2 4J9PxtTh1X5MGbhR9LD6+6IZTJuYNbg6WEmJPMYkK/Sfa5nZ52Pira3ArYIpGCcl uXAY140OJhrnWdD6nOYNqwJOgQ7272XVmKlr8qv7QDLqsV1uDObaM8yf8/MI6Ki8 KccFN7b3pbU3nrDpeQljUY93YPUHcdAa5Q9XFWfoE8JXUwFwNc8Smp1cqp46mqis 5Y8HHlbL3sXQlBLjrwJZnQh17qG/LNw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:45 2025 by rpki-client