$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa File: c5213a05-0625-3375-8382-9c42d5a3e1cb.roa (raw, json) Hash identifier: /cJAvR9AiblYlR4cm6yWqwgJC9/I2yop5Gmj/Mf0epM= Subject key identifier: 93:33:FD:92:39:D4:74:6E:26:D3:45:47:B9:2C:04:12:20:35:29:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A76C27D8E7267752848 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:76:c2:7d:8e:72:67:75:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=37027b8b-eab8-4820-a51c-749611e79ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:5f:31:cc:f0:9b:86:27:e7:e8:46:27:11: 64:e9:b2:22:70:8d:bc:02:0a:42:24:33:45:3f:29: 03:17:68:ad:52:06:a4:3c:d7:f3:cf:c0:6d:78:7d: 9c:8f:47:bc:5a:61:48:1d:fd:9e:5d:b8:a7:7a:9d: 5b:70:98:a5:f3:b4:9a:a5:c4:32:f6:4f:a5:0c:7e: d5:c2:a5:2d:b5:09:8d:52:1d:56:44:b9:c5:2d:cd: 39:61:aa:79:96:bd:57:99:35:94:ed:7b:1e:1f:cb: 69:ac:b7:9b:05:6c:48:49:1c:7e:13:e1:6e:81:2e: 68:87:ff:51:e1:ea:02:6e:60:49:21:5b:4a:3e:48: 3c:99:45:23:eb:29:b5:a5:93:a5:f1:1b:9a:a4:11: 69:69:b3:17:d1:4e:8c:ef:e3:fd:9a:f7:b0:51:36: ab:d3:d6:70:40:21:35:26:b4:65:5b:24:cf:32:39: 4e:b5:01:e8:69:32:68:cb:7e:fb:5a:8c:1a:dc:4f: 1d:82:8a:5c:d7:39:8e:a9:49:a3:00:a1:95:75:76: f2:34:8a:a5:17:06:f4:a4:0f:69:13:89:1c:eb:ce: 59:fb:ba:29:e9:54:6d:8b:24:ae:3c:3a:06:2a:91: ba:d6:50:22:bb:c6:39:b4:e8:59:98:e5:2d:a0:11: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:33:FD:92:39:D4:74:6E:26:D3:45:47:B9:2C:04:12:20:35:29:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:86:cc:9b:c4:2b:46:7a:89:21:c6:50:49:00:b8:70:eb: 55:c0:9a:76:36:1e:9f:66:6a:af:8b:02:a2:a4:e4:05:95:0d: 65:3c:7f:5f:24:ef:98:d7:30:45:e2:df:51:ed:f5:31:5c:8b: e4:33:87:49:0d:78:79:aa:ba:3d:c0:ea:4a:de:10:57:fe:52: 71:57:83:ea:bd:97:b1:03:13:f1:82:52:6e:3b:d9:0b:4a:0e: 7e:e0:2e:2e:2e:25:2c:f8:e9:c7:cf:95:ed:73:30:d0:fc:b1: 29:b5:e2:85:dc:7e:34:d0:5d:96:6a:a8:e2:4d:ec:5c:da:ce: 91:4c:16:1f:9b:45:de:0b:2c:e0:79:60:37:41:a3:47:d9:10: 38:62:f5:7e:f0:2d:b4:96:7e:5d:a8:18:69:e6:c9:f9:51:79: 7a:43:bd:ac:dc:fa:8e:35:dd:1a:6b:59:65:72:d9:4d:ed:e1: 8f:14:f8:40:da:19:72:4d:7e:09:24:a9:50:be:9b:81:8b:a9: 9a:b2:d9:9b:01:3d:43:c5:8b:33:7a:69:96:57:22:e3:e9:2c: 79:8c:79:b0:cf:83:c0:d3:39:23:c4:86:36:12:9f:8f:ab:5c: 20:d6:92:f2:67:9b:b7:01:c2:9c:53:c0:d2:92:44:00:b8:ee: 4a:cb:40:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnp2wn2Ocmd1KEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzcwMjdiOGItZWFiOC00ODIwLWE1MWMtNzQ5NjExZTc5ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqNfMczwm4Yn5+hGJxFk6bIicI28AgpCJDNF PykDF2itUgakPNfzz8BteH2cj0e8WmFIHf2eXbinep1bcJil87SapcQy9k+lDH7V wqUttQmNUh1WRLnFLc05Yap5lr1XmTWU7XseH8tprLebBWxISRx+E+FugS5oh/9R 4eoCbmBJIVtKPkg8mUUj6ym1pZOl8RuapBFpabMX0U6M7+P9mvewUTar09ZwQCE1 JrRlWyTPMjlOtQHoaTJoy377Wowa3E8dgopc1zmOqUmjAKGVdXbyNIqlFwb0pA9p E4kc685Z+7op6VRtiySuPDoGKpG61lAiu8Y5tOhZmOUtoBF96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMz/ZI51HRuJtNFR7ksBBIgNSkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzUyMTNhMDUtMDYyNS0z Mzc1LTgzODItOWM0MmQ1YTNlMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpfhsybxCtGeokhxlBJALhw61XAmnY2Hp9maq+LAqKk5AWVDWU8f18k 75jXMEXi31Ht9TFci+Qzh0kNeHmquj3A6kreEFf+UnFXg+q9l7EDE/GCUm472QtK Dn7gLi4uJSz46cfPle1zMND8sSm14oXcfjTQXZZqqOJN7FzazpFMFh+bRd4LLOB5 YDdBo0fZEDhi9X7wLbSWfl2oGGnmyflReXpDvazc+o413RprWWVy2U3t4Y8U+EDa GXJNfgkkqVC+m4GLqZqy2ZsBPUPFizN6aZZXIuPpLHmMebDPg8DTOSPEhjYSn4+r XCDWkvJnm7cBwpxTwNKSRAC47krLQM4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:15 2025 by rpki-client