$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa File: c8a8728a-6384-37c5-8183-84d8806052ce.roa (raw, json) Hash identifier: yBjJItj9ew1Kg5/YR5nHOewAW8D7eFeaiakYyVwCp1I= Subject key identifier: 27:1F:17:57:68:1C:A1:10:84:CA:24:52:B4:00:47:CD:25:86:D5:51 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A119AC62296A55CC69007AE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c6:22:96:a5:5c:c6:90:07:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=df8d4644-c52c-48bf-8986-ffaa498d79e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:a0:96:9a:d0:57:41:a0:c5:c5:4d:13:b7: a3:c1:35:3a:3c:4e:61:2a:e6:d7:2a:7d:39:cd:59: ac:98:65:e3:7c:e3:f0:d7:b6:97:3a:57:da:36:eb: e7:d9:23:af:8d:2b:33:3f:c3:4c:7a:52:d7:b7:00: 31:e2:56:ae:1a:2d:bc:f3:70:91:87:64:98:ad:a7: 11:49:21:bf:84:a2:88:52:c1:5d:1b:09:41:3d:44: 65:3b:d5:9a:f6:77:b5:d7:28:f4:42:66:ec:aa:00: c4:3e:3b:e5:35:ee:f8:3c:b6:37:e3:bc:12:a0:de: 04:ec:97:ab:e0:1c:aa:3d:c1:9e:9b:a1:6b:39:79: 80:72:ef:fb:97:cc:09:da:e3:09:40:88:08:e7:38: c2:b0:81:07:41:10:94:6f:75:06:b6:38:48:f3:6f: 85:ca:94:0a:31:b2:8f:27:70:f9:5d:36:b8:3e:bc: e2:53:5e:f2:67:90:fe:76:ab:1a:f3:be:6c:03:52: 01:97:ff:1d:46:4f:eb:c9:0b:1e:22:d0:63:31:2a: d5:c8:39:03:da:fd:02:7b:cd:db:c1:86:ab:9c:28: b2:e7:10:d5:72:8f:14:34:7d:b8:e0:98:83:3f:19: 20:fa:aa:9a:7b:78:1c:b9:d6:99:a9:53:a7:aa:b3: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:17:57:68:1C:A1:10:84:CA:24:52:B4:00:47:CD:25:86:D5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9a:f6:00:59:5f:2b:ff:e9:5c:22:00:a8:3a:c8:10:2e:aa: f6:08:27:5e:a9:b0:53:33:06:af:a9:d8:14:92:01:1a:87:01: 8b:81:53:54:4e:d5:11:3e:41:3e:62:a4:2f:cd:8b:f5:a7:19: 3d:dd:19:31:2e:1b:3e:75:74:e7:39:4a:cb:92:05:2a:af:11: ce:ab:b5:29:78:9a:d3:ec:e9:58:1f:4e:b7:a1:0c:15:ab:b5: 77:19:57:44:53:88:1f:b9:c6:4e:47:97:93:cb:52:14:66:9a: cc:0c:aa:25:bd:49:eb:44:07:ec:33:e9:10:0b:8c:ad:f6:21: 9b:13:59:48:67:40:20:fd:f2:35:49:9a:e9:ab:8b:25:92:4f: df:c2:ba:a5:b3:ce:b8:de:d4:f8:3b:a6:69:9b:b2:d3:73:cc: ef:02:fe:4a:bc:d5:e6:2a:c8:96:4a:79:f5:cb:a0:a5:da:ec: d4:3d:ce:32:f3:36:84:78:cf:1e:6a:86:3c:6e:2e:70:ad:dc: 17:59:f8:c7:9d:0d:cf:21:06:41:65:30:84:84:9f:15:eb:6e: 93:1d:ec:42:30:35:bd:8d:06:44:c5:a5:c8:17:17:ca:81:18: d1:72:17:71:69:fa:f8:92:74:9d:c8:3e:d2:b1:80:a2:36:b9: b9:9e:30:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsYilqVcxpAHroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGY4ZDQ2NDQtYzUyYy00OGJmLTg5ODYtZmZhYTQ5OGQ3OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkieglprQV0GgxcVNE7ejwTU6PE5hKubXKn05 zVmsmGXjfOPw17aXOlfaNuvn2SOvjSszP8NMelLXtwAx4lauGi2883CRh2SYracR SSG/hKKIUsFdGwlBPURlO9Wa9ne11yj0QmbsqgDEPjvlNe74PLY347wSoN4E7Jer 4ByqPcGem6FrOXmAcu/7l8wJ2uMJQIgI5zjCsIEHQRCUb3UGtjhI82+FypQKMbKP J3D5XTa4PrziU17yZ5D+dqsa875sA1IBl/8dRk/ryQseItBjMSrVyDkD2v0Ce83b wYarnCiy5xDVco8UNH244JiDPxkg+qqae3gcudaZqVOnqrNbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcfF1doHKEQhMokUrQAR80lhtVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzhhODcyOGEtNjM4NC0z N2M1LTgxODMtODRkODgwNjA1MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGa9gBZXyv/6VwiAKg6yBAuqvYIJ16psFMzBq+p2BSSARqHAYuBU1RO 1RE+QT5ipC/Ni/WnGT3dGTEuGz51dOc5SsuSBSqvEc6rtSl4mtPs6VgfTrehDBWr tXcZV0RTiB+5xk5Hl5PLUhRmmswMqiW9SetEB+wz6RALjK32IZsTWUhnQCD98jVJ mumriyWST9/CuqWzzrje1Pg7pmmbstNzzO8C/kq81eYqyJZKefXLoKXa7NQ9zjLz NoR4zx5qhjxuLnCt3BdZ+MedDc8hBkFlMISEnxXrbpMd7EIwNb2NBkTFpcgXF8qB GNFyF3Fp+viSdJ3IPtKxgKI2ubmeMKE= -----END CERTIFICATE-----Generated at Mon Jun 16 12:03:41 2025 by rpki-client