$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa File: d0a7225f-2047-3944-a23d-469eab9df0ec.roa (raw, json) Hash identifier: HxRaOxj3RcBLCON3ddF3VsKF9yqCKiCcvjQqIRlnflE= Subject key identifier: B2:97:4B:D8:81:84:AD:B2:FE:E8:34:9B:6C:54:18:46:03:D2:9F:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01EF79A1077DD1BB1AF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:f7:9a:10:77:dd:1b:b1:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=95cab814-3e59-42cb-b9f2-3e3e0a42f3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:10:6e:d7:d8:e2:49:1c:82:56:44:e8:13: 50:35:54:4c:c0:dd:c0:e4:aa:d6:6a:59:b3:80:cb: 27:7e:7a:2d:56:60:fa:24:33:ad:e8:36:08:03:09: 57:6e:03:21:0a:5d:8e:1b:4f:83:56:4a:f5:1e:8c: 00:4a:c1:8f:ce:05:8a:e7:a0:19:22:ac:6c:7c:05: 98:5b:b8:28:28:a5:27:ba:ea:03:ca:3e:1e:02:01: d2:96:90:dc:1e:88:b0:0d:63:53:05:1f:09:dc:5d: 23:53:a6:5c:da:58:10:fa:38:f3:61:27:14:d4:a5: 0d:c7:2e:a3:a5:39:49:fe:07:c4:0a:24:68:e5:ca: d3:ab:6d:42:1b:ab:b8:bc:43:3b:c2:19:53:3a:9e: 33:9f:b6:e6:22:06:85:fa:d4:c1:ff:0e:bc:29:c2: a1:e2:2d:73:6e:b9:e4:92:85:16:ff:6e:e0:9a:bf: c4:18:18:5f:ba:c1:c4:c4:ae:75:ab:b7:58:ce:e3: c9:75:c5:2c:b0:1c:1a:47:4b:a5:38:0b:e0:ae:c9: 45:e4:f5:93:a9:14:73:1c:91:b6:e9:7f:fc:b0:38: b0:88:c3:38:0f:ca:fa:8d:08:f3:69:4f:49:8e:c9: d4:be:2f:5d:64:46:14:03:80:54:56:55:ae:45:b1: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:97:4B:D8:81:84:AD:B2:FE:E8:34:9B:6C:54:18:46:03:D2:9F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b4:6c:5b:9e:2e:85:08:06:cc:8f:50:6a:2b:ab:c4:b8:df: f5:14:21:70:ea:15:b6:d1:3a:28:5c:b6:ee:d8:5d:a8:92:31: ab:5a:69:c6:3a:33:d2:02:f0:7f:56:82:7d:55:9b:96:c5:1b: 0b:cf:91:78:0b:0f:21:3b:bc:2e:75:6a:37:71:64:79:c0:ab: eb:31:27:2b:c6:f4:a8:6c:ad:b7:82:ed:52:c8:96:cd:b8:c2: 7e:18:7d:18:5f:72:40:c1:f8:0c:db:7e:6c:5f:5c:f5:3e:47: e1:75:88:3d:aa:a0:a2:51:f9:da:1f:66:b5:30:90:fe:23:b5: 29:b9:b2:05:47:55:d8:c2:45:0f:ec:f3:39:28:b3:3f:3e:5f: fd:2e:15:b9:fd:eb:8f:57:e1:bb:9a:b9:cf:aa:27:5e:ac:8f: cb:35:c9:86:b4:d1:36:48:ed:ce:cd:91:a0:3b:cf:20:4b:6f: 3e:c1:97:df:f7:ab:e4:db:27:77:fb:96:ec:f6:9b:67:36:42: 72:27:df:58:30:d8:14:58:e9:e8:39:12:8a:cf:04:eb:f4:b1: b3:93:11:4b:16:65:62:5c:75:8d:ca:0e:85:ed:4b:42:12:70: 58:bc:50:9f:5b:6c:0e:7b:d0:b1:9e:87:b0:36:cd:c2:da:43: 75:d5:0b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB73mhB33Ruxr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OTVjYWI4MTQtM2U1OS00MmNiLWI5ZjItM2UzZTBhNDJmM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkQQbtfY4kkcglZE6BNQNVRMwN3A5KrWalmz gMsnfnotVmD6JDOt6DYIAwlXbgMhCl2OG0+DVkr1HowASsGPzgWK56AZIqxsfAWY W7goKKUnuuoDyj4eAgHSlpDcHoiwDWNTBR8J3F0jU6Zc2lgQ+jjzYScU1KUNxy6j pTlJ/gfECiRo5crTq21CG6u4vEM7whlTOp4zn7bmIgaF+tTB/w68KcKh4i1zbrnk koUW/27gmr/EGBhfusHExK51q7dYzuPJdcUssBwaR0ulOAvgrslF5PWTqRRzHJG2 6X/8sDiwiMM4D8r6jQjzaU9JjsnUvi9dZEYUA4BUVlWuRbFZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKXS9iBhK2y/ug0m2xUGEYD0p+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDBhNzIyNWYtMjA0Ny0z OTQ0LWEyM2QtNDY5ZWFiOWRmMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+0bFueLoUIBsyPUGorq8S43/UUIXDqFbbROihctu7YXaiSMataacY6 M9IC8H9Wgn1Vm5bFGwvPkXgLDyE7vC51ajdxZHnAq+sxJyvG9KhsrbeC7VLIls24 wn4YfRhfckDB+AzbfmxfXPU+R+F1iD2qoKJR+dofZrUwkP4jtSm5sgVHVdjCRQ/s 8zkosz8+X/0uFbn9649X4buauc+qJ16sj8s1yYa00TZI7c7NkaA7zyBLbz7Bl9/3 q+TbJ3f7luz2m2c2QnIn31gw2BRY6eg5EorPBOv0sbOTEUsWZWJcdY3KDoXtS0IS cFi8UJ9bbA570LGeh7A2zcLaQ3XVC50= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:59 2025 by rpki-client