$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa File: d3d4e8bf-bf55-38de-9130-ab101d948b21.roa (raw, json) Hash identifier: UD5OSx3/6PuePp+hvSD+cSG1kRFeAcp5DMa5mQeR0qI= Subject key identifier: 2A:E2:72:D5:CC:44:35:60:B7:C2:D1:54:08:35:F5:07:3A:9C:7C:70 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF340AE254778B7295FD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:0a:e2:54:77:8b:72:95:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=5538dd32-ba4d-4e65-aa4f-294b5584f715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:6e:f9:04:c6:8e:b8:cf:92:0a:db:5a:f1: a9:5a:52:32:7c:03:d8:a8:9d:15:cf:6d:aa:aa:7c: 84:28:e7:8e:13:03:8f:1d:94:4a:6c:12:e1:fd:d3: 01:b0:2c:9a:94:9b:79:09:57:85:c0:d7:fd:5a:aa: db:ed:93:3c:18:83:9b:4f:ad:78:eb:6d:04:41:4f: d5:ad:95:da:08:33:0a:bd:37:93:36:ed:28:0c:48: a5:ae:6f:d2:f4:2e:cb:78:7c:a6:a3:81:18:7b:f0: 3b:bc:4d:32:1d:f9:56:57:3a:86:59:7a:3d:b7:e9: 5f:f0:bc:51:5c:61:0e:47:c4:29:16:fb:56:be:65: 75:d7:28:31:d6:e8:80:13:e4:76:19:c6:c8:95:ba: 15:82:6e:8f:24:b8:18:98:23:f6:21:8d:13:e0:d5: 5f:fe:8f:54:70:50:d5:16:e0:05:cc:a5:c6:6e:ea: 41:6b:4b:3c:c5:77:ab:5b:26:8b:26:66:3c:46:a2: ee:5c:59:a4:02:06:57:5a:81:38:02:ae:a3:3b:a5: 0e:48:76:ca:19:5e:30:35:1a:ab:b6:06:57:d9:29: 64:60:e2:8d:1d:4e:b2:10:7c:13:37:32:67:47:a8: 93:70:5c:be:64:8d:7c:5e:3b:2f:56:7e:83:a5:f4: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:72:D5:CC:44:35:60:B7:C2:D1:54:08:35:F5:07:3A:9C:7C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:e9:7e:15:6d:a8:a6:c0:0b:a5:4e:3f:76:24:b9:da:d0: 68:32:06:d6:b5:ee:15:c6:fe:e5:4d:f7:8f:6a:9f:97:e0:bd: db:55:50:8b:d7:38:da:5c:9d:7b:83:b3:82:04:33:ba:98:af: 65:09:a0:92:11:06:03:64:4d:21:91:09:f4:75:7b:75:ed:7d: 96:ee:71:90:ae:47:a7:cd:09:5a:ce:b2:c4:8e:eb:8f:58:33: eb:95:1d:b2:71:f5:74:d5:88:e9:c8:04:90:32:8b:63:a8:c9: 73:19:8f:f6:99:7c:e4:30:75:56:0c:cb:88:5c:85:76:93:4b: 06:55:80:ae:61:bc:61:08:91:ec:9b:ea:ce:83:06:3a:c1:f0: a7:86:75:1c:65:d5:82:c9:e0:77:84:91:eb:a5:32:85:a0:10: 61:17:e8:23:15:e0:7f:73:3c:72:03:06:42:74:d8:93:cb:ca: 49:d5:7c:45:98:e8:01:b4:ef:e1:ce:d1:49:a4:b3:8e:32:24: 1a:c3:01:f7:67:9d:eb:61:0b:87:a7:a3:e7:4a:05:ec:a6:dc: 54:b6:8c:b6:32:a1:6f:6d:32:bb:3c:7c:5f:5f:ff:6a:ef:e9: 62:74:f4:77:3e:21:0d:4b:e8:d6:8a:17:8a:fd:b2:8d:99:a6: 54:5e:a8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzQK4lR3i3KV/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTUzOGRkMzItYmE0ZC00ZTY1LWFhNGYtMjk0YjU1ODRmNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF9u+QTGjrjPkgrbWvGpWlIyfAPYqJ0Vz22q qnyEKOeOEwOPHZRKbBLh/dMBsCyalJt5CVeFwNf9Wqrb7ZM8GIObT614620EQU/V rZXaCDMKvTeTNu0oDEilrm/S9C7LeHymo4EYe/A7vE0yHflWVzqGWXo9t+lf8LxR XGEOR8QpFvtWvmV11ygx1uiAE+R2GcbIlboVgm6PJLgYmCP2IY0T4NVf/o9UcFDV FuAFzKXGbupBa0s8xXerWyaLJmY8RqLuXFmkAgZXWoE4Aq6jO6UOSHbKGV4wNRqr tgZX2SlkYOKNHU6yEHwTNzJnR6iTcFy+ZI18XjsvVn6DpfRQdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrictXMRDVgt8LRVAg19Qc6nHxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNkNGU4YmYtYmY1NS0z OGRlLTkxMzAtYWIxMDFkOTQ4YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVw6X4VbaimwAulTj92JLna0GgyBta17hXG/uVN949qn5fgvdtVUIvX ONpcnXuDs4IEM7qYr2UJoJIRBgNkTSGRCfR1e3XtfZbucZCuR6fNCVrOssSO649Y M+uVHbJx9XTViOnIBJAyi2OoyXMZj/aZfOQwdVYMy4hchXaTSwZVgK5hvGEIkeyb 6s6DBjrB8KeGdRxl1YLJ4HeEkeulMoWgEGEX6CMV4H9zPHIDBkJ02JPLyknVfEWY 6AG07+HO0Umks44yJBrDAfdnnethC4eno+dKBeym3FS2jLYyoW9tMrs8fF9f/2rv 6WJ09Hc+IQ1L6NaKF4r9so2ZplReqIA= -----END CERTIFICATE-----Generated at Sun Apr 27 13:19:07 2025 by rpki-client